[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.216929] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.904166] random: sshd: uninitialized urandom read (32 bytes read) [ 35.268288] random: sshd: uninitialized urandom read (32 bytes read) [ 36.642282] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.24' (ECDSA) to the list of known hosts. [ 42.149067] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/08 07:22:56 fuzzer started [ 43.495687] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/08 07:22:58 dialing manager at 10.128.0.26:43659 [ 67.667393] can: request_module (can-proto-0) failed. [ 67.677973] can: request_module (can-proto-0) failed. 2018/06/08 07:23:23 kcov=true, comps=false 07:23:28 executing program 0: 07:23:28 executing program 1: 07:23:28 executing program 7: 07:23:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="0000f4b10099f05f8e90fd2e0e88956c1a129c478d710396a44a42294b82d54934e1bef42d024df2e60bd9c7752b68140725f6dc2ccb98f00300000099196279725d") getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 07:23:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') 07:23:29 executing program 6: unshare(0x24020400) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) 07:23:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x400000043) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) recvfrom$unix(r3, &(0x7f0000fe3fa0)=""/96, 0x10, 0x0, &(0x7f0000ff5ff8)=@abs, 0x709000) 07:23:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) [ 75.852929] IPVS: ftp: loaded support on port[0] = 21 [ 75.854489] IPVS: ftp: loaded support on port[0] = 21 [ 75.870361] IPVS: ftp: loaded support on port[0] = 21 [ 75.882578] IPVS: ftp: loaded support on port[0] = 21 [ 75.891707] IPVS: ftp: loaded support on port[0] = 21 [ 75.918263] IPVS: ftp: loaded support on port[0] = 21 [ 75.955598] IPVS: ftp: loaded support on port[0] = 21 [ 75.977603] IPVS: ftp: loaded support on port[0] = 21 [ 77.923337] ip (4696) used greatest stack depth: 54424 bytes left [ 78.420831] ip (4731) used greatest stack depth: 54328 bytes left [ 79.057302] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.063761] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.111101] device bridge_slave_0 entered promiscuous mode [ 79.279344] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.285815] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.320988] device bridge_slave_0 entered promiscuous mode [ 79.351821] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.358295] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.383506] device bridge_slave_1 entered promiscuous mode [ 79.400424] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.406884] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.440213] device bridge_slave_0 entered promiscuous mode [ 79.457557] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.464101] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.486194] device bridge_slave_0 entered promiscuous mode [ 79.505143] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.511604] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.534416] device bridge_slave_0 entered promiscuous mode [ 79.543970] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.550389] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.565733] device bridge_slave_0 entered promiscuous mode [ 79.577355] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.583817] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.593430] device bridge_slave_0 entered promiscuous mode [ 79.607715] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.614145] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.632997] device bridge_slave_1 entered promiscuous mode [ 79.645679] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.652131] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.688519] device bridge_slave_1 entered promiscuous mode [ 79.707156] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.713700] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.721885] device bridge_slave_1 entered promiscuous mode [ 79.729185] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.735623] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.747618] device bridge_slave_0 entered promiscuous mode [ 79.756628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.778917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.786458] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.792931] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.828001] device bridge_slave_1 entered promiscuous mode [ 79.851642] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.858147] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.893131] device bridge_slave_1 entered promiscuous mode [ 79.908598] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.915107] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.923337] device bridge_slave_1 entered promiscuous mode [ 79.934170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.958190] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.966534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.974564] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981021] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.015199] device bridge_slave_1 entered promiscuous mode [ 80.042526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.050252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.063518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.090384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.121371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.170225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.225707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.245539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.292119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.329895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.455446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.624694] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.698176] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.748273] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.831669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.842342] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.852214] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.942160] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.969360] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.988609] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.004486] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.022293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.045535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.073397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.201394] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.217902] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.227030] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.234806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.262858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.276465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.304809] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.313242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.325843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.353590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.361296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