[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.060511] audit: type=1800 audit(1541756958.100:25): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.080073] audit: type=1800 audit(1541756958.100:26): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.099697] audit: type=1800 audit(1541756958.130:27): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2018/11/09 09:49:32 fuzzer started 2018/11/09 09:49:38 dialing manager at 10.128.0.26:38493 2018/11/09 09:49:38 syscalls: 1 2018/11/09 09:49:38 code coverage: enabled 2018/11/09 09:49:38 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/09 09:49:38 setuid sandbox: enabled 2018/11/09 09:49:38 namespace sandbox: enabled 2018/11/09 09:49:38 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/09 09:49:38 fault injection: enabled 2018/11/09 09:49:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/09 09:49:38 net packed injection: enabled 2018/11/09 09:49:38 net device setup: enabled 09:52:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mlockall(0x5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) syzkaller login: [ 263.752054] IPVS: ftp: loaded support on port[0] = 21 [ 264.901000] ip (6344) used greatest stack depth: 53072 bytes left [ 266.207054] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.213712] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.222627] device bridge_slave_0 entered promiscuous mode [ 266.367064] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.373696] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.382815] device bridge_slave_1 entered promiscuous mode [ 266.525309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.668985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.113500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.261223] bond0: Enslaving bond_slave_1 as an active interface with an up link 09:52:44 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x802c542a, 0x0) [ 267.630675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.637925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.158998] IPVS: ftp: loaded support on port[0] = 21 [ 268.246491] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.254840] team0: Port device team_slave_0 added [ 268.487691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.496592] team0: Port device team_slave_1 added [ 268.806637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 268.813869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.822857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.094667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 269.101895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.110788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.400680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 269.408590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.417918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.580277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 269.588416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.597472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.109009] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.115603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.122698] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.129176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.138165] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.147038] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.153616] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.162230] device bridge_slave_0 entered promiscuous mode [ 272.461151] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.467784] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.476538] device bridge_slave_1 entered promiscuous mode [ 272.770719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 272.972163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.022287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 09:52:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 273.828596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 274.107054] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 274.423160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 274.430244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.614530] IPVS: ftp: loaded support on port[0] = 21 [ 274.757407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 274.764656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.440627] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 275.448996] team0: Port device team_slave_0 added [ 275.697043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 275.705368] team0: Port device team_slave_1 added [ 276.049856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 276.058949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.068109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.364040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 276.371102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.380099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.663194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 276.670825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.680102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.975232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 276.982969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.992136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.436329] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.442983] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.451759] device bridge_slave_0 entered promiscuous mode [ 279.786827] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.793636] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.802345] device bridge_slave_1 entered promiscuous mode [ 280.079932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.344686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.433249] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.439748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.446860] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.453405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.462416] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 280.861890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.216207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 281.410898] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 281.825213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 281.833980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.121259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 282.128789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.947805] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 282.955975] team0: Port device team_slave_0 added 09:53:00 executing program 3: socket$inet6(0xa, 0x3, 0x800000000000006) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x5) accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1'}, 0x4) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) [ 283.277272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.285625] team0: Port device team_slave_1 added [ 283.676359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 283.684496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.693381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.923071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.000206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 284.007368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.016181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.330554] IPVS: ftp: loaded support on port[0] = 