Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. 2019/04/25 19:29:54 fuzzer started 2019/04/25 19:29:57 dialing manager at 10.128.0.26:44757 2019/04/25 19:29:58 syscalls: 2440 2019/04/25 19:29:58 code coverage: enabled 2019/04/25 19:29:58 comparison tracing: enabled 2019/04/25 19:29:58 extra coverage: extra coverage is not supported by the kernel 2019/04/25 19:29:58 setuid sandbox: enabled 2019/04/25 19:29:58 namespace sandbox: enabled 2019/04/25 19:29:58 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/25 19:29:58 fault injection: enabled 2019/04/25 19:29:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/25 19:29:58 net packet injection: enabled 2019/04/25 19:29:58 net device setup: enabled 19:31:23 executing program 0: syzkaller login: [ 145.262767][ T7904] IPVS: ftp: loaded support on port[0] = 21 19:31:23 executing program 1: [ 145.376627][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 145.464526][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.472642][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.495009][ T7904] device bridge_slave_0 entered promiscuous mode [ 145.505341][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.514625][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.522706][ T7904] device bridge_slave_1 entered promiscuous mode [ 145.548127][ T7904] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 145.550661][ T7907] IPVS: ftp: loaded support on port[0] = 21 [ 145.563567][ T7904] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.593055][ T7904] team0: Port device team_slave_0 added [ 145.605264][ T7904] team0: Port device team_slave_1 added 19:31:24 executing program 2: [ 145.707121][ T7904] device hsr_slave_0 entered promiscuous mode [ 145.764216][ T7904] device hsr_slave_1 entered promiscuous mode [ 145.842474][ T7909] IPVS: ftp: loaded support on port[0] = 21 [ 145.849213][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.856542][ T7904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.864660][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.871770][ T7904] bridge0: port 1(bridge_slave_0) entered forwarding state 19:31:24 executing program 3: [ 146.021651][ T7907] chnl_net:caif_netlink_parms(): no params data found [ 146.069724][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.120710][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.133365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.149725][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.174082][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.199595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 146.268716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.280632][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.287810][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.300512][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.309477][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.316706][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state 19:31:24 executing program 4: [ 146.347481][ T7916] IPVS: ftp: loaded support on port[0] = 21 [ 146.379973][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.392756][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.402808][ T7909] chnl_net:caif_netlink_parms(): no params data found [ 146.427862][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.443841][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.451964][ T7907] device bridge_slave_0 entered promiscuous mode [ 146.485587][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.492710][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.524775][ T7907] device bridge_slave_1 entered promiscuous mode [ 146.532448][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.546410][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.564560][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.573612][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.583264][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.603517][ T7904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.638857][ T7918] IPVS: ftp: loaded support on port[0] = 21 [ 146.708471][ T7907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.739008][ T7907] bond0: Enslaving bond_slave_1 as an active interface with an up link 19:31:25 executing program 5: [ 146.757817][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.773139][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.782156][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.791083][ T7909] device bridge_slave_0 entered promiscuous mode [ 146.824448][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.831582][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.841210][ T7909] device bridge_slave_1 entered promiscuous mode [ 146.930145][ T7907] team0: Port device team_slave_0 added [ 146.949872][ T7909] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.983439][ T7907] team0: Port device team_slave_1 added [ 146.997313][ T7909] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.029854][ T7916] chnl_net:caif_netlink_parms(): no params data found [ 147.046834][ T7921] IPVS: ftp: loaded support on port[0] = 21 19:31:25 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) memfd_create(0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44803) fallocate(r2, 0x3, 0xffffbffffffffa6d, 0xffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) umount2(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000780)=0xe8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000380)={@local}) flock(0xffffffffffffffff, 0x4) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000440)={0x0, 0x8000, 0x1, {0x0, 0x989680}, 0x6, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000580)={0x800, 0x0, 0x0, 0x6, 0x5, 