.373281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.384954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.432907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.439928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.457650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.468420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.503552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.513603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.524706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.562827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.597865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.605562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.628667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.653617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.678793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.699286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.743691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.750743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.768289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.791490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.830545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.854555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.049213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.078906] team0: Port device team_slave_0 added [ 82.165396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.185977] team0: Port device team_slave_0 added [ 82.207148] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.226177] team0: Port device team_slave_0 added [ 82.298393] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.307587] team0: Port device team_slave_0 added [ 82.325166] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.335998] team0: Port device team_slave_0 added [ 82.372717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.390294] team0: Port device team_slave_0 added [ 82.407342] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.422837] team0: Port device team_slave_0 added [ 82.431968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.445424] team0: Port device team_slave_1 added [ 82.468643] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.491318] team0: Port device team_slave_1 added [ 82.520212] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.528112] team0: Port device team_slave_1 added [ 82.540532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.559074] team0: Port device team_slave_1 added [ 82.586426] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.601863] team0: Port device team_slave_1 added [ 82.608363] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.625107] team0: Port device team_slave_0 added [ 82.633964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.653494] team0: Port device team_slave_1 added [ 82.664881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.672262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.687145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.715385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.728721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.739174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.746486] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 82.758137] team0: Port device team_slave_1 added [ 82.776998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.795467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.816709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.844452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.860686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.878748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.887173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.894484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.903196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.936619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.944198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 82.952595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.961753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 82.978362] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.000826] team0: Port device team_slave_1 added [ 83.013204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.020650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.028645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.046305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.091385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.126822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.143584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.154203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.161896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.169955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.177498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.185471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.193157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.200897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.213178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.220348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.228435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.243328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.256162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.268693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.288404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.308649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.327289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.343287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.353626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.364408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.377375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.388820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.399645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.444667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.464894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.474692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.483148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.491175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.499110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.511088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.519901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.529699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.538352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.554651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.564402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.577622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.584966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.596600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.631804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.659870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.674657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.688377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.697179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.705749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.714095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.721440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.730268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.738966] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.746709] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.776748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.785800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.802826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.839876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.872306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.900487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.911742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.924147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.932241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.944230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 