21 [ 284.409302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 284.417411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.427061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.825791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 284.833740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.842858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.309126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 286.769800] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 286.776304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.784188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.176293] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.923874] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.930372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.937467] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.944031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.953094] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 289.551852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.375044] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.381817] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.390355] device bridge_slave_0 entered promiscuous mode [ 290.815574] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.822233] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.830793] device bridge_slave_1 entered promiscuous mode [ 291.228817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 291.541470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 292.495410] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 292.867487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 293.223611] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 293.230690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.480953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 293.488220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.496106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.596337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 294.604759] team0: Port device team_slave_0 added 09:53:12 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x7fff) [ 294.996665] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 295.004937] team0: Port device team_slave_1 added [ 295.382435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 295.389529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.398681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.788579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 295.797208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.806141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.082492] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.264829] IPVS: ftp: loaded support on port[0] = 21 [ 296.266947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 296.278041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.287234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.682270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 296.690051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.699252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 09:53:14 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) [ 297.765684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 297.772290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.780208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 09:53:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:15 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) [ 299.567584] 8021q: adding VLAN 0 to HW filter on device team0 09:53:16 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TCFLSH(0xffffffffffffffff, 0x5401, 0x0) 09:53:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TCFLSH(0xffffffffffffffff, 0x5401, 0x0) 09:53:17 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TCFLSH(0xffffffffffffffff, 0x5401, 0x0) 09:53:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) [ 301.718819] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.725414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.732522] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.739017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.747842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 302.651821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.346471] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.353164] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.361989] device bridge_slave_0 entered promiscuous mode [ 303.832685] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.839181] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.847883] device bridge_slave_1 entered promiscuous mode [ 304.238320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 304.674804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 304.814549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.674841] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 306.014115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 306.173845] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 306.397133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 306.404390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.740172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 306.747372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.567719] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 307.574186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.582398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.845246] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 307.853812] team0: Port device team_slave_0 added [ 308.125543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 308.134034] team0: Port device team_slave_1 added [ 308.444638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 308.451891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.460520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 09:53:25 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/35, 0x23}], 0x5, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0x50, &(0x7f0000000940)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)=r2, 0x4) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)=r4, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)={&(0x7f0000000900)='./file0\x00', 0x0, 0xf}, 0x10) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)={&(0x7f00000000c0)='./file0\x00', r6}, 0xfffffffffffffe75) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)=')\x00') ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000700)) r7 = socket$kcm(0xa, 0x6, 0x0) socketpair(0xb, 0x80807, 0xfffffffffffffffc, &(0x7f0000000c00)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x4) r9 = getpid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000880)={r7, r8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, r10}, 0x2c) perf_event_open(&(0x7f0000000ac0)={0x4, 0x70, 0xbfb5, 0xffffffffffff7fff, 0x80000001, 0xffffffff, 0x0, 0x2, 0x0, 0x1, 0x6, 0x0, 0xf, 0x6, 0x2, 0xfff, 0x4, 0x9, 0x4, 0x101, 0x9, 0x3, 0x5, 0x20, 0x5, 0x7f, 0x7, 0x4, 0x1, 0x4, 0x7, 0x3, 0x5, 0xfffffffffffffff7, 0x7, 0x7fff, 0x2, 0x14, 0x0, 0x5, 0x7, @perf_config_ext={0x6, 0x8}, 0x400, 0x1000, 0x5, 0x1, 0x3, 0x58ad}, r9, 0x0, r5, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)={&(0x7f0000000a00)='./file0\x00', r10}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000b40)={r10, r3}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r11}, 0x10) socketpair(0xb, 0x0, 