0x8}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, &(0x7f0000000000)={0x1}) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x400) geteuid() [ 147.126313][ T7907] device hsr_slave_0 entered promiscuous mode [ 147.174444][ T7907] device hsr_slave_1 entered promiscuous mode [ 147.248767][ C0] hrtimer: interrupt took 37778 ns [ 147.262777][ T7909] team0: Port device team_slave_0 added [ 147.319918][ T7909] team0: Port device team_slave_1 added 19:31:25 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00'}) memfd_create(0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44803) fallocate(r2, 0x3, 0xffffbffffffffa6d, 0xffffffff) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) umount2(0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000780)=0xe8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000380)={@local}) flock(0xffffffffffffffff, 0x4) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000440)={0x0, 0x8000, 0x1, {0x0, 0x989680}, 0x6, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000580)={0x800, 0x0, 0x0, 0x6, 0x5, 0x8}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, &(0x7f0000000000)={0x1}) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x400) geteuid() [ 147.416787][ T7909] device hsr_slave_0 entered promiscuous mode [ 147.444228][ T7909] device hsr_slave_1 entered promiscuous mode [ 147.513823][ T7916] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.521030][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.529266][ T7916] device bridge_slave_0 entered promiscuous mode [ 147.537101][ T7918] chnl_net:caif_netlink_parms(): no params data found [ 147.577125][ T7916] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.585346][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.593204][ T7916] device bridge_slave_1 entered promiscuous mode 19:31:26 executing program 0: syz_emit_ethernet(0x5, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX, @ANYPTR64, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRESDEC], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYBLOB="09a204011fd8185a1e57727391c7fe1f085f7885", @ANYRESOCT]], @ANYRESHEX, @ANYRES32=0x0], 0x0) [ 147.679317][ T7916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.697945][ T7916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.713465][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state 19:31:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0xfffffffffffffe1c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) [ 147.725508][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.736482][ T7918] device bridge_slave_0 entered promiscuous mode [ 147.789753][ T7916] team0: Port device team_slave_0 added [ 147.796646][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.805107][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.813039][ T7918] device bridge_slave_1 entered promiscuous mode [ 147.838288][ T7916] team0: Port device team_slave_1 added 19:31:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000140)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x4, @rand_addr="5e86a29f1f6e2a4f98d6915ec58445fb", 0x60}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x7ff}, &(0x7f0000000200)=0x8) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000001040501fb200713011100009a0000000c00058000d8af76c7db1ef60b00060000000200000080c1"], 0x2c}}, 0x0) [ 147.909665][ T7918] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.921096][ T7918] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.940211][ T7921] chnl_net:caif_netlink_parms(): no params data found 19:31:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) recvfrom$packet(r1, &(0x7f00000000c0)=""/60, 0x3c, 0x40000000, &(0x7f0000000280)={0x11, 0x6, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="24000000210007021dfdfd946f61050002020000fd00000000000800080006000400ff7e280000001100ffffbaffffaa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 147.989479][ T7943] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.017489][ T7916] device hsr_slave_0 entered promiscuous mode 19:31:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000100)={0x0, 0x9, 0x3, 0xffffffffa7c7d0b5, 0x11, 0x1}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080), 0x41) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) [ 148.084470][ T7916] device hsr_slave_1 entered promiscuous mode [ 148.122884][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.154698][ T7918] team0: Port device team_slave_0 added [ 148.191897][ T7918] team0: Port device team_slave_1 added [ 148.202717][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.228256][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.239612][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.281586][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.296608][ T7909] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.303606][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.311738][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.323024][ T7921] device bridge_slave_0 entered promiscuous mode [ 148.339735][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.348411][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.366153][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.373605][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.381712][ T7921] device bridge_slave_1 entered promiscuous mode [ 148.436987][ T7918] device hsr_slave_0 entered promiscuous mode [ 148.504322][ T7918] device hsr_slave_1 entered promiscuous mode [ 148.577674][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.586570][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.595139][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.602336][ T7910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.610538][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.619595][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.628133][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.635381][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.642954][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.652221][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.661059][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.695735][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.705122][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.714160][ T3042] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.721269][ T3042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.730123][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.739201][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.747977][ T3042] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.755114][ T3042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.762797][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.773299][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.782107][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.790825][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.799529][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.808185][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.816860][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.827309][ T7921] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 148.838528][ T7921] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.857200][ T7909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.869382][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.880849][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.889334][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.897572][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.906317][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.934952][ T7916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.951798][ T7916] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.963595][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.973037][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.981324][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.008557][ T7921] team0: Port device team_slave_0 added [ 149.016225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.025325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.034101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.042716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.051785][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.060299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.081695][ T7921] team0: Port device team_slave_1 added [ 149.091521][ T7907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.103103][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.114835][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.125463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.133233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.141999][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.150482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.161000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.169574][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.176705][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.207376][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.216177][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.225324][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.233978][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.241224][ T7912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.270347][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.307293][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.321275][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.396861][ T7921] device hsr_slave_0 entered promiscuous mode [ 149.434328][ T7921] device hsr_slave_1 entered promiscuous mode [ 149.497790][ T7916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.509387][ T7916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.528515][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.538556][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.547775][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.556675][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.566076][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.574624][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.583131][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.591895][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.601794][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.610248][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 19:31:28 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000000)=""/112) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x106, 0x0, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/167) 19:31:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000100)={0x0, 0x9, 0x3, 0xffffffffa7c7d0b5, 0x11, 0x1}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080), 0x41) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) [ 149.668296][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.696040][ T7916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.739745][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.757197][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.777292][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.793435][ T7921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.844939][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.855052][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.871375][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.878594][ T7912] bridge0: port 1(bridge_slave_0) entered forwarding state 19:31:28 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080), 