83.964750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.988315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.003115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.020254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.029179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.038474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.050237] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.080104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.088272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.127549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.155256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.182017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.984708] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.991169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.997967] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.004406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.029227] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.037598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.074575] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.081026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.087843] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.094257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.132906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.143853] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.150254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.157015] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.163449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.178713] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.359934] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.366389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.373175] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.379581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.387520] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.407698] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.414156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.420941] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.427370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.441316] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.453620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.460117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.466921] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.473348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.489276] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.504558] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.510997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.517783] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.524190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.560111] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.567021] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.573506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.580290] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.586688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.595066] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.071587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.085475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.123829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.159825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.170300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.178203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.185825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.711385] ip (5723) used greatest stack depth: 54120 bytes left [ 94.495675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.703135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.763463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.796620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.875332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.007815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.025845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.050314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.337153] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.505956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.540901] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.611078] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.680194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.803255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.810989] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 95.901739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.157966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.164768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.178811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.289130] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.295458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.312691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.358356] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.364658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.379811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.437570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.443889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.457825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.558625] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.564997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.575277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.623457] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.629808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.640442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.681294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.687623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.726973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.759709] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.769427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.781536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.081362] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.185843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.252531] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.354327] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.404291] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.450103] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.482012] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.620478] 8021q: adding VLAN 0 to HW filter on device team0 07:23:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000100)='/\x00', 