0x2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r11, &(0x7f0000000b80)="6c3a5ae47eb668232f4bf73a324746afb38b3a2cd9861aefe89c337f96e9b453833110dcd4ba5ee4b04a7b521f86299157a0df6cc0c7a8ba6f8c07bfd7d6adf1d5fa78bd4c279767035794c5a480ebe2130fa7f5a6764108a3949259699ba21b"}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000540)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)={r11}) [ 308.693738] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.732326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 308.739392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.748161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.966602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.974554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.983515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.343021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.350654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.359712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.915077] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.921744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.928722] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.935347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.943875] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 311.950471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.816941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.114987] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 314.486210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 314.741735] kvm [7442]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 315.019776] kvm [7442]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 09:53:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 315.355537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 315.362041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.369863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.727658] kvm [7471]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 316.250589] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.402244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.723397] hrtimer: interrupt took 46239 ns 09:53:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000180), 0x80000002) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000200)) [ 319.935714] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 320.422403] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 320.428673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.436716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.729313] 8021q: adding VLAN 0 to HW filter on device team0 09:53:39 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:39 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:53:39 executing program 1: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x6558, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280), 0x12) gettid() socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x5, 0x1000, 0x6}, 0x2c) perf_event_open$cgroup(&(0x7f00000002c0)={0x7, 0x70, 0x0, 0x4e, 0x2, 0x3bc4bfe6, 0x0, 0x0, 0x40010, 0x0, 0x7fff, 0x100000001, 0x4, 0x101, 0x2, 0x40, 0xb9, 0x6, 0x0, 0x8, 0x5, 0x7, 0x2, 0x4bed, 0x3423, 0x3, 0xffffffffffffffdd, 0x4, 0x0, 0x4, 0x7fff, 0x7, 0x100, 0x5b46, 0x5f26, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x200, 0x1, 0x91, 0xf, 0x0, 0x6}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) [ 322.935143] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. [ 322.943830] netlink: 7 bytes leftover after parsing attributes in process `syz-executor3'. 09:53:40 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 09:53:40 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003e40)={&(0x7f0000001500)=@xdp={0x2c, 0x2}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a80)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x34, 0x29, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", &(0x7f00000000c0)=""/41, 0x100}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0), 0xffffffffffffff05) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000006c0)={'rose0\x00', 0x2000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='pids.events\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0xc7}, 0x2c) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)}, {&(0x7f0000000980)=""/219, 0xdb}], 0x2, &(0x7f0000001580)=""/4096, 0x1000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) 09:53:40 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:40 executing program 1: r0 = socket(0xa, 0x2, 0x0) unshare(0x24020400) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040), 0x4) 09:53:40 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:40 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 324.435466] IPVS: ftp: loaded support on port[0] = 21 [ 325.817832] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.824359] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.832347] device bridge_slave_0 entered promiscuous mode [ 325.914162] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.920568] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.928744] device bridge_slave_1 entered promiscuous mode [ 326.004124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 326.081832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 326.315814] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 326.396293] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 326.548367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 326.555426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.789582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 326.797281] team0: Port device team_slave_0 added [ 326.874386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 326.882471] team0: Port device team_slave_1 added [ 326.959371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.041219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.121342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 327.128791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.138133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.211200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 327.218792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.227920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.088209] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.094742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.101801] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.108215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.116862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.493021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.243713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.531199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 331.821317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 331.827667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.835894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.222362] 8021q: adding VLAN 0 to HW filter on device team0 09:53:51 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:51 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x800, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x19a) setsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000100)={@local, r0}, 0x14) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000007d80)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) 09:53:51 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000180), 0x80000002) flock(0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f00000001c0)) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='filter\x00', 0x0) 09:53:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') sendfile(r1, r1, &(0x7f0000000040), 