[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.136163] audit: type=1800 audit(1541761190.188:25): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.155630] audit: type=1800 audit(1541761190.198:26): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.175269] audit: type=1800 audit(1541761190.218:27): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. 2018/11/09 11:00:04 fuzzer started 2018/11/09 11:00:09 dialing manager at 10.128.0.26:38493 2018/11/09 11:00:09 syscalls: 1 2018/11/09 11:00:09 code coverage: enabled 2018/11/09 11:00:09 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/09 11:00:09 setuid sandbox: enabled 2018/11/09 11:00:09 namespace sandbox: enabled 2018/11/09 11:00:09 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/09 11:00:09 fault injection: enabled 2018/11/09 11:00:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/09 11:00:09 net packed injection: enabled 2018/11/09 11:00:09 net device setup: enabled 11:02:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000004080)='./file0\x00', 0xfffffffffffdffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/autofs\x00', 0x2080, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000001a00)={0x3}) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000017c0), 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/158, 0x9e}], 0x1}, 0x6}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/71, 0x47}, {&(0x7f0000003b40)=""/121, 0x79}], 0x3, &(0x7f0000003c00)=""/182, 0xb6, 0xfc1}, 0x100}, {{&(0x7f0000003cc0)=@alg, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000003d40)=""/128, 0x80, 0x3f}, 0x2}], 0x3, 0x0, &(0x7f0000003f40)) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001940)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001980)=0x14) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x1fffff) msgget(0x0, 0x308) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001500)={0x4, &(0x7f0000000300)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000016c0)={r2, &(0x7f0000001540)=""/134}) syzkaller login: [ 226.785286] IPVS: ftp: loaded support on port[0] = 21 [ 228.989970] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.996786] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.005512] device bridge_slave_0 entered promiscuous mode [ 229.138171] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.144803] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.153402] device bridge_slave_1 entered promiscuous mode [ 229.283237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.415189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.816285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.951019] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:02:45 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f00000005c0)="c8d63f23", 0x4) [ 230.699834] IPVS: ftp: loaded support on port[0] = 21 [ 230.897621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.905717] team0: Port device team_slave_0 added [ 231.058119] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.066280] team0: Port device team_slave_1 added [ 231.204948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.381294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.582511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.590167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.599550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.842130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.849740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.858985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.628697] ip (6357) used greatest stack depth: 53216 bytes left [ 234.046436] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.053025] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.061542] device bridge_slave_0 entered promiscuous mode [ 234.277236] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.283808] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.292421] device bridge_slave_1 entered promiscuous mode [ 234.400126] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.406745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.413878] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.420352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.428980] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.442157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.627445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.140654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.188969] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.358405] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.511298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 235.519082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.687911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 235.695149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 11:02:51 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") pwritev(r0, &(0x7f0000001800)=[{&(0x7f0000000600)="fd", 0x1}], 0x1, 0x0) [ 236.430104] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.438262] team0: Port device team_slave_0 added [ 236.669365] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.677665] team0: Port device team_slave_1 added [ 236.924614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.948623] IPVS: ftp: loaded support on port[0] = 21 [ 236.960066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.969302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.207522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 237.214934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.223884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.501162] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.509172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.518243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.787164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.795427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.804583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.790385] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.796985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.804049] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.810591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.819270] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.026712] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.033353] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.041788] device bridge_slave_0 entered promiscuous mode [ 241.338550] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.345747] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.354376] device bridge_slave_1 entered promiscuous mode [ 241.638054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.697489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.961028] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.839704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.160327] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.354545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.361744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.571443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.578803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.395814] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.403885] team0: Port device team_slave_0 added 11:02:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) [ 244.628296] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.636637] team0: Port device team_slave_1 added [ 245.078921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 245.088112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.096940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.369718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 245.376954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.385885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.412859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.579062] IPVS: ftp: loaded support on port[0] = 21 [ 245.861687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.869580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.878837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.261890] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 246.269673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.278590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.574589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.841856] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.848754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.856813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.094303] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.896670] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.903251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.910143] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.916715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.925279] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 250.533449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.939456] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.946080] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.954532] device bridge_slave_0 entered promiscuous mode [ 251.333225] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.339708] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.348209] device bridge_slave_1 entered promiscuous mode [ 251.676692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.952816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.879309] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 253.147187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.430488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.437941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.749422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.777372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.784624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.730347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 254.738509] team0: Port device team_slave_0 added 11:03:10 executing program 4: inotify_init() fdatasync(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x20102) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0x10000006d) clone(0x8008100, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x84000, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000100)="0a3742be041f0626d0182db411b3e5031c278a87cd9fb1fbba73a11c3488d8f5cbf760e13b6b674dc245adc6b1dc523499cb08d627cedea9ebe779a4904768bdca6379c9") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) sched_getscheduler(0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000200)) getegid() ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000400)) fsetxattr$security_capability(r0, &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000540)=@v3={0x3000000, [{0x3000000000000}, {0x0, 0x9}]}, 0x18, 0x0) [ 255.071781] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.131004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 255.139121] team0: Port device team_slave_1 added [ 255.546599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 255.553881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.562777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.942728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 255.950043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.958988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.315104] IPVS: ftp: loaded support on port[0] = 21 [ 256.323636] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.331222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.340733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.615669] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.622829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.630837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.745947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.753561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.762583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.053076] hrtimer: interrupt took 31159 ns 11:03:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000004080)='./file0\x00', 0xfffffffffffdffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/autofs\x00', 0x2080, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000001a00)={0x3}) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000017c0), 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/158, 0x9e}], 0x1}, 0x6}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/71, 0x47}, {&(0x7f0000003b40)=""/121, 0x79}], 0x3, &(0x7f0000003c00)=""/182, 0xb6, 0xfc1}, 0x100}, {{&(0x7f0000003cc0)=@alg, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000003d40)=""/128, 0x80, 0x3f}, 0x2}], 0x3, 0x0, &(0x7f0000003f40)) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001940)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001980)=0x14) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x1fffff) msgget(0x0, 0x308) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001500)={0x4, &(0x7f0000000300)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000016c0)={r2, &(0x7f0000001540)=""/134}) 11:03:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000004080)='./file0\x00', 0xfffffffffffdffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/autofs\x00', 0x2080, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000001a00)={0x3}) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000017c0), 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/158, 0x9e}], 0x1}, 0x6}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/71, 0x47}, {&(0x7f0000003b40)=""/121, 0x79}], 0x3, &(0x7f0000003c00)=""/182, 0xb6, 0xfc1}, 0x100}, {{&(0x7f0000003cc0)=@alg, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000003d40)=""/128, 0x80, 0x3f}, 0x2}], 0x3, 0x0, &(0x7f0000003f40)) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001940)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001980)=0x14) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x1fffff) msgget(0x0, 0x308) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001500)={0x4, &(0x7f0000000300)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000016c0)={r2, &(0x7f0000001540)=""/134}) [ 259.394512] 8021q: adding VLAN 0 to HW filter on device team0 11:03:15 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000001500)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x2, 0x9}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) 11:03:15 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="f0", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x200001, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f00000004c0)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010395aec20", 0x29}], 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031ae85717070") sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local, [0x0, 0x0, 0x0, 0x5400000000000000, 0x8]}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000600)}, 0x0) [ 260.743273] netlink: 'syz-executor0': attribute