0x80) mount(&(0x7f0000000200)='../file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000480)) chroot(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000600)='./file0\x00') symlink(&(0x7f0000000400)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x2) 07:23:56 executing program 7: 07:23:56 executing program 5: 07:23:56 executing program 4: 07:23:56 executing program 3: 07:23:56 executing program 7: 07:23:56 executing program 5: 07:23:56 executing program 6: 07:23:56 executing program 0: 07:23:56 executing program 5: 07:23:56 executing program 2: 07:23:56 executing program 6: 07:23:56 executing program 4: 07:23:56 executing program 3: 07:23:56 executing program 7: 07:23:56 executing program 1: 07:23:56 executing program 0: 07:23:56 executing program 7: 07:23:56 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000480)) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)) 07:23:56 executing program 6: 07:23:56 executing program 5: 07:23:56 executing program 1: 07:23:56 executing program 4: 07:23:56 executing program 2: 07:23:57 executing program 7: 07:23:57 executing program 6: 07:23:57 executing program 0: 07:23:57 executing program 4: 07:23:57 executing program 1: 07:23:57 executing program 3: 07:23:57 executing program 5: 07:23:57 executing program 2: 07:23:57 executing program 7: 07:23:57 executing program 1: 07:23:57 executing program 6: 07:23:57 executing program 0: 07:23:57 executing program 5: 07:23:57 executing program 3: 07:23:57 executing program 2: 07:23:57 executing program 4: 07:23:57 executing program 5: 07:23:57 executing program 7: 07:23:57 executing program 1: 07:23:57 executing program 0: 07:23:57 executing program 6: 07:23:57 executing program 3: 07:23:57 executing program 2: 07:23:57 executing program 4: 07:23:57 executing program 7: 07:23:57 executing program 6: 07:23:57 executing program 5: 07:23:57 executing program 1: 07:23:57 executing program 0: 07:23:57 executing program 3: 07:23:57 executing program 2: 07:23:57 executing program 4: 07:23:57 executing program 7: 07:23:57 executing program 6: 07:23:58 executing program 0: 07:23:58 executing program 5: 07:23:58 executing program 1: 07:23:58 executing program 2: 07:23:58 executing program 4: 07:23:58 executing program 7: 07:23:58 executing program 6: 07:23:58 executing program 3: 07:23:58 executing program 0: 07:23:58 executing program 4: 07:23:58 executing program 1: 07:23:58 executing program 5: 07:23:58 executing program 2: 07:23:58 executing program 3: 07:23:58 executing program 7: 07:23:58 executing program 6: 07:23:58 executing program 0: 07:23:58 executing program 4: 07:23:58 executing program 2: 07:23:58 executing program 5: 07:23:58 executing program 1: 07:23:58 executing program 3: 07:23:58 executing program 7: 07:23:58 executing program 5: 07:23:58 executing program 2: 07:23:58 executing program 6: 07:23:58 executing program 4: 07:23:58 executing program 1: 07:23:58 executing program 0: 07:23:58 executing program 3: 07:23:58 executing program 2: 07:23:58 executing program 0: 07:23:58 executing program 4: 07:23:58 executing program 6: 07:23:58 executing program 5: 07:23:58 executing program 7: 07:23:58 executing program 1: 07:23:58 executing program 3: 07:23:59 executing program 4: 07:23:59 executing program 7: 07:23:59 executing program 2: 07:23:59 executing program 0: 07:23:59 executing program 5: 07:23:59 executing program 1: 07:23:59 executing program 6: 07:23:59 executing program 3: 07:23:59 executing program 7: 07:23:59 executing program 4: 07:23:59 executing program 6: 07:23:59 executing program 0: 07:23:59 executing program 1: 07:23:59 executing program 3: 07:23:59 executing program 5: 07:23:59 executing program 7: 07:23:59 executing program 2: 07:23:59 executing program 4: 07:23:59 executing program 6: 07:23:59 executing program 1: 07:23:59 executing program 3: 07:23:59 executing program 5: 07:23:59 executing program 0: 07:23:59 executing program 6: 07:23:59 executing program 7: 07:23:59 executing program 0: 07:23:59 executing program 1: 07:23:59 executing program 2: 07:23:59 executing program 4: 07:23:59 executing program 3: 07:23:59 executing program 5: 07:23:59 executing program 6: 07:23:59 executing program 1: 07:24:00 executing program 7: 07:24:00 executing program 0: 07:24:00 executing program 2: 07:24:00 executing program 5: 07:24:00 executing program 3: 07:24:00 executing program 4: 07:24:00 executing program 1: 07:24:00 executing program 6: 07:24:00 executing program 4: 07:24:00 executing program 7: 07:24:00 executing program 2: 07:24:00 executing program 3: 07:24:00 executing program 0: 07:24:00 executing program 1: 07:24:00 executing program 5: 07:24:00 executing program 6: 07:24:00 executing program 4: 07:24:00 executing program 7: 07:24:00 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001480)='/dev/ptmx\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x202, 0xdd) 07:24:00 executing program 5: 07:24:00 executing program 3: 07:24:00 executing program 1: 07:24:00 executing program 0: 07:24:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400001, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000080)=""/35) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) getpeername$packet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r4}) r5 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r3, r5, 0x22, &(0x7f0000000140)={0x2b, 0x1, 0x8000, 0x2}) connect(r1, &(0x7f0000eefff0)=@ethernet, 0x10) getsockname$packet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14) sendmsg$can_bcm(r1, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000000000000000000002d5b2ec027a5aaa54a0d", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000000b73a01c25e5076660117f0b6f227bff9dbf34111f46ea5d024ce91e03b29f6880330a228fb79676247d8c8d97c02ff555d2a20fa76e92c9bf12f78822617ba643135989b84fe469edde604d5edd35b3a30bc4ad59cf"], 0x48}, 0x1}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x0, 0xc, 0x3, 0x7ff, "4656a5b61e0c9a7fcb9efc4b6e4078aa72c88f7a5464b07744c362a52d69320a"}) 07:24:00 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0xa0ac, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x32, 0x80, 0x0, @in6={0xa, 0x4e23, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}]}, 0x38}, 0x1}, 0x20000000) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000211000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000030008000200000002000000e0000002000000000000000002000100000000000000dfffffff000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x88}, 0x1}, 0x0) 07:24:00 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x3) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000003a00)=""/4096) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x0, 0x11f, &(0x7f0000000040)}) 07:24:00 executing program 4: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.evm\x00', &(0x7f00000002c0)=""/4096, 0x1000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mremap(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000549000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x5) 07:24:00 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000880)}], 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c) 07:24:00 executing program 0: r0 = socket$inet6(0xa, 0xe, 0x8004) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x80, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x6, @empty, 0x5}, @in6={0xa, 