0x100000000) 09:53:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000000000001, &(0x7f0000000080), 0x0, 0x0) 09:53:51 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:51 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:51 executing program 5: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x36a44c91) 09:53:51 executing program 3: 09:53:52 executing program 2: 09:53:52 executing program 4: socket$kcm(0x2, 0x40000000000003, 0x2) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:52 executing program 5: 09:53:52 executing program 3: 09:53:52 executing program 1: 09:53:52 executing program 2: 09:53:52 executing program 4: socket$kcm(0x2, 0x40000000000003, 0x2) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:52 executing program 5: 09:53:52 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:52 executing program 2: 09:53:52 executing program 3: 09:53:53 executing program 5: 09:53:53 executing program 1: 09:53:53 executing program 4: socket$kcm(0x2, 0x40000000000003, 0x2) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:53 executing program 3: 09:53:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_ATTR(r0, &(0x7f0000000100)={0x78}, 0x78) 09:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000180), 0x80000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f00000008c0)) 09:53:53 executing program 5: r0 = socket(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000180), 0x80000002) flock(0xffffffffffffffff, 0x0) pipe(&(0x7f00000008c0)) getitimer(0x0, &(0x7f00000001c0)) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000200)) sendto$inet(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000e68000), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000007c0), 0x25c) add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f0000000440), 0x0, 0x8b, 0xfffffffffffffff9) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='filter\x00', 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x1}}, 0x0) 09:53:53 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:53 executing program 3: keyctl$set_reqkey_keyring(0xb, 0xffffffffffffffff) 09:53:53 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='veth1_to_bridge\x00', 0x38f) getsockname$packet(0xffffffffffffffff, &(0x7f0000006c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000018480)={'team0\x00'}) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000000)='u', 0x1}], 0x1, &(0x7f0000275000)}}], 0x1, 0x48084) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r3 = socket$inet6(0xa, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0xfe7f) shutdown(r1, 0x2) 09:53:54 executing program 3: io_setup(0x203, &(0x7f0000000040)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x20, &(0x7f0000ff9000/0x4000)=nil, 0x5}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x8, 0x0, 0x5, 0x0, r1, 0x0}]) 09:53:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:54 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x800000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) 09:53:54 executing program 3: unshare(0x4000000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x80002, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 09:53:54 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:54 executing program 5: socket$inet6(0xa, 0xa, 0x4) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, 0x8}, 0x10) flock(r0, 0x8) setsockopt$inet_dccp_int(r0, 0x21, 0x5, &(0x7f0000000140)=0x8, 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x1000, "c918708592e71bd5d9d4cb36b12ab58a5b2225e7ef90fee91b336a3c96c2a912", 0x1, 0x1008, 0x7fffffff, 0x0, 0x13, 0x0, 0x9, 0x10000}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fcntl$lock(r1, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x80000000, 0xffffffff80000001}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000200)={0x10f000, 0x2000}) openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) 09:53:55 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x8) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}) socket$inet6(0xa, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000100)) pread64(r1, &(0x7f0000000180)=""/193, 0xc1, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000080)) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x4) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @random="1976278d20b5", 'erspan0\x00'}}, 0x1e) 09:53:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5401, 0x0) 09:53:55 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$notify(r0, 0x402, 0x30) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000180)={0x6, 0x5, 0x0, [{0x7, 0x1, 0x6, 0x6, 0x6, 0x6, 0x101}, {0x5, 0x0, 0x5, 0xfff, 0xfffffffffffffffe, 0x10001, 0x8}, {0x23, 0x6, 0xe1b, 0x5, 0x3, 0x7, 0x8}, {0x7, 0x80000000, 0x263a, 0x531f86ba, 0x0, 0x4c, 0x400}, {0x9, 0x7, 0x1, 0x7, 0x59d, 0x1, 0x401}]}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x604c0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140), 0x4) 09:53:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r2, 0x24, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x20000004) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xe81, 0x0, 0x7, 0x2, 0x8, 0x9, 0x1000, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0x0, 0x5, 0x1200, 0x20}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @local}}, 0x4, 0x2, 0x6, 0xff, 0x19}, &(0x7f0000000200)=0x98) 09:53:55 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:55 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:55 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x800000000004, 0x4, 0x9, 0x1, 0xffffffffffffff9c}, 0x1b) ioctl$FICLONE(r1, 0x40049409, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000002c0)="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", &(0x7f00000000c0)="c091a5c7186da6d82e84b3d2e09580b151e4d22f6209e229b2c49d8303345b27cc04dc3faa5c013bfd4e606a89c7f764e2a5c3046427f0a6355e80a587240efe2e8df5d86b10"}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000240)}, 0x10) 09:53:56 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r1}) 09:53:56 executing program 3: r0 = userfaultfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x26}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) r3 = dup2(r1, r2) clone(0x0, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r4, 0xd49952c97d25a2ef, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800000000000000}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) read(r0, &(0x7f0000000400)=""/100, 0x64) 09:53:56 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:56 executing program 5: socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x44]) 09:53:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:56 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @local}}, [0x5, 0x5, 0x8, 0x4, 0x6, 0x9, 0x1, 0x8, 0x4, 0x30d31018, 0x42c, 0x4bcd, 0x8, 0xfffffffffffffffa, 0x16]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffa, 0x1ff}, &(0x7f00000002c0)=0x18) r3 = userfaultfd(0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x1f}, &(0x7f0000000080)=0x8) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000300)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95)=0x1, 0x258) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x30, &(0x7f0000000040)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000100)=0x8) close(r3) 09:53:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x545f, 0x40}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xf6) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000400)=""/247, 0xf7}], 0x1) 