0xffffffffffffff6e) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='/dev/net/tun\x00', r1}, 0x10) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x800}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x4, 0x1, 0x9, 0x31}, 0x98) openat$cgroup_type(r1, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 149.888125][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.899450][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.949785][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.957010][ T7912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.975219][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.984993][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.994459][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.003396][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.013804][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.022285][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.056729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.069800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.089011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.101128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.112515][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.131783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.142731][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.165492][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.178992][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.190512][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.235998][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.293740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.302332][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.309488][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.323484][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.336195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.347451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.361253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.370301][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.377441][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.394540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.403432][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.416509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.426160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.446114][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.455139][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.465703][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.475405][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.484427][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.499490][ T7921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.511215][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.521004][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.529686][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.552482][ T7921] 8021q: adding VLAN 0 to HW filter on device batadv0 19:31:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000002c0)=ANY=[@ANYPTR], 0x8}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000140)={0x1, 0x6, 0xfffffffffffffff1}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x200000) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0xfffffffffffffffd, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x20900) 19:31:29 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x18, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x60bf, 0x0) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f00000000c0)="316f316d4f8f3b82e5fc9cb5c170d1be70df7857c72de855d0d30368bfddf777cb2930ec165076866909ece7fec78117153728c0b9bd7a90e44facf4cc5297525913e93538929bed5805d93f3d15709caca2f1ac5a77d5f86002155e4bea03ea5055f6158118c4c9e728eed40a7ed0", 0x6f) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x99, 0x0, 0x0, 0x0, 0x249}}], 0x4000000000000d1, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000280)=0x78) 19:31:29 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) exit_group(0x1000) keyctl$get_keyring_id(0x0, r2, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20002000005) listxattr(0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x181, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000001c0), 0x7ba27d3a) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x315, 0x0, 0xfffffffffffffeec}, 0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 19:31:29 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000180)=0x100000001, 0x3f) r2 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0x0, 0x8}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0xfffffffffffffff7}, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000004c0)='./bus\x00'}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x28000) 19:31:29 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 19:31:29 executing program 3: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getroute={0x17, 0x16, 0xffffff1f, 0x0, 0x0, {0x1e}}, 0x1c}}, 0x0) 19:31:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 19:31:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xffff, 0x1) r2 = getpgid(0xffffffffffffffff) rt_sigqueueinfo(r2, 0x38, &(0x7f0000000040)={0x24, 0xffffffffa18c40ab, 0x5}) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00'}, 0x45c) 19:31:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xd1, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x400000000005, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 19:31:29 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) syz_execute_func(&(0x7f0000000080)="98cd8080000cf325f3250fad87000000218a2069d00fd1b02db5d900000070e422840568ea0000c483356f1d0a1000f30f106d0c3c3b6446ddcb0bdc3e49289bd19d670f381d6a2f6745c4c18deddbd1d963465776c161619688a07a980000c4a1fae6ae34f896dce1b1ac45e22c892a0f0000c4c10df8d3") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xe00, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x400, 