0x4e24, 0x9, @empty, 0x10000}, @in6={0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffff7fff}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={r2, 0xfffffffffffffffd, 0x9, [0x800, 0x1f, 0x2, 0x6, 0x2ffb, 0x6, 0x100, 0xffff, 0x7]}, 0x1a) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x16d7, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @rand_addr=0x2}, {0x2, 0x4e21, @multicast1=0xe0000001}, 0x40, 0xc989, 0x9, 0x1, 0x100000000, &(0x7f0000000080)='ifb0\x00', 0x4, 0xde2, 0x5}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x10, &(0x7f00000000c0), 0x8) 07:24:00 executing program 1: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400400, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x30, 0x80, 0x1000}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r3, 0x1}, 0x8) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x31, &(0x7f0000000040)={0x0, 0x0, 0x5}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb1}, 0x8, 0x0) read(r4, &(0x7f0000481000)=""/128, 0x1d8) 07:24:00 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x420800, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x4000000009, 0xc8670aaceedbbb1) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000200)=[@rdma_dest={0x18, 0x114, 0x2}], 0x18}, 0x0) [ 106.861511] sctp: [Deprecated]: syz-executor0 (pid 6927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.861511] Use struct sctp_sack_info instead 07:24:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0xc0bc5310, &(0x7f0000000000)={0x84}) 07:24:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r2 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x20, 0x80) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000340)={0x8, 0x5, 0x9, 0x1ff, 0x800, 0x2, 0x2, 0x18309480, 0x5, 0x4, 0x86, 0x7}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@multicast1=0xe0000001, 0x4e21, 0x0, 0x4e21, 0xc72f, 0xa, 0x80, 0x9c70177a24f97eef, 0x83, r3, r4}, {0x7, 0x2, 0x3, 0x20, 0x101, 0x7fffffff, 0xffffffff, 0x8001}, {0x7b, 0x100, 0x2fc, 0x74a}, 0x7, 0x6e6bb7, 0x3, 0x1, 0x2, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2}, 0xa, @in=@broadcast=0xffffffff, 0x3505, 0x0, 0x48e58d701d1f0aaa, 0x101, 0x30, 0x6, 0x8}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 106.938000] sctp: [Deprecated]: syz-executor0 (pid 6932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.938000] Use struct sctp_sack_info instead 07:24:01 executing program 1: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400400, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x30, 0x80, 0x1000}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r3, 0x1}, 0x8) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x31, &(0x7f0000000040)={0x0, 0x0, 0x5}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb1}, 0x8, 0x0) read(r4, &(0x7f0000481000)=""/128, 0x1d8) 07:24:01 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000003000/0x2000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 07:24:01 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0xa0ac, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x32, 0x80, 0x0, @in6={0xa, 0x4e23, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}]}, 0x38}, 0x1}, 0x20000000) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000211000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000030008000200000002000000e0000002000000000000000002000100000000000000dfffffff000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x88}, 0x1}, 0x0) 07:24:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110001aa971810b00000000000000001800000000003a1f0000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x18) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={0x0, 0x80000000, 0x1, 0x9, &(0x7f0000000000/0x1000)=nil, 0x2}) 07:24:01 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)={0xfffffffffffffffc}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x7, 0x2, 'client1\x00', 0x1, "f207f82a90c07d1b", "3f771e21425625f1b30ce4c100011d532960e23bc3e11017baafbef48058b59a", 0x4}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000440)={0x101, 0xc, [0x540, 0x3, 0x5]}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000002c0)) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x54, 0x3) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000100)=""/186) 07:24:01 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000880)}], 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c) 07:24:01 executing program 4: r0 = add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="e2b41666d44e2d482c65a0a300e05a6512d782d0179946ba973648f532a1a848ba8dfd3dbd597a6065459f9c851c1c3712e49a0b8dbfdc998ee0a5c90df00ef0811de811ac7fbcdf131ab9e2e63c52e5dda086fcc57562afab80e82dc8a2adfc1ba4067b62f0c5", 0x67, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='\x00', 0x0, r0) r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="04", 0x1, r2) keyctl$search(0xa, r3, &(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, r0) keyctl$unlink(0x9, r1, r2) [ 107.796526] mmap: syz-executor2 (6958) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 07:24:01 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebffffffb907c645f4feffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf21152c002c6853622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c07040000000000935b0d66353d872fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25ba272731e17b249dc61d9e9e9130038ef39a4450c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c85c16c4d86cbe4ab390c092d077ce70590f", 0x118) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000002800)="c6013cf66d000000000000") ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000e5000)=0x100000002) recvmsg(0xffffffffffffffff, &(0x7f0000136000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/70, 0x46}], 0x1, &(0x7f0000319000)}, 0x0) recvmmsg(r2, &(0x7f00000024c0)=[{{&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)=""/132, 0x84}, {&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f00000001c0)}, {&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/175, 0xaf}], 0x9, &(0x7f00000008c0)=""/114, 0x72, 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)=""/139, 0x8b}, {&(0x7f0000000a00)=""/89, 0x59}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x3, &(0x7f0000000b00)=""/48, 0x30, 0x7fffffff}, 0x93}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/198, 0xc6}, {&(0x7f0000000cc0)=""/231, 0xe7}], 0x2, &(0x7f0000000e00)=""/140, 0x8c, 0xfffffffffffffadf}, 0x3}, {{&(0x7f0000000ec0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/124, 0x7c}, {&(0x7f0000001fc0)=""/84, 0x54}], 0x3, &(0x7f0000002080)=""/150, 0x96, 0x5}, 0x800}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002140)=""/189, 0xbd}], 0x1, &(0x7f0000002240)=""/121, 0x79, 0x10001}, 0x5}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f0000002400)=[{&(0x7f0000002340)=""/81, 0x51}, {&(0x7f00000023c0)=""/18, 0x12}], 0x2, &(0x7f0000002440)=""/100, 0x64, 0x6}, 0xfff}], 0x6, 0x0, &(0x7f0000002640)={0x0, 0x989680}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/vcs\x00', 0x125402, 0x0) preadv(r3, &(0x7f0000003040)=[{&(0x7f00000029c0)=""/116, 0x74}, {&(0x7f0000002a40)=""/133, 0x85}, {&(0x7f0000002b00)=""/60, 0x3c}, {&(0x7f0000002b40)=""/92, 0x5c}, {&(0x7f0000002bc0)=""/33, 0x21}, {&(0x7f0000002c00)=""/192, 0xc0}, {&(0x7f0000002cc0)=""/219, 0xdb}, {&(0x7f0000002dc0)=""/101, 0x65}, {&(0x7f0000002e40)=""/216, 