09:53:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(r0, 0xd7, &(0x7f00000002c0)="abfb3af8573eef089090e54187c7155c66315d7d81c10587938a49282929ece1ac1391dff292d25dfa3e97c1f6cde6d2520b5cde90d66eebd773c17fe84461daa7281aea5c4652503980784b1e12d0dd04a197c27abf531f59a206dd80c66b1dca45278927d7") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000044c62a16ed4a3640000000000000000000000000000000000000000000000000000000000000000000000000000000000a0b2000000000000000000000000"], 0x58) close(r3) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x200000008000, 0x0) sendmsg$nl_crypto(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@get={0x130, 0x13, 0x2, 0x70bd2d, 0x25dfdbfb, {{'rfc4309(morus640-sse2)\x00'}, [], [], 0x0, 0x2000}, [{0x8, 0x1, 0x53}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x80}, {0x8, 0x1, 0x79}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0x800000000}, {0x8, 0x1, 0xfffffffffffffff9}, {0x8, 0x1, 0x10000}, {0x8, 0x1, 0x9}]}, 0x130}, 0x1, 0x0, 0x0, 0x4801}, 0x48000) close(r2) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f0000000000)=""/16, 0x10}, {&(0x7f00000005c0)=""/42, 0x2a}], 0x5, 0x0) 09:53:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:56 executing program 4: r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r0, &(0x7f0000000100)="2400000052001f0014f9f407004904000a00071008000100ffffffff080d000f00000000", 0x24) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x800000002000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ff4000/0x9000)=nil, 0x9, 0x1, 0x4, &(0x7f0000ff5000/0x1000)=nil, 0x3}) 09:53:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4800, 0x4) write$sndseq(r1, &(0x7f0000000200)=[{0xffff, 0xd4e7, 0x5, 0x0, @tick=0x3, {0x22b8000000000000, 0x56}, {0x8, 0x8}, @note={0x7, 0x401, 0x5, 0x1, 0x9}}, {0x1, 0xc6d, 0x8, 0xfffffffffffffffa, @time, {0xe4, 0x7fffffff}, {0x0, 0x4}, @raw8={"4f764d24a53b4421cfba4cc1"}}, {0x6e6, 0x7, 0xda64, 0x40, @time={0x77359400}, {0xa26, 0xfff}, {0x81, 0x4}, @connect={{0x0, 0x8}, {0xfff, 0x3ff}}}, {0x5, 0x80, 0xfffffffffffffffb, 0x7, @tick=0x3, {0xfffffffffffffff9, 0x5}, {0x6, 0xfffffffffffff000}, @note={0x8, 0xfffffffffffff001, 0x81, 0x6, 0x80000001}}, {0x7, 0xfffffffffffffe34, 0x200, 0x7, @tick=0x3, {}, {0x2, 0x3}, @note={0x3, 0xa2, 0x47e1, 0x9, 0x1}}], 0xf0) bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x1a, 0x1a, 0x4, 0xb, 0x0, 0x317, 0x1, 0x24}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x9}}, 0x28) [ 340.214088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 09:53:57 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5401, 0x0) [ 340.292708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 09:53:57 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, r1) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000000000e9977a9f64b186c00006e855008755d011306982c3c1eb41aac10935d05d87b4591b8953df87dfd52d3aeb274ca5db8cc313d2f868a31377a0373034de16942dfe979b52c61a55e5af408e2108077a001b2eaa036a460a54b250"], 0x10}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 09:53:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4800, 0x4) write$sndseq(r1, &(0x7f0000000200)=[{0xffff, 0xd4e7, 0x5, 0x0, @tick=0x3, {0x22b8000000000000, 0x56}, {0x8, 0x8}, @note={0x7, 0x401, 0x5, 0x1, 0x9}}, {0x1, 0xc6d, 0x8, 0xfffffffffffffffa, @time, {0xe4, 0x7fffffff}, {0x0, 0x4}, @raw8={"4f764d24a53b4421cfba4cc1"}}, {0x6e6, 0x7, 0xda64, 0x40, @time={0x77359400}, {0xa26, 0xfff}, {0x81, 0x4}, @connect={{0x0, 0x8}, {0xfff, 0x3ff}}}, {0x5, 0x80, 0xfffffffffffffffb, 0x7, @tick=0x3, {0xfffffffffffffff9, 0x5}, {0x6, 0xfffffffffffff000}, @note={0x8, 0xfffffffffffff001, 0x81, 0x6, 0x80000001}}, {0x7, 0xfffffffffffffe34, 0x200, 0x7, @tick=0x3, {}, {0x2, 0x3}, @note={0x3, 0xa2, 0x47e1, 0x9, 0x1}}], 0xf0) bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x1a, 0x1a, 0x4, 0xb, 0x0, 0x317, 0x1, 0x24}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x9}}, 0x28) 09:53:57 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)='\v', 0x1) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x609c, 0x4) 09:53:57 executing program 4: socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:57 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = getpgid(0xffffffffffffffff) rt_sigqueueinfo(r0, 0x30, &(0x7f0000000040)={0x5, 0xbdc4, 0x10000, 0x7}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x2000000a, &(0x7f0000000a40)) preadv(0xffffffffffffffff, &(0x7f0000001180), 0x0, 0x0) 09:53:57 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5401, 0x0) 09:53:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10b00, 0x317) write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x401, 0x80002) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000002c0)=""/202) recvfrom$inet6(r2, &(0x7f00000001c0)=""/227, 0xe3, 0x12020, 0x0, 0x0) 09:53:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000000)={0xffff, 0x731b, 0x8001, 0x2}) ioctl$int_in(r0, 0x80000080044d7a, &(0x7f0000000080)) 09:53:58 executing program 4: socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f00004fd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080), 0xc4bf7c48837f98ea) 09:53:58 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, r0, 0x8000000000000000) 09:53:58 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5401, 0x0) 09:53:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x7fff) fallocate(r0, 0x11, 0x0, 0x100000001) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 09:53:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @loopback}}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x9, @mcast2, 0x100000000}}, 0x401, 0xd57f, 0x3f, "e286b50e82ee52515ed122269f38faee1048205b029b9789f5143865fc0344c27b2fc17f29a74afed0d871a87cdf7d35628fc1e0f40d26388d14ada869b094d9be033cd39511a23247bff854410eab6a"}, 0xd8) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 09:53:58 executing program 4: socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:53:58 executing program 0 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) 09:53:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, &(0x7f00000001c0)}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x408500) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x7}, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xffffffb2, 0x0, &(0x7f0000000240)=[@request_death], 0xfffffffffffffc81, 0x0, &(0x7f00000003c0)}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x5, 0x73}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @multicast2}}, 0x5, 0x7fffffff, 0x8, 0x8, 0x3ff}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r3, 0xd1, "edf575430ec7bec88caf2ccb13f333b1a4bad3de793ddaf6b4f9d77f0c033ac9a8402dabe0022080a985475ad7b408353c6b46e4c75c7c5b10b45ee6c6504ee716a75ccaba1a71b7f3a7a90362cc806669ab57c93370727340b19e61374fa8407e004c8d2053a3bf5eefc5d63bd4e916a511a9aeac1f82bf2561315ca02c38ecfb2172f75b1297c5c66c917f6f5335e20ea04e593770a0960096c7ddf3a94798f98135613ae871701421ab9c3a24577fa77b162fd0998e043ac4eec2a2293ff1f56ded0bb186edccfed2570d99319ce144"}, &(0x7f0000000200)=0xd9) [ 341.892120] binder: 8296:8297 transaction failed 29189/-22, size 0-0 line 2855 [ 341.919227] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.969264] binder: 8296:8297 transaction failed 29189/-22, size 0-0 line 2855 09:53:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x1, 0x1, 0x2, "754846be83c4f849004d58736943bceacdacff01aad07126551fe1ad9765aa142780bd5a23129e4ff3eac5fe7783d6bb38b65b1e212e1d170661ad0077d0494e5f884854310014edff97fd692c4aa7d8fcbe72bcac9f6bd5033875455596d7291ffb4732a3f72f820e58ef59a0fb5c0617526358ccdde77273dcf707804b1d41e687c5d626072451dd74a1742101d0fca411b34386051ec256beaffb8cf467543a2f8b6dd0f4136039d9e4f9b77499a453ad171d895580bdfd0188274823bc87e46ccff6b9f47b36"}, 