0x0, 0xe9d, 0x5, 0xb9, 0x80000001}) acct(&(0x7f0000000140)='./file0\x00') 19:31:29 executing program 4: ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000640)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) r10 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() getgroups(0x5, &(0x7f0000000b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000bc0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x0, r3}, {0x2, 0x4, r4}, {0x2, 0x3, r5}, {0x2, 0x2, r6}, {0x2, 0x5, r7}, {0x2, 0x4, r8}, {0x2, 0x2, r9}, {0x2, 0x5, r10}], {0x4, 0x2}, [{0x8, 0x1, r11}, {0x8, 0x2, r12}, {0x8, 0x1, r13}, {0x8, 0x2, r14}, {0x8, 0x5, r15}, {0x8, 0x7, r16}], {}, {0x20, 0x4}}, 0xa4, 0x2) r17 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r18 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) r19 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r19, 0x4020aea5, &(0x7f00000000c0)={0x6000, 0x10000, 0x80000001, 0x7f, 0x6}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r17, r18, r18}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) 19:31:29 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0xfd29, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000001000), 0x3ffffff00000003, 0x1a6, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x4, 0x101000}) 19:31:29 executing program 0: r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, 0x0}, 0x0) 19:31:29 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x18, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x60bf, 0x0) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f00000000c0)="316f316d4f8f3b82e5fc9cb5c170d1be70df7857c72de855d0d30368bfddf777cb2930ec165076866909ece7fec78117153728c0b9bd7a90e44facf4cc5297525913e93538929bed5805d93f3d15709caca2f1ac5a77d5f86002155e4bea03ea5055f6158118c4c9e728eed40a7ed0", 0x6f) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x99, 0x0, 0x0, 0x0, 0x249}}], 0x4000000000000d1, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'broute\x00'}, &(0x7f0000000280)=0x78) 19:31:29 executing program 2: r0 = socket(0x2, 0x807, 0xfffffffffffffffd) getsockopt(r0, 0x114, 0x2710, 0x0, &(0x7f000033bffc)) 19:31:29 executing program 1: r0 = getpid() getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x60) ptrace$setregset(0x4205, r0, 0x203, &(0x7f0000000340)={&(0x7f0000000200)="d4e315c2048dbc9ec8260131bbd438334aea004b027741106a7a0abe6bd516cd989f2042b4f639c2af20c4bc97ea710986babddd5fdbbb6fdbf835fa14e1a02f9f5f901af0c5f79cc21116c01b1f738c1c558dca04bf82a3395af4063023ec09e482ad95a8fc8969e2444fc07123496d316d33ff17736d2e1903be8ea6622a29", 0x80}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1, 0x101, 0x8}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r4, 0x0) r5 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f00000000c0)) r6 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x50137a85, 0x24, 0x0, 0x10004) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, &(0x7f00000001c0)) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000380)=r5) 19:31:29 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000240)=""/187, &(0x7f0000000300)=""/152, &(0x7f00000003c0)=""/73, 0x10d003}) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f00000004c0)=0x80) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) getsockname(r3, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80) read$eventfd(r3, &(0x7f0000000500), 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000540)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 19:31:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r3}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000700)="3b3561ac00814a4548c78d250bdd795fd74ffc69a3565b45f64e53148f3f1ba2f9ef4cd9bc9accca5a9e66aa0e1c390ef3733d2d4aa8d18ac54b2a11459a84cd69778e626bf2180598cf27123f9e627bf4e0467e04f91dd4c9824be1a46830685fd52c447515066910ab66381df90d7056e2291913cd4d9929999530dec36e00"/140, 0x8c) close(r1) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="0801000015db50dd1309a05f3f87a38c45ffb83bfd17e472bf6d35726255db51b1509a706b1ba37411b90342e129c6ce478b273b0ce7584133b25bfc3a928dfffbe4327415189e25ba0fe4", @ANYRES16=r5, @ANYBLOB="00042bbd7000fbdbdf2515000000c0000500080001007564700008000100657468000800010075647000240002000800010015000000080001001f00000008000300090000000800010018000000080001006962000008000100696200001c000200080001000a000000080002000200000008000200020000005400020008000200040000000800030006000000080002009e8d000008000400800000000800030009000000080002002ed6000008000400000090000800040007000000080002008d9500000800040000000000100004000c00010073797a300000000024000600080001000000000008000100368c000004000200040002000800010002000000"], 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = semget$private(0x0, 0x0, 0x802) semctl$GETPID(r6, 0x0, 0xb, &(0x7f0000000000)=""/16) unlink(&(0x7f0000000300)='./file0\x00') 19:31:29 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x509000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r0, r1, r0], 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff}, 0xc) 19:31:29 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) 19:31:29 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x181000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)={0x4a58663443905f07, @reserved}) r1 = memfd_create(&(0x7f0000000040)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000100)=""/50) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') 19:31:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x78, 0x0, [0x200000490]}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8100, 0x0) read$rfkill(r3, &(0x7f0000000100), 0x8) [ 151.650582][ T8054] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 