0xd8}, {&(0x7f0000002f40)=""/215, 0xd7}], 0xa, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002880)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400102}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x60, r4, 0x100, 0x70bd2b, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000002680)={0x0, 0x8d0, 0xbef, 0xff, 0x3, 0xfffffffffffffff7, 0x80000001, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x1ff, @loopback={0x0, 0x1}, 0x100000000}}, 0x8001, 0x1579, 0x76, 0x1efe}}, &(0x7f0000002740)=0xb0) sendmmsg$alg(r5, &(0x7f00000027c0), 0x0, 0x20000001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000003100)={0x1, 0x9, 0xc86, 0x1ff}) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000002780)={r6, 0x1, 0x30}, 0xc) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000240)={0x3, r5}) 07:24:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x1fd) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1a1cc0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000000000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x242}}], 0x20}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xda05) 07:24:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x3c9, &(0x7f0000000540), 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0x0, "165d546848f65a3040a0e9e65ba00d4a14419bca4b5d5c7f2ecbb477b46fb8c878e426d189b0931928ab14cbe91e198581dd9263ad2973c04221c7e1afe8d5ddb7306bae02cc46cec8267d21f40b1885f3bf8968b6c8958788fd2339ebdc3066614d4455d5055276c8af27645b124bf775"}], 0x10}, 0x0) 07:24:02 executing program 1: pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x280, 0x0) unshare(0x24020400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000100)=0x10) socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(r0, 0x800000c0044dff, &(0x7f0000000080)) 07:24:02 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f00000001c0)='./control/file0\x00', &(0x7f0000000200)='./control\x00') close(r0) 07:24:02 executing program 0: r0 = socket(0x40000000011, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_regs={0x4f}}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r1, 0x714, 0x70bd26, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 07:24:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$intptr(0xe, 0x0) 07:24:02 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x1, 0x480800) sendto$llc(r0, &(0x7f00000004c0)="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", 0xfd, 0x4004000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r2}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x42, 0xa000) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) sendto(r0, &(0x7f0000000280)="9827f6ee6c2149e9b61639a5b83873d597e805012c12cf7a4b5187980f42b2a9bae80b0fcf35bc569d6b1d9d32965c792569a52e709d992fdaa8a7b41ff892", 0x3f, 0x40, &(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1, 0x1, 0x2, 0x3}}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@dev={0xfe, 0x80, [], 0x19}, @in6=@ipv4={[], [0xff, 0xff]}, 0x4e23, 0x0, 0x4e20, 0x2, 0xf65a948a78cd915c, 0xa0, 0x80, 0x87, r5, r6}, {0x5, 0xfffffffffffffdca, 0x6, 0x6, 0x1ff, 0x2, 0x7f, 0x7}, {0x1, 0x0, 0x1ff, 0xfffffffffffffeff}, 0xfff, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4d5, 0x3b}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0x0, 0x3, 0x5c, 0x0, 0x8001, 0x4}}, 0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2, 0x6}, 0xfffffffffffffffd, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x4, 0x8848, 0x5, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 07:24:02 executing program 5: 07:24:02 executing program 6: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000000000001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f0000000080)='./control\x00') close(r0) 07:24:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0x1e, 0x0) 07:24:03 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000880)}], 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c) 07:24:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001280)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) [ 109.090136] netlink: 'syz-executor7': attribute type 21 has an invalid length. 07:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x10000}) 07:24:03 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000001380)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000001300)}, 0x0) 07:24:03 executing program 0: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000240)={{{@in6=@dev={0xfe, 0x80}, @in6}}, {{@in=@multicast2=0xe0000002}, 0x0, @in=@rand_addr}}, 0xe8) [ 109.167233] netlink: 'syz-executor7': attribute type 21 has an invalid length. 07:24:03 executing program 0: 07:24:03 executing program 1: 07:24:03 executing program 6: 07:24:03 executing program 5: 07:24:03 executing program 7: 07:24:03 executing program 4: 07:24:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x10000}) 07:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x10000}) 07:24:04 executing program 0: 07:24:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x1, 0x480800) sendto$llc(r0, &(0x7f00000004c0)="dc7c501dcd7188ccc9f668f1d50b15ea7940693e0beb1401e50416954c89d3133a72ed108e5547b9bca83e651ff5e407720f7e33978100ab3490168ddd79e0298a864dbb5a9938a7038cf39bcaf1245dc62d82f79eaa5ea42ad1c3fa1fdddacbd9b58ed91b9378af06a52d87ab97e251a950262f712021e0fac496990dbc49f57ef95a5174286680ca3e916e2699db401a27151bebed6bcc31874478b99337e0cea0b7cdc3d32f5b541b2318051816aa85c965fcc7a45c17fa6fa51f952bb76e98e47828af399832025227894334d6f589eef051db0b4512b8854e805d880d48b7f2100d420e0de6b1e05ba69e5b3e43a2070679183b9c773d9acd165b", 0xfd, 0x4004000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r2}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x42, 0xa000) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) sendto(r0, &(0x7f0000000280)="9827f6ee6c2149e9b61639a5b83873d597e805012c12cf7a4b5187980f42b2a9bae80b0fcf35bc569d6b1d9d32965c792569a52e709d992fdaa8a7b41ff892", 0x3f, 0x40, &(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1, 0x1, 0x2, 0x3}}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@dev={0xfe, 0x80, [], 0x19}, @in6=@ipv4={[], [0xff, 0xff]}, 0x4e23, 0x0, 0x4e20, 0x2, 0xf65a948a78cd915c, 0xa0, 0x80, 0x87, r5, r6}, {0x5, 0xfffffffffffffdca, 0x6, 0x6, 0x1ff, 0x2, 0x7f, 0x7}, {0x1, 0x0, 0x1ff, 0xfffffffffffffeff}, 0xfff, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x4d5, 0x3b}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0x0, 0x3, 0x5c, 0x0, 0x8001, 0x4}}, 0xe8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x2, 0x6}, 0xfffffffffffffffd, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x4, 0x8848, 0x5, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0300080004000300000008000800060000033f00000000050000000000080006000000000008000500080000006d1bb5fe3c42f57d31990b1cd563c6dfdad34a214ec9a3fde7c3e592200803ba748cecb8e6455ba10156ebb37c9986431aaf466793ccdcee4bc6c40acb66035520929937ada7902b897f70de8da0e8bc383ab8af1c259b03e340e1344c8b03fbcdfb7ef819a2d049a9d06f8bd1de5b3b99fb961005709af091e2e75fc76299870dcb6d705a015b46fa53fb51619176874bad877dd53afcbacd5de52fced7e2cc570c34882ce0a82437073a1227ca0c94dfbd1ef12f29e22c27ee59c3859757079f5ce6c0da57663712ff818ded18"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 07:24:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x1ff}, 0x8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400c00, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x301000, 