0xd8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc008ae67, &(0x7f0000000140)) [ 342.022214] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.109141] binder: 8303:8307 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 342.117873] binder: 8303:8307 unknown command 0 [ 342.122863] binder: 8303:8307 ioctl c0306201 20000380 returned -22 09:53:59 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) [ 342.282676] binder: BINDER_SET_CONTEXT_MGR already set [ 342.288152] binder: 8303:8307 ioctl 40046207 0 returned -16 09:53:59 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x14, 0xffffffffffffffff}]}}}]}, 0x3c}}, 0x0) [ 342.380476] binder: 8303:8314 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 342.389224] binder: 8303:8314 unknown command 0 [ 342.394136] binder: 8303:8314 ioctl c0306201 20000380 returned -22 09:53:59 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x100000001) ioctl$TCFLSH(r1, 0x5401, 0x0) [ 342.631900] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 342.642464] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 342.729611] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 342.740515] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 09:54:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x50, 0x20000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000100)="5b4c0d5e31af489f7502dd4ffa8c6df84c084d65b2ec1fa856cb2bb143dc2bb4a73001a3ee3664119a4dfa21dab46d6c8b9de59470de0bc707cb014bd6f9f3b226c8772b7968356597f665d11d10b9a57191df26b857cefb"}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000005080)="df7ffb66b9800000c00f326635008000000f30ea0058cc00648104e00066b98a0a000066b80b00000066ba000000000f300f219e900f7e8700380f20e2dbca", 0x3f}], 0x0, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={0x0, 0x0, 0x2080}) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000024c0)) socket$inet6(0xa, 0x2, 0x5) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000240)={0x3, 0x1, [0x8000, 0x7fff, 0xffffffffffffff18, 0x8, 0x1, 0xb56, 0x6d, 0x9]}) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x10000, 0x0, [0xb6, 0x2, 0x4, 0x3, 0x3, 0x81, 0x5, 0x2b1d]}) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x2080) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000340)={r5, 0xffff}, 0x8) ioctl$TIOCCBRK(r3, 0x5428) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x20000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 09:54:00 executing program 1: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x980914, 0x0, [], @p_u8=&(0x7f0000000080)}}) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000180)=""/94, &(0x7f0000000200)=0x5e) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) 09:54:00 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x14, &(0x7f0000000040), 0xfffffffffffffd3a) sendto(r0, &(0x7f0000000000)="b98d8d2d17845b14a8a242050e2f8da03af0927c070d06b5db5e", 0x1a, 0x45, &(0x7f0000000080)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x42400, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000280)=0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2000, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000100)=0x680b, 0x4) ftruncate(r0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8) utimensat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) timerfd_create(0xf0e4dfddf87e8f40, 0x80000) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000140)) 09:54:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x9, 0x4, [0x3, 0x3f, 0xd5d, 0x5]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x0, 0x20}, &(0x7f0000000140)=0xc) 09:54:00 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) sendto$inet(r0, &(0x7f000038cf97), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e23}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000cc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x3, 0x4) sendfile(r0, r1, &(0x7f0000000080)=0x400, 0x10001) [ 343.490909] Unknown ioctl 1074291200 [ 343.513090] Unknown ioctl 19253 [ 343.528391] Unknown ioctl 30470 [ 343.564396] Unknown ioctl 1074291200 [ 343.590367] Unknown ioctl 19253 09:54:00 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000100)={{0x7, @addr=0x5}, "59f86e1d1558b5f020e0bc068a5535420f93fb6325c63866c7a688b7da27cdd3", 0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000fffd}) 09:54:00 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:00 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84000, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) 09:54:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x2, 0x400000) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000140)) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x229) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x1ff, 0x4) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) 09:54:01 executing program 2: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="18ad2a5a965e4e6b314800f5fd99ef9f573bdc8d3c91da0398d2aab3ed08d55c08ef5d0e7fbf129d4318fe0c17bae3c6004df79e458bef63dea29d71cc4dfac28cf0871823cee51f7d1e767245a00b14a247dd0cd02d9d1656627ec0c1bf7a3f474f28b6f1b423afe86f5945212eff4aea39217ef389a673535463bd8077dbcddcc4c9ea375a10443efc45e90f022ac460e2c30a0a2b69acc3522bf249c46ea8bea259026ad0f92e3c2cbc9e7f1db1ce68071963c5168f", 0xb7}, {&(0x7f0000000000)="502279ffee0de98a9d8cd9551d9d350b9ee02160ac0a16073be007dfbcfe8a574624def4d9de", 0x26}, {&(0x7f0000000180)="ebaccfd6e01cfd1bbdea20c3c41f7f935dd20dbc39663c529bf70efe791d4fad9207093169ee20b2b26dcfb2abb580323f30f069f4acd248d9bde9d1ba4abae7bb78b5830c81f94715198f8b9e0b73591c6990963ec72313aa56e6a05d1e3984f0c0ed6db1570f40b009bcd8f8c01b74f132dc5b734c95a2d287ed434d19b0766bac0b1d30925e7084759d1ee555faf734c059bbd06710bfb7ab8c1e98e3a2b85b1e6f52a1b3fb6796458b1025abf185ca4fef6e", 0xb4}, {&(0x7f0000000240)="0d7482b064c0020b7ca1ffdf04cbdef6f498cac9acce0b9d583a3c021357ded3a1ca1c0ae289be8a5976d14c6ec28d6b4cb567811547455352a5673b847993c5e22f6b4fc0f806441dbc011ba98ef41b662221169e5b8cd94f608d5b6488878cac9ee0b54d05eebfa280ad7ebd759c7e04cb9c37f8b6bf9b8ed112c3fa0f5cbb9bba0882c5e64d91e546050a7a3dc57fe13bd028d49c21e60b809d6a4a7fda14c6d2645ce14da04d30f5272c3072155a598dc51e4f2f716eb5ab9ee8663c67c184ec8a5f73f0a6eb750a4f81488dbb4d8aa06b768d9a89f63db3fd870eb6033c115d8d4bf927d4", 0xe7}, {&(0x7f0000000340)="f4d3f7ffe8661cd7718f531ee6da41fee70ed23144516d34e3404d9d163209a898340eeca1d95a53158dc40608e0174dce9df55a2e5db6b6584508f41d345349ee60b1fcc63718c2f91c54cdc3df084d0077bfc117f028cc2c424ff20b0f3e8aff777fc275d9aff132961320dbc94f27e86bc86de0200e", 0x77}], 0x5, 0x0, 0x0, 0x80}, 0x800) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) dup3(r0, r1, 0x0) 09:54:01 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000100)={{0x7, @addr=0x5}, "59f86e1d1558b5f020e0bc068a5535420f93fb6325c63866c7a688b7da27cdd3", 0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000fffd}) 09:54:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 09:54:01 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = dup3(r0, r0, 0x80000) perf_event_open$cgroup(&(0x7f0000000080)={0x7, 0x70, 0x6, 0xfffffffffffffffb, 0x3, 0x6, 0x0, 0x4, 0x20080, 0x8, 0x2b, 0x101, 0x100, 0x1, 0xc, 0x59f, 0x15b, 0xfffffffffffffffa, 0x7, 0xf4, 0xd64, 0x7fffffff, 0x2, 0x80000000, 0x88e, 0x9, 0xfffffffffffffff8, 0x4016dd44, 0x2, 0x6, 0xf02, 0xffffffffffffabc5, 0x20, 0x5, 0x7, 0x1, 0xfff, 0x10000, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000040), 0xf}, 0x2, 0x2, 0x516f, 0x0, 0x3, 0x100000000, 