type 6 has an invalid length. [ 260.750668] netlink: 1 bytes leftover after parsing attributes in process `syz-executor0'. [ 260.854826] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 261.463463] netlink: 'syz-executor0': attribute type 6 has an invalid length. [ 261.470990] netlink: 1 bytes leftover after parsing attributes in process `syz-executor0'. [ 261.535668] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 11:03:17 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="f0", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x200001, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f00000004c0)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010395aec20", 0x29}], 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031ae85717070") sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local, [0x0, 0x0, 0x0, 0x5400000000000000, 0x8]}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="84", 0x1}], 0x1, &(0x7f0000000600)}, 0x0) [ 262.188511] netlink: 'syz-executor0': attribute type 6 has an invalid length. [ 262.196098] netlink: 1 bytes leftover after parsing attributes in process `syz-executor0'. [ 262.254045] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 262.276649] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.283255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.290147] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.296741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.305138] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.722315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:03:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$alg(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='wchan\x00') ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0x6, 0x5, 0x4, 0x0, {r4, r5/1000+10000}, {0x1, 0xe, 0x4, 0x8001, 0xff, 0xfffffffffffffbff, "bb6e9ddc"}, 0x1, 0x3, @fd=r6, 0x4}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'ifb0\x00\x00<\x00\x00\x00\x00\x00 \x00', &(0x7f00000002c0)=@ethtool_cmd={0x30, 0x88a, 0x7, 0x9, 0x2, 0xa440, 0x80, 0x100000001, 0x9, 0x0, 0x10001, 0x3, 0x0, 0x63ea, 0x1, 0x9, [0x7f, 0x14]}}) [ 263.496131] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.502806] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.511198] device bridge_slave_0 entered promiscuous mode 11:03:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000100)={0xffe0000000, 0x17, 0x5}) setsockopt$sock_int(r0, 0x1, 0x200004, &(0x7f0000000180)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x240000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xfff) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20040000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 263.766218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 263.944983] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.951510] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.960230] device bridge_slave_1 entered promiscuous mode 11:03:19 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, r2+30000000}}, &(0x7f0000000800)) timer_gettime(0x0, &(0x7f0000000080)) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r3, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000300), 0x8}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f000060df9c)=""/100, 0x64) [ 264.410708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.779850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 265.822111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.844440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.209531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 266.380566] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 266.387900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.698240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 266.705590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.915143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.578509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.586790] team0: Port device team_slave_0 added [ 267.822891] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.829310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.837415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.868131] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.876232] team0: Port device team_slave_1 added 11:03:23 executing program 1: sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000100)="2600000022004701050000000000000005006d20002b1f00c05d080a4a71f10101c7033400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000025c0), 0x4) sendto(r0, &(0x7f0000000080), 0x16, 0x0, 0x0, 0xfd92) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x20000000, 0x4) [ 268.198038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 268.205497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.214265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.399380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 268.406617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.415727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.645650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.653451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.662415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.706328] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.934745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.942532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.951275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.085116] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.091604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.098747] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.105317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.113643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 271.120394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.938683] 8021q: adding VLAN 0 to HW filter on device bond0 11:03:28 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000280), 0x80000003) [ 273.675592] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 274.273180] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 274.279726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.287719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.798374] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.396430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.837140] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 11:03:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) [ 278.305237] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 278.311540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.319522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.607140] 8021q: adding VLAN 0 to HW filter on device team0 11:03:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0x7, 0x7) 11:03:40 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x1c9c380}, {0x0, r2+30000000}}, &(0x7f0000000800)) timer_gettime(0x0, &(0x7f0000000080)) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r3, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000300), 0x8}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) read(r0, &(0x7f000060df9c)=""/100, 0x64) 11:03:40 executing program 5: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x7) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x78, 0x5, 0x1de5, 0x9, 0xffffffff, 0x0, "bf7f4b92d81cc133f31171a5c1ef4cea64555354ad99c90a29313b857ec1707db69e466335df0e88affefac8c26ec8e58e6eded1ced94b5f94a2cebff467fe1eec543a345baed350a8d99d0fe5e0582ea0543d97be50526775d645bc3bd7d7b3524893f8d349eee55e50da25b27f8330540a78d3fa863165"}, 