0x0) splice(r1, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x2, 0x0) 07:24:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup3(r0, r0, 0x80000) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x44000) socket(0x1, 0x7, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/167) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") socket(0x18, 0x0, 0x4) 07:24:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x46f1, 0x8000) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x339, 0x9, 0x5, 0x800, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="020000000000078f1ccf94d222090040"]}) close(r2) close(r1) 07:24:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0047fc2f07d82c99240970") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = getpid() ptrace$setopts(0x4206, r2, 0xffff, 0xb) open$dir(&(0x7f0000000140)='./file0\x00', 0x20c100, 0x6) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x61) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r3 = syz_open_pts(r1, 0x10000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x7fffffff}) dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 07:24:04 executing program 6: unshare(0x20000000) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000140)=""/71, &(0x7f0000000080)=0xfffffffffffffee2) 07:24:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xf8000}) ioctl$TIOCCBRK(r0, 0x5428) [ 110.194658] netlink: 'syz-executor1': attribute type 21 has an invalid length. 07:24:04 executing program 0: socket(0x11, 0x100000803, 0x0) syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r0, 0x2049, &(0x7f0000002700)) 07:24:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01020000"], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x2}, 0x8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x100000001, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000140)={0x10001, 0x7, 0x1, 0x7fff}) 07:24:04 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000040)='\x00') r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 07:24:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 07:24:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 07:24:05 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 07:24:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xa, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 07:24:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001280)=0xe) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 07:24:05 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001380)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, &(0x7f0000001440)=0x90) 07:24:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") prctl$intptr(0x2a, 0x0) 07:24:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x1) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000200)) 07:24:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001280)=0xe) read(r0, &(0x7f0000000040)=""/208, 0xd0) 07:24:05 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bcsh0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000800)="2f0000020409004b0000de91be10eebf000eeaaec5f2c0dcb8be1867626fd3e75d12e9a900798058439ed554114df45bad3e2d0ec01857fa072e68138a240c0d64832aaaecefa58493421a5de901d2da75af1f26d7a071a44a5a212ffdecfb35331c5a6be1bd867c2c1591cc") ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0c0583b, &(0x7f0000000680)={0x0, &(0x7f0000000700)}) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)=""/72, &(0x7f0000000040)=0x48) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) getrandom(&(0x7f0000000440)=""/215, 0xd7, 0x1) fcntl$setstatus(r5, 0x4, 0x46800) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000240)={{0x6, 0x7fffffff, 0x17, 0x4, 0x6, 0x2}}) r6 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0xa7d, @remote={0xfe, 0x80, [], 0xbb}, 0x81}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xc) writev(r7, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x3ba2}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000005c0)={r8, 0x7fffffff}, 0x8) 07:24:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001280)=0xe) ioctl$TCFLSH(r0, 0x540b, 0x0) 07:24:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) 07:24:05 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x1c) 07:24:05 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 07:24:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f0000000100)=""/215, 0xd7) getdents64(r0, &(0x7f0000000080)=""/92, 0x5c) 07:24:05 executing program 5: r0 = socket(0x10000000000000a, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'bond0\x00', @ifru_map}) 07:24:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xa, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 07:24:06 executing program 2: r0 = socket(0x11, 0x100000803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bcsh0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000800)="2f0000020409004b0000de91be10eebf000eeaaec5f2c0dcb8be1867626fd3e75d12e9a900798058439ed554114df45bad3e2d0ec01857fa072e68138a240c0d64832aaaecefa58493421a5de901d2da75af1f26d7a071a44a5a212ffdecfb35331c5a6be1bd867c2c1591cc") ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0c0583b, &(0x7f0000000680)={0x0, &(0x7f0000000700)}) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)=""/72, &(0x7f0000000040)=0x48) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) getrandom(&(0x7f0000000440)=""/215, 0xd7, 0x1) fcntl$setstatus(r5, 0x4, 0x46800) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000240)={{0x6, 0x7fffffff, 0x17, 0x4, 0x6, 0x2}}) r6 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0xa7d, @remote={0xfe, 0x80, [], 0xbb}, 0x81}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xc) writev(r7, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x3ba2}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000005c0)={r8, 0x7fffffff}, 0x8) 07:24:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xa, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 07:24:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r1, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) close(r1) 07:24:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f00000000c0)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$TCFLSH(r2, 0x540b, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 07:24:06 executing program 6: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) sendfile(r0, r1, &(0x7f00000000c0)=0x100c00, 0x80000002) 07:24:06 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000048, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 07:24:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b02230600fe0000000305000000000000003400aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYBLOB="a694250bf6500000"], &(0x7f00000002c0)) 07:24:06 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000200)={'bcsh0\x00', {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000800)="2f0000020409004b0000de91be10eebf000eeaaec5f2c0dcb8be1867626fd3e75d12e9a900798058439ed554114df45bad3e2d0ec01857fa072e68138a240c0d64832aaaecefa58493421a5de901d2da75af1f26d7a071a44a5a212ffdecfb35331c5a6be1bd867c2c1591cc") ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0c0583b, &(0x7f0000000680)={0x0, &(0x7f0000000700)}) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)=""/72, &(0x7f0000000040)=0x48) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) getrandom(&(0x7f0000000440)=""/215, 0xd7, 0x1) fcntl$setstatus(r5, 