0x100000000}, r1, 0x0, 0xffffffffffffffff, 0xd) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:54:01 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x0, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="757c284e1dc3e671e69b18837078422563d9e50aa6199e70226ccb0bbefbaef0227dce55125841351545f7ef93581bee0d"], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TCFLSH(r3, 0x5401, 0x0) fchmod(r1, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) 09:54:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x7fffffff, 0x4}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x4, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x181) 09:54:01 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) unshare(0x20400) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 09:54:01 executing program 3: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4) ioctl$int_out(r0, 0x2, &(0x7f0000000280)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x280000, 0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0xc937, 0x9, 0x5, 0x200, 0x0, 0x1, 0x404, 0x6, 0x2, 0x2, 0x4, 0x5, 0x9, 0x100000000, 0xec, 0xc7, 0xff, 0xba, 0x6, 0x5, 0x7, 0x2, 0x3f, 0x7, 0x4, 0x8, 0x5b8e, 0x6, 0xffffffffffff8001, 0x1ff, 0x3, 0x8000, 0xfff, 0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x6000, 0x1, 0x7, 0x100000000, 0xffffffff, 0xac3}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x280000) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x105000, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x80, 0x321000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000002c0)={0x10000}, 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x28000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xa1d) r4 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet_dccp_int(r2, 0x21, 0x3, &(0x7f0000000300), &(0x7f0000000380)=0x4) r5 = dup2(r4, r4) connect$netlink(r5, &(0x7f0000000040)=@unspec, 0xc) close(r4) 09:54:01 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x11, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r2, 0x80041) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x80000001, 0xffffffffffffffff, 0x1, 0x1, 0xdc, 0x5}) ioctl$TCFLSH(r2, 0x5401, 0x0) 09:54:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xbb, 0x101002) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x77359400}, 0x1, 0x40000000000004c, 0x400000002}], 0x1004d) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) 09:54:02 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0400, 0x4) ioctl$TCSBRKP(r0, 0x5425, 0x9) unshare(0x2000400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 09:54:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x806, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000180)={{0xfffffffffffff939, 0x9}, {0x7, 0x10001}, 0x1f, 0x5, 0x8028}) clock_gettime(0x10000000000, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000000c0)={0x4, 0x465, 0x2, {r3, r4+10000000}, 0x2, 0x81}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x74}, {0x6}]}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x5c, 0x2, 0x3, 0x1, 0x6, 0x66, 0x8}, &(0x7f0000000200)=0x20) 09:54:02 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000009fc8)={&(0x7f00000001c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001c0001040000004733000000070000008631fa040a000000"], 0x1c}}, 0x0) write(r0, &(0x7f00000000c0)="25f246ca21927978e83f4372a39bd0dc4bcb53b1cc126e728fd535d031154565b8846745518e5eea4f6fd384a054bf0f9c1373808ff4caa06020e296bb16e00a4e478c9cadf9740f3c80ed1d707fa91e6755ffc815b88597a36f42b1b9afdd179cd6e1fb9a9040c8238066ddaaa237b5a431f0a406c884dc42b8086bb5a223ab723583422f2b3d092c5073495404c7ac836dc4c3f1f076af", 0x98) 09:54:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) writev(r1, &(0x7f0000001100)=[{&(0x7f0000000080)="86", 0x1}], 0x1) ppoll(&(0x7f0000001140)=[{r1, 0x22e0}], 0x1, &(0x7f0000001180)={0x77359400}, &(0x7f00000011c0), 0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) sched_getattr(r3, &(0x7f00000000c0), 0x30, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r4, 0x5401, 0x0) 09:54:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xbb, 0x101002) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x77359400}, 0x1, 0x40000000000004c, 0x400000002}], 0x1004d) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000040)) 09:54:02 executing program 2: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x29, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)) socketpair(0xa, 0x7, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) 09:54:03 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:03 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xb0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x0, 0x0) mq_getsetattr(r1, &(0x7f00000001c0), 0x0) 09:54:03 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) pipe(&(0x7f0000000800)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000840)={0x0, 0xff}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000008c0)={r3, 0x1}, &(0x7f0000000900)=0x8) r4 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) dup2(r0, r1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 09:54:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x408a00) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000200)={r2, 0x0, 0x885}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x240, 0x0) write$P9_RSTATFS(r4, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x3f, 0xfffffffffffffc00, 0x1fe00000000000, 0x1, 0x3, 0x1, 0x4, 0xffff, 0x86e}}, 0x43) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) connect(r5, &(0x7f00000000c0)=@ethernet={0x0, @dev}, 0x80) close(r5) 09:54:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x800, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x280000000000000, 0x0, 0x8, 0xa, 0x16}) 09:54:03 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000dc0)=""/183, 0xb7}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x3, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) ioctl$void(r1, 0xc0045c79) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x115, &(0x7f00000024c0)=""/129, 0x81}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 09:54:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000010307031dfffd946ff20c0020200a6009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000000000000000000000", 0x4c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000200)={0x68, 0x0, 0x8, [{0x1, 0x3, 0x0, 0xc38}, {0x2, 0x7, 0x26, 0xfffffffffffffffd, 'ppp1]#ppp1ppp0em1mime_typeppp1-vmnet0/'}]}, 0x68) 09:54:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x52000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0x3ff, 0xffffffffffffffaa) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000300), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x30000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000240)=0xfa) setsockopt$inet_tcp_int(r3, 0x6, 0x15, &(0x7f0000001280), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r0, r1, 0x0) 09:54:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x5401, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x100fff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x401, 0x489}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x1, 0x47}, &(0x7f0000000140)=0x8) write$P9_RWSTAT(r2, &(0x7f0000000180)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x2, 0x7, 0x7ff, 0x81, '\x00', 0x8}, 0x3, 0x20, 0x9, r4, 0x1, 0x4, 'syz1\x00', &(0x7f0000000240)=['\x00'], 0x1, [], [0xffffffffffff7fff, 0x7f, 0x7, 0x6]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000000)) 09:54:04 executing program 