19:31:30 executing program 4: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='smaps\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'veth1_to_bridge\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x8}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_opts(r2, 0x0, 0x80000000008, &(0x7f0000000000)="003602f3", 0x4) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xfea6) 19:31:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b500000800000008000500ac14141b08000e000000050f01"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @rand_addr=0x40}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @local}, 0x16, 0x0, 0x0, 0x0, 0x643, &(0x7f00000001c0)='sit0\x00', 0x5, 0x2, 0x9}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:31:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup2(r0, r1) execveat(r2, &(0x7f0000000080)='\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='keyring,vmnet1\x00'], &(0x7f0000000240)=[&(0x7f0000000140)='/dev/dri/card#\x00', &(0x7f0000000180)='/dev/dri/card#\x00', &(0x7f00000001c0)='\xb8\'-\x00', &(0x7f0000000200)='^\x00'], 0x1800) ioctl$DRM_IOCTL_ADD_CTX(r1, 0x80086601, 0x0) 19:31:30 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xdc, 0x80000) clock_gettime(0x7, &(0x7f0000000240)) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000200)={0x200, 0x200, [0x7fff, 0x72, 0x7, 0x56e, 0x81], 0x2695}) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r2 = dup2(r0, r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x20) write$binfmt_elf32(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x9, 0xf4c, 0xffffffff80000001, 0x98, 0x3, 0x6, 0x9, 0x103, 0x38, 0x32c, 0x3, 0xfffffffffffffffb, 0x20, 0x2, 0x81, 0x5, 0x7fffffff}, [{0x60000003, 0x0, 0x20, 0x9, 0x1f, 0x8000, 0xb1e, 0xcead}], "127864c9ea751357e71d6dbdda2e182b3841b599dadec3cac22457ddbb9c4707c9ebf28b1ac524857de90e79bb971f7f50709e4fbd68c520810c169be9dd1c9df35336bebce097e912f50f7ae282fc1321a64c37eeff73372780a122d80fa85c48a335113fda", [[], [], [], []]}, 0x4be) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000000c0)) preadv(r3, &(0x7f0000000140), 0x1e9, 0x51) 19:31:30 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x1f, 0x100) truncate(&(0x7f0000000140)='./file0\x00', 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 19:31:30 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x44}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x800, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 19:31:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)=""/10) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9205, 0x0) dup3(r0, r0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "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", 0x1000}, 0x1006) 19:31:30 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r1}) dup3(r1, r0, 0x0) 19:31:30 executing program 5: clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000180)={0x2}, &(0x7f0000000ac0), &(0x7f0000000840)={r0, r1+30000000}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000008c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vcs\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000003f40)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vfio/vfio\x00', 0x400002, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/audio\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000880)={0x2, r6}) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r3, r3}, &(0x7f0000000200)=""/243, 0xf3, &(0x7f0000000700)={&(0x7f00000001c0)={'crct10dif\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x60240, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000900)=0x23) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'trusted.', '\x00'}, &(0x7f0000000640)='TIPCv2\x00', 0x7, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000440)={{0x800, 0x100000001, 0x10000, 0xb29e, 0x10000, 0x6}, 0xff, 0x0, 0x3, 0x4, 0x9, "808bdb5572261dace775f972ad96fdc36515ce3d9b2e24e92928ee0b016ed708af9e93d9e06f2f238452dfb80a50efa717223b8354384ace99e113c7661a2899d427322f5e5dedbaa63c42930f15711968ffe7969beb968e55afc81e47350f3b8ef00e53daa0b91c232de556c37047cef2f2c6e2df2443a9651598191d9357ab"}) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="97030000", @ANYRES16=r8, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000740)={0x3, 0xcd, "804dd084c0b8815fd2b8a4597779545ef34fcb0a0b1365b78d9f762f3a059d54d8271aa72b59cd8d246208f6022f834137ddfad1df179691f117e8b0bfd920e81904bc82f2ff9278fe4f6d1ca87b873dda7b2915ae7a9415c1aa09198dcaa343f3866f604d62774e0852fff532f7dbc9bf8d8862e17bc9481a71ff7dc83a4cd9375ea1ee2b28a4c29987a60b2d3a35f61833763abc9087e8bdca77cb6d52801b5ae809fd477b08486da981d25254baaabbacf8f3b59b21327accdcee8180ca68428334dd6f69c9bbd83140298b"}) 19:31:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, 0x1b) sendto$inet6(r0, &(0x7f0000000000)="da87c425f39f4a1331fdbf0c9d777d56733424109145f7b91b711acd8658b84d9a84d71bae14b0702d43a56877d947ac2eae671e7ada2e36d82e869a96a28ed9ae6f6f4f2eadf75fdabc9a8b64c84bef1aafd34537b6d7873617941baad05d85a6ed28b554074ba5ee730fbd8e7105dda69d4e78006e63942494b0c4381d4e0345fa1bd4b85b81a00cb726abe6899b44daa74a57cba9732afebe262e43b4a6e0fe445131fd43aafc7a7c237aaf6dd79d920dd6df7efcb73b9b0e39e303ba244e58623bf69cd3d5f093fbdc919c", 0xcd, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x2}, 0x1c) 19:31:30 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@isdn={0x1d, 0x0, 0x0, 0x4}, 0x80, 0x0}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x90) 19:31:30 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xa8000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xd1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={r1, 0x7fffd, r0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) 19:31:30 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x4, 