0x4, 0x46800) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000240)={{0x6, 0x7fffffff, 0x17, 0x4, 0x6, 0x2}}) r6 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0xa7d, @remote={0xfe, 0x80, [], 0xbb}, 0x81}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xc) writev(r7, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x3ba2}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000005c0)={r8, 0x7fffffff}, 0x8) 07:24:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x1, 0xb4cd, 0x1b3c) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) fallocate(r2, 0x3, 0x0, 0x8000) [ 112.223235] ================================================================== [ 112.230664] BUG: KMSAN: uninit-value in netlink_rcv_skb+0x3e9/0x600 [ 112.237309] CPU: 0 PID: 7176 Comm: syz-executor6 Not tainted 4.17.0+ #3 [ 112.244150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.253514] Call Trace: [ 112.256110] dump_stack+0x185/0x1d0 [ 112.259751] ? netlink_rcv_skb+0x3e9/0x600 [ 112.263987] kmsan_report+0x149/0x260 [ 112.267792] __msan_warning_32+0x6e/0xc0 [ 112.271854] netlink_rcv_skb+0x3e9/0x600 [ 112.275922] ? rtnetlink_bind+0x120/0x120 [ 112.280070] rtnetlink_rcv+0x50/0x60 [ 112.283787] netlink_unicast+0x1680/0x1750 [ 112.288032] ? rtnetlink_net_exit+0xa0/0xa0 [ 112.292379] netlink_sendmsg+0x104f/0x1350 [ 112.296625] ? netlink_getsockopt+0xc60/0xc60 [ 112.301122] kernel_sendmsg+0x22a/0x2d0 [ 112.305103] sock_no_sendpage+0x1c8/0x250 [ 112.309259] ? sock_no_mmap+0x30/0x30 [ 112.313092] sock_sendpage+0x1ef/0x2e0 [ 112.316991] pipe_to_sendpage+0x321/0x440 [ 112.321147] ? sock_fasync+0x2b0/0x2b0 [ 112.325424] ? generic_pipe_buf_get+0xf0/0xf0 [ 112.329947] __splice_from_pipe+0x4a5/0xf50 [ 112.334275] ? generic_splice_sendpage+0x2a0/0x2a0 [ 112.339227] generic_splice_sendpage+0x1c6/0x2a0 [ 112.344006] ? iter_file_splice_write+0x1710/0x1710 [ 112.349038] direct_splice_actor+0x19e/0x200 [ 112.353505] splice_direct_to_actor+0x767/0x1040 [ 112.358270] ? do_splice_direct+0x540/0x540 [ 112.362611] do_splice_direct+0x335/0x540 [ 112.366772] ? security_file_permission+0x240/0x480 [ 112.371825] do_sendfile+0x107b/0x1e40 [ 112.375730] __x64_sys_sendfile64+0x218/0x390 [ 112.380235] ? __ia32_sys_sendfile+0x160/0x160 [ 112.384822] do_syscall_64+0x15b/0x230 [ 112.388724] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 112.393917] RIP: 0033:0x4559f9 [ 112.397106] RSP: 002b:00007fad64f39c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 112.404921] RAX: ffffffffffffffda RBX: 00007fad64f3a6d4 RCX: 00000000004559f9 [ 112.412194] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 112.419473] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 112.426754] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 112.434169] R13: 00000000004c088c R14: 00000000004d0048 R15: 0000000000000000 [ 112.441455] [ 112.443085] Uninit was stored to memory at: [ 112.447419] kmsan_internal_chain_origin+0x12b/0x210 [ 112.452539] kmsan_memcpy_origins+0x11d/0x170 [ 112.457041] __msan_memcpy+0x109/0x160 [ 112.460936] _copy_from_iter_full+0xe06/0x1440 [ 112.465542] netlink_sendmsg+0xdf9/0x1350 [ 112.469699] kernel_sendmsg+0x22a/0x2d0 [ 112.473679] sock_no_sendpage+0x1c8/0x250 [ 112.477828] sock_sendpage+0x1ef/0x2e0 [ 112.482238] pipe_to_sendpage+0x321/0x440 [ 112.486387] __splice_from_pipe+0x4a5/0xf50 [ 112.490713] generic_splice_sendpage+0x1c6/0x2a0 [ 112.495470] direct_splice_actor+0x19e/0x200 [ 112.499884] splice_direct_to_actor+0x767/0x1040 [ 112.504644] do_splice_direct+0x335/0x540 [ 112.508794] do_sendfile+0x107b/0x1e40 [ 112.512732] __x64_sys_sendfile64+0x218/0x390 [ 112.517228] do_syscall_64+0x15b/0x230 07:24:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") time(&(0x7f0000000000)) 07:24:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r1, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) close(r1) 07:24:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001280)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x100) [ 112.521116] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 112.526410] Uninit was created at: [ 112.529960] kmsan_alloc_meta_for_pages+0x161/0x3a0 [ 112.534979] kmsan_alloc_page+0x82/0xe0 [ 112.538959] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 112.543723] alloc_pages_current+0x6b1/0x970 [ 112.548134] push_pipe+0x680/0xca0 [ 112.551691] iov_iter_get_pages+0x1357/0x1810 [ 112.556198] __blockdev_direct_IO+0x1a5f/0x65e0 [ 112.560877] ext4_direct_IO+0xed1/0x2850 [ 112.564948] generic_file_read_iter+0x3c6d/0x44d0 [ 112.569805] ext4_file_read_iter+0x30f/0x520 [ 112.574223] generic_file_splice_read+0x5d7/0x900 [ 112.579104] splice_direct_to_actor+0x4cb/0x1040 [ 112.583865] do_splice_direct+0x335/0x540 [ 112.588027] do_sendfile+0x107b/0x1e40 [ 112.592014] __x64_sys_sendfile64+0x218/0x390 [ 112.596530] do_syscall_64+0x15b/0x230 [ 112.600429] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 112.605610] ================================================================== [ 112.612963] Disabling lock debugging due to kernel taint [ 112.618408] Kernel panic - not syncing: panic_on_warn set ... [ 112.618408] [ 112.625777] CPU: 0 PID: 7176 Comm: syz-executor6 Tainted: G B 4.17.0+ #3 [ 112.633911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 112.643264] Call Trace: [ 112.645857] dump_stack+0x185/0x1d0 [ 112.649494] panic+0x3d0/0x990 [ 112.652706] ? netlink_rcv_skb+0x3e9/0x600 [ 112.656951] kmsan_report+0x260/0x260 [ 112.660763] __msan_warning_32+0x6e/0xc0 [ 112.665277] netlink_rcv_skb+0x3e9/0x600 [ 112.669346] ? rtnetlink_bind+0x120/0x120 [ 112.673501] rtnetlink_rcv+0x50/0x60 [ 112.677224] netlink_unicast+0x1680/0x1750 [ 112.681476] ? rtnetlink_net_exit+0xa0/0xa0 [ 112.685809] netlink_sendmsg+0x104f/0x1350 [ 112.690063] ? netlink_getsockopt+0xc60/0xc60 [ 112.694576] kernel_sendmsg+0x22a/0x2d0 [ 112.698567] sock_no_sendpage+0x1c8/0x250 [ 112.702726] ? sock_no_mmap+0x30/0x30 [ 112.706526] sock_sendpage+0x1ef/0x2e0 [ 112.710407] pipe_to_sendpage+0x321/0x440 [ 112.714540] ? sock_fasync+0x2b0/0x2b0 [ 112.718426] ? generic_pipe_buf_get+0xf0/0xf0 [ 112.722918] __splice_from_pipe+0x4a5/0xf50 [ 112.727237] ? generic_splice_sendpage+0x2a0/0x2a0 [ 112.732179] generic_splice_sendpage+0x1c6/0x2a0 [ 112.736933] ? iter_file_splice_write+0x1710/0x1710 [ 112.741947] direct_splice_actor+0x19e/0x200 [ 112.746364] splice_direct_to_actor+0x767/0x1040 [ 112.751117] ? do_splice_direct+0x540/0x540 [ 112.755443] do_splice_direct+0x335/0x540 [ 112.759583] ? security_file_permission+0x240/0x480 [ 112.764598] do_sendfile+0x107b/0x1e40 [ 112.768497] __x64_sys_sendfile64+0x218/0x390 [ 112.772985] ? __ia32_sys_sendfile+0x160/0x160 [ 112.777565] do_syscall_64+0x15b/0x230 [ 112.781445] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 112.786620] RIP: 0033:0x4559f9 [ 112.789797] RSP: 002b:00007fad64f39c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 112.797496] RAX: ffffffffffffffda RBX: 00007fad64f3a6d4 RCX: 00000000004559f9 [ 112.804770] RDX: 00000000200000c0 RSI: 0000000000000014 RDI: 0000000000000013 [ 112.812040] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 112.819303] R10: 0000000080000002 R11: 0000000000000246 R12: 00000000ffffffff [ 112.826569] R13: 00000000004c088c R14: 00000000004d0048 R15: 0000000000000000 [ 112.834403] Dumping ftrace buffer: [ 112.837930] (ftrace buffer empty) [ 112.841622] Kernel Offset: disabled [ 112.845231] Rebooting in 86400 seconds..