4: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0x0, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x918, 0x3ff, 0x6}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r2, 0x68d, 0x4, 0x8001}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002e00)={'vcan0\x00', 0x0}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @empty, r4}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 09:54:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) lseek(r0, 0x0, 0x4) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/21, 0x15}], 0x4, 0x0) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) pipe2$9p(&(0x7f0000000040), 0x4800) 09:54:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0xffffffffffffffff, 0xff21) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) mkdirat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x1ff) r2 = getegid() sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="08d259684b0769e78465b1ec1c8fe5a092250e67a1be2c60d35a6d25e2ae61fc5787c4fe8d9efd8e88d9de0bda1803fb63e5db1733481bd8f17f11f1edc225ac26a6e433281328f59b7a0bf612081729fb4a638d97adeb60f3392c4a4319992d5816561700dcd5cf6c0ed7418c7aa6ac8347da7dbfd6ff3f28ce63d2b209defc389e4d8ab20268394bfdc31d8bdca4242a5a087c05e20807086b1beb0e6b2cf1f5eb56b332bcc4080cab92dc1984a41150e7e2c7d2709b4d899ea9114a261dcb77ed887e", 0xc4}], 0x1, 0x0, 0x0, 0x8000}, 0x4000800) setgid(r2) r3 = memfd_create(&(0x7f0000000000)='usertrusted\x00', 0x4) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x4) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x4, &(0x7f00000000c0)=""/86) 09:54:04 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x10100) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000240)={0x9, 0x10001}) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x200, 0x20000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x81) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) r4 = gettid() setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x5, 0x4) sched_setparam(r4, &(0x7f0000000000)=0x200) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r5, 0x0, 0x0, 0x4}, 0x10) ioctl$TCFLSH(r3, 0x5401, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x81) 09:54:04 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$kcm(0x2, 0x40000000000003, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0xa, 0x8848, 0xd, @mcast1}, 0x80, &(0x7f00000003c0)}, 0x0) 09:54:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x40) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x3, &(0x7f0000000140)=0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) r4 = socket(0xa, 0x5, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080), 0x121}]) io_setup(0x400, &(0x7f0000000000)) [ 347.789472] FAULT_INJECTION: forcing a failure. [ 347.789472] name failslab, interval 1, probability 0, space 0, times 1 [ 347.801125] CPU: 1 PID: 8515 Comm: syz-executor4 Not tainted 4.19.0+ #80 [ 347.808036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.817466] Call Trace: [ 347.820109] ================================================================== [ 347.827525] BUG: KMSAN: uninit-value in get_stack_info+0x720/0x9d0 [ 347.833868] CPU: 1 PID: 8515 Comm: syz-executor4 Not tainted 4.19.0+ #80 [ 347.840732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.850103] Call Trace: [ 347.852726] dump_stack+0x419/0x480 [ 347.856396] ? _raw_spin_lock_irqsave+0x237/0x340 [ 347.861270] ? get_stack_info+0x720/0x9d0 [ 347.865473] kmsan_report+0x19f/0x300 [ 347.869345] __msan_warning+0x76/0xd0 [ 347.873194] get_stack_info+0x720/0x9d0 [ 347.877227] __unwind_start+0x7d/0xe0 [ 347.881067] show_trace_log_lvl+0x20e/0x11e0 [ 347.885536] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 347.890996] show_stack+0x12e/0x170 [ 347.894669] dump_stack+0x32d/0x480 [ 347.898346] should_fail+0x11e5/0x13c0 [ 347.902283] __should_failslab+0x278/0x2a0 [ 347.906557] should_failslab+0x29/0x70 [ 347.910488] kmem_cache_alloc_node+0x164/0xec0 [ 347.915114] ? __alloc_skb+0x32e/0xeb0 [ 347.919069] __alloc_skb+0x32e/0xeb0 [ 347.922845] alloc_skb_with_frags+0x1c9/0xa80 [ 347.927396] ? __msan_poison_alloca+0x1e0/0x2b0 [ 347.932121] sock_alloc_send_pskb+0xeb3/0x14c0 [ 347.936783] packet_sendmsg+0x67a6/0x9150 [ 347.941011] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 347.946414] ? aa_sk_perm+0x7ab/0x9e0 [ 347.950306] ___sys_sendmsg+0xe68/0x1250 [ 347.954403] ? compat_packet_setsockopt+0x360/0x360 [ 347.959526] __se_sys_sendmsg+0x305/0x460 [ 347.963729] __x64_sys_sendmsg+0x4a/0x70 [ 347.967815] do_syscall_64+0xcf/0x110 [ 347.971645] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 347.976849] RIP: 0033:0x457569 [ 347.980064] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 347.998994] RSP: 002b:00007f47663c6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.006736] RAX: ffffffffffffffda RBX: 00007f47663c6c90 RCX: 0000000000457569 [ 348.014030] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 348.021321] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.028607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47663c76d4 [ 348.035894] R13: 00000000004c3793 R14: 00000000004d5830 R15: 0000000000000005 [ 348.043209] [ 348.044854] Local variable description: ----state@show_trace_log_lvl [ 348.051352] Variable was created at: [ 348.055094] show_trace_log_lvl+0xb3/0x11e0 [ 348.059441] show_stack+0x12e/0x170 [ 348.063092] ================================================================== [ 348.070465] Disabling lock debugging due to kernel taint [ 348.075950] Kernel panic - not syncing: panic_on_warn set ... [ 348.075950] [ 348.083363] CPU: 1 PID: 8515 Comm: syz-executor4 Tainted: G B 4.19.0+ #80 [ 348.091612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.100985] Call Trace: [ 348.103620] dump_stack+0x419/0x480 [ 348.107297] panic+0x57e/0xb28 [ 348.110573] kmsan_report+0x300/0x300 [ 348.114420] __msan_warning+0x76/0xd0 [ 348.118269] get_stack_info+0x720/0x9d0 [ 348.122300] __unwind_start+0x7d/0xe0 [ 348.126143] show_trace_log_lvl+0x20e/0x11e0 [ 348.130594] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 348.136039] show_stack+0x12e/0x170 [ 348.139708] dump_stack+0x32d/0x480 [ 348.143389] should_fail+0x11e5/0x13c0 [ 348.147345] __should_failslab+0x278/0x2a0 [ 348.151621] should_failslab+0x29/0x70 [ 348.155576] kmem_cache_alloc_node+0x164/0xec0 [ 348.160196] ? __alloc_skb+0x32e/0xeb0 [ 348.164136] __alloc_skb+0x32e/0xeb0 [ 348.167901] alloc_skb_with_frags+0x1c9/0xa80 [ 348.172438] ? __msan_poison_alloca+0x1e0/0x2b0 [ 348.177158] sock_alloc_send_pskb+0xeb3/0x14c0 [ 348.181811] packet_sendmsg+0x67a6/0x9150 [ 348.186038] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 348.191433] ? aa_sk_perm+0x7ab/0x9e0 [ 348.195329] ___sys_sendmsg+0xe68/0x1250 [ 348.199423] ? compat_packet_setsockopt+0x360/0x360 [ 348.204544] __se_sys_sendmsg+0x305/0x460 [ 348.208751] __x64_sys_sendmsg+0x4a/0x70 [ 348.212846] do_syscall_64+0xcf/0x110 [ 348.216685] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 348.221898] RIP: 0033:0x457569 [ 348.225119] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.244055] RSP: 002b:00007f47663c6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.251795] RAX: ffffffffffffffda RBX: 00007f47663c6c90 RCX: 0000000000457569 [ 348.259088] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 348.266384] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.273674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47663c76d4 [ 348.280976] R13: 00000000004c3793 R14: 00000000004d5830 R15: 0000000000000005 [ 348.289367] Kernel Offset: disabled [ 348.293016] Rebooting in 86400 seconds..