0x80) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz'}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffa) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x7f7f5f57, 0x80000000, 0x753f, 0x2, @stepwise={{0x5, 0x3}, {0x7}, {0x1, 0x83f}}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00\x00\xfe\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r1, r1, 0x1, 0xa3, &(0x7f00000000c0)="0355d9ad46ca54059058d4dac48608857894e6ff09d0b7721d681b988229ce78e6686e6c465a0f5f1ec0fa6810f66ddf5c3b0f23c05e5412de64766e7a03bd5b4e5858e0a9aedac89d703801e68b92f167110fa6028761f159bb68ae0786613231bd6c075295097a6ef85f3fa0ac9fed5fa69acabaaeb7a0c89aaff0172f2e3faa954d8fbc17123c2aaf9e7d27a927fb072bd39423a1658380bd60b8424e772fbac4de", 0x80, 0x6, 0x26d17f03, 0x80, 0xfffffffffffffff7, 0x1, 0x9, 'syz0\x00'}) 19:31:30 executing program 1: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000180)) 19:31:31 executing program 2: r0 = geteuid() r1 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='!vboxnet0security\x00', 0xfffffffffffffff9) keyctl$get_persistent(0x16, r0, r1) set_robust_list(&(0x7f0000000000), 0x18) 19:31:31 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000540)='/dev/full\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xba0) r1 = io_uring_setup(0xea, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/158, 0x9e}], 0x8) r2 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x4001) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = add_key(&(0x7f0000000580)='big_key\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="42e8322ecc38b338715787daf537ef914e11a8b51d647fa85ffce5f3358aa80977a68f5c11db42a502e1a3083d32d67a6e50d6f30442fe022d62f818b24dc3f8499ee3c4b392fc5167aae573fd8cfc9d117ef3095a51834890a91c4cdb96c312158dadf6849d3786ac66932a3090b5810e6234c7848d92c945b64481680d7ab0d9259fe653d953f5e0420bf3", 0x8c, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x6, 0x0, [], [{0x260d, 0x3, 0x1, 0x3, 0x7, 0x200}, {0x8001, 0x2, 0xc661, 0x100000001, 0x6}], [[], [], [], [], [], []]}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000006c0)={r4, 0xdc6e, 0xf540000000000000}, 0x0, &(0x7f0000000700)="83d548138292dff741d3fba272d08cb202c6d430dfd169b3f2ccc864015cef627788", &(0x7f0000000740)="b50cc2bcabfed54864b1832413b25b6d2b5845b8aee041d77de0a0160fe8fde36ce2b7acac3b608ce8a9fed38256") io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x3, 0x0, 0x2) r5 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000780)=""/19) [ 152.894762][ T8140] ------------[ cut here ]------------ [ 152.900632][ T8140] percpu_ref_kill_and_confirm called more than once on io_ring_ctx_ref_free! [ 152.901284][ T8140] WARNING: CPU: 0 PID: 8140 at lib/percpu-refcount.c:335 percpu_ref_kill_and_confirm+0x341/0x3b0 [ 152.920577][ T8140] Kernel panic - not syncing: panic_on_warn set ... [ 152.927208][ T8140] CPU: 0 PID: 8140 Comm: syz-executor.0 Not tainted 5.1.0-rc6+ #85 [ 152.935112][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.945214][ T8140] Call Trace: [ 152.948669][ T8140] dump_stack+0x172/0x1f0 [ 152.953031][ T8140] ? percpu_ref_kill_and_confirm+0x280/0x3b0 [ 152.959064][ T8140] panic+0x2cb/0x65c [ 152.963007][ T8140] ? __warn_printk+0xf3/0xf3 [ 152.967633][ T8140] ? percpu_ref_kill_and_confirm+0x341/0x3b0 [ 152.973741][ T8140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.980103][ T8140] ? __warn.cold+0x5/0x45 [ 152.984505][ T8140] ? percpu_ref_kill_and_confirm+0x341/0x3b0 [ 152.990544][ T8140] __warn.cold+0x20/0x45 [ 152.994931][ T8140] ? vprintk_emit+0x1ce/0x6d0 [ 152.999667][ T8140] ? percpu_ref_kill_and_confirm+0x341/0x3b0 [ 153.005774][ T8140] report_bug+0x263/0x2b0 [ 153.010158][ T8140] do_error_trap+0x11b/0x200 [ 153.014795][ T8140] do_invalid_op+0x37/0x50 [ 153.019233][ T8140] ? percpu_ref_kill_and_confirm+0x341/0x3b0 [ 153.025250][ T8140] invalid_op+0x14/0x20 [ 153.029431][ T8140] RIP: 0010:percpu_ref_kill_and_confirm+0x341/0x3b0 [ 153.036048][ T8140] Code: 03 e1 2a 06 01 48 89 fa 48 c1 ea 03 80 3c 02 00 75 76 49 8b 54 24 10 48 c7 c6 a0 71 a1 87 48 c7 c7 40 71 a1 87 e8 ed 8f 13 fe <0f> 0b 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 [ 153.055756][ T8140] RSP: 0018:ffff888063c77cf0 EFLAGS: 00010082 [ 153.062283][ T8140] RAX: 0000000000000000 RBX: 0000607f51491293 RCX: 0000000000000000 [ 153.070275][ T8140] RDX: 0000000000009a41 RSI: ffffffff815afcf6 RDI: ffffed100c78ef90 [ 153.078272][ T8140] RBP: ffff888063c77d20 R08: ffff8880856a4340 R09: fffffbfff1133639 [ 153.086550][ T8140] R10: fffffbfff1133638 R11: ffffffff8899b1c3 R12: ffff88809660d280 [ 153.094553][ T8140] R13: ffff88809660d288 R14: 0000000000000286 R15: 0000000000000000 [ 153.102576][ T8140] ? vprintk_func+0x86/0x189 [ 153.107379][ T8140] __io_uring_register+0xa7/0x1fe0 [ 153.112528][ T8140] ? __mutex_lock+0x3cd/0x1310 [ 153.117405][ T8140] ? __x64_sys_io_uring_register+0x182/0x1f0 [ 153.123419][ T8140] ? mutex_trylock+0x1e0/0x1e0 [ 153.128301][ T8140] ? io_sq_wq_submit_work+0x10f0/0x10f0 [ 153.133901][ T8140] __x64_sys_io_uring_register+0x193/0x1f0 [ 153.140109][ T8140] do_syscall_64+0x103/0x610 [ 153.145004][ T8140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.150923][ T8140] RIP: 0033:0x458da9 [ 153.154874][ T8140] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 153.174601][ T8140] RSP: 002b:00007f590b4b8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 153.183391][ T8140] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458da9 [ 153.191411][ T8140] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 153.199408][ T8140] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 153.207408][ T8140] R10: 0000000000000002 R11: 0000000000000246 R12: 00007f590b4b96d4 [ 153.215578][ T8140] R13: 00000000004cb878 R14: 00000000004d22e8 R15: 00000000ffffffff [ 153.224903][ T8140] Kernel Offset: disabled [ 153.229453][ T8140] Rebooting in 86400 seconds..