0x190) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000300)={0x8000, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @rand_addr=0x2}}}, 0x108) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000440)={0x7, 0xa, 0x4, 0x80000000, {0x77359400}, {0x5, 0x2, 0x10000, 0x0, 0xb6d2000000000000, 0xff, "6e2532b2"}, 0x1000100000, 0x1, @offset=0x8001, 0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in=@loopback, @in6=@remote, 0x4e23, 0x6, 0x4e24, 0x1ff, 0x0, 0xa0, 0x20, 0x0, r2, r3}, {0x38, 0x6, 0x100000001, 0x0, 0x1, 0x4, 0x7c08, 0x7f}, {0x80000000, 0x9, 0x2ef, 0x31902023}, 0x1, 0x6e6bb9, 0x2, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x4d2, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x3500, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0xbd}}, 0xe8) bind$vsock_stream(r1, &(0x7f0000000600)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000640)={0x2, 0x4e23, @rand_addr=0xfffffffffffffff8}, 0x10) r4 = socket$inet(0x2, 0x80004, 0x8212) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000680)={@remote, r2}, 0x14) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000006c0)=0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000780)={0x2, 0x0, 0x1, 0x9b7}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000007c0)={r5, 0x100000000}) membarrier(0x20, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000880)=@get={0x1, &(0x7f0000000800)=""/102, 0x7f}) getresgid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) setfsgid(r6) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000980)={'ip6tnl0\x00', {0x2, 0x5, @multicast2}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000009c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000a00)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000a40)={r7, r8}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000a80)={r0}) setxattr$security_selinux(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='security.selinux\x00', &(0x7f0000000b40)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000b80)={r1, 0xefb1, 0x1a, r1}) 11:03:40 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) add_key$keyring(0xfffffffffffffffe, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) 11:03:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b80), 0x49249f8, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) 11:03:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:03:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:03:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x20000004, &(0x7f000031e000), 0x1c) 11:03:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x40, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x18) 11:03:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:03:41 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0x0, 0x4}, 0x20) 11:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) unshare(0x20020000) 11:03:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x3d1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0xf004, 0x488, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, [], 0x5}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.637374] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:03:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) [ 286.781595] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 287.072698] IPVS: ftp: loaded support on port[0] = 21 [ 290.118211] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.124914] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.133411] device bridge_slave_0 entered promiscuous mode [ 290.304185] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.310676] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.319324] device bridge_slave_1 entered promiscuous mode [ 290.489354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 290.632510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 291.131195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 291.305514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 291.523649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 291.530941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.707722] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 291.714980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.226130] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 292.234311] team0: Port device team_slave_0 added [ 292.446165] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 292.454439] team0: Port device team_slave_1 added [ 292.673812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 292.680898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.689742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.913861] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 292.920967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.929816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.101049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 293.108988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.118026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.292621] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 293.300244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.309346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.249684] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.256236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.263351] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.269786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.278273] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 295.285132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.907858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.226892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 300.551262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 300.557795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.565851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.853424] 8021q: adding VLAN 0 to HW filter on device team0 11:03:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x0, 0x0, 0x40000107], [0xc2]}) 11:03:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) unshare(0x20020000) 11:03:57 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = socket$inet6(0xa, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000580), 0xfffffec2) prctl$setfpexc(0xc, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f00000004c0)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffffffffffe, @ipv4={[], [], @local}}, 0x1c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000500)={0x8784053dc88fdb1, 0x1, 0x0, {0x3}}, 0xffffffffffffff80) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000800)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x2, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'gretap0\x00', r2}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000200)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e60400d7ff596e1c92de0eaa311f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7000000") sendfile(r3, r3, &(0x7f00000002c0)=0x204, 0xd9) 11:03:57 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:03:57 executing program 0: clone(0x200, &(0x7f0000000680), &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f00000003c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000680)='./file0\x00', &(0x7f0000000840), &(0x7f0000000a00)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) creat(&(0x7f0000000240)="e91f7189591e9233614b00", 0x0) r1 = creat(&(0x7f0000000080)='./file2\x00', 0x0) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000240), &(0x7f0000000000)) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000002c0)=""/150) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) 11:03:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040), 0x1e) 11:03:58 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 11:03:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20020000) 11:03:58 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:03:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:03:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fa0200000000000000000020950000000000000043e37c18824e833c04057565a9f40c74edab72a7e65bb6abdff0980f20b16428caa353e9518e8786fc4c4b148d1468903dd59e615bfa2e89c97a96212e15340af6e6177a4e364041b6331fc0377dcbf36530645a00f7a39d4308ed6885de8d46b8b8e8c3536fdbc58ceaebf0c23e13"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x4, 0x4, 0x5b9, 0x3}, {0x5, 0xb86, 0x9, 0x2}, {0x800, 0x2, 0xffffffff, 0x5}]}) r3 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r3, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc90b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x3f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000140)='sit0\x00') r7 = socket$kcm(0x11, 0x4000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f0000000080)=r7, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) 11:03:58 executing program 2: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = gettid() rt_sigsuspend(&(0x7f0000000040), 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) 11:03:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[]}) 11:03:58 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) 11:03:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000300)=""/101, 0xfffffdd7, 0x0, 0x0, 0x54fca8a0505bc1c8) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000540)=@rc, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000000)=""/22, 0x16}}], 0x173, 0x40000001, &(0x7f0000000180)={0x0, 0x989680}) 11:03:59 executing program 4: socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffffffffffc, @empty, 0x1}, 0xffffffffffffffeb) syz_emit_ethernet(0x180, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x8dffffff00000000, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:03:59 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e65742f73797a3002", 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000010000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000001850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000000, 0xe, 0x29, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", &(0x7f00000000c0)=""/41, 0x100}, 0x28) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000005c0)) 11:03:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:03:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB]}) 11:03:59 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e65742f73797a3002", 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000010000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000001850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000000, 0xe, 0x29, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", &(0x7f00000000c0)=""/41, 0x100}, 0x28) close(0xffffffffffffffff) 11:03:59 executing program 4: socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffffffffffc, @empty, 0x1}, 0xffffffffffffffeb) syz_emit_ethernet(0x180, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x8dffffff00000000, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:03:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) write$nbd(r2, &(0x7f0000001200)={0x67446698, 0x0, 0x0, 0x0, 0x4}, 0x10) 11:03:59 executing program 2: socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffffffffffc, @empty, 0x1}, 0xffffffffffffffeb) syz_emit_ethernet(0x140, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x8dffffff00000000, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:03:59 executing program 4: socketpair$unix(0x1, 0x80000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffffffffffc, @empty, 0x1}, 0xffffffffffffffeb) syz_emit_ethernet(0x180, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x8dffffff00000000, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x74, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:04:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040), 0x1e) 11:04:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rename(&(0x7f0000000080)='./control\x00', &(0x7f00000000c0)='./file0/file0\x00') 11:04:00 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000000240)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) inotify_add_watch(r1, &(0x7f0000000100)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) 11:04:00 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x8933, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff89, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 11:04:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x3d1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) time(&(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000001980)) 11:04:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 11:04:00 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0x1b}], 0x3, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = gettid() perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x6f, 0x9, 0x0, 0x5, 0x0, 0x0, 0xc01, 0x2, 0x7, 0x7, 0x311, 0x654dd018, 0x800, 0xddfa, 0x100000001, 0x7ff, 0x120000000000, 0x4, 0x7, 0x0, 0x0, 0x7, 0x0, 0x5c, 0x3, 0x7, 0x3f, 0x10000000000000, 0x5, 0x65, 0x4, 0x3f, 0xf, 0x100, 0xffffffffffffffe0, 0xa3, 0x0, 0x90, 0x1, @perf_config_ext={0x9, 0x7}, 0x20000, 0x3, 0xffffffff7fffffff, 0x6, 0x0, 0x8, 0x765}, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000007c0)) socketpair(0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000880)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000d00)={&(0x7f0000000980)=@l2={0x1f, 0x7, {0xe7, 0x3, 0x63, 0x8, 0x396c, 0x256}, 0x3, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000a00)="5392ef21ebff9f93af4eeab6101ca826fa358bbae0df46ac83d56ae2e6291b294a2661227abcd9a4458ab30889748ae30c1dc9fccca1f18a0a333bca1a9bed68ceeaa35d9c83de3aa110617b4fbff0dcb125af309527838adee253affe748667b8e127a3de5ff3b1a8f5abec0cfa8306f2520d35f9a21161fa353797213dec4b9dbe0b1b7a8d72d0e14fa23bfa77d76783bc4889c74a0a97bc3b59ec30dc668eb574a5eeb012087c97e5984cbeccfbb6a93681d94600b23895e758463bc842cf9174acdbbc425968d6811b937884a37dbf", 0xd1}], 0x1, &(0x7f0000000c00)=ANY=[], 0x0, 0x10}, 0x800) socketpair(0x2, 0x8, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x894c, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)=')\x00') ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000700)) r6 = socket$kcm(0xa, 0x6, 0x0) getpid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x175) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) socketpair(0x7, 0xa, 0x4b, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r8}) [ 305.648943] input: syz1 as /devices/virtual/input/input5 11:04:00 executing program 3: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f00000003c0)='./file1\x00', 0x40, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) execve(&(0x7f0000000480)='./file1\x00', &(0x7f0000000600), &(0x7f0000000800)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320fd) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) [ 305.730098] input: syz1 as /devices/virtual/input/input6 11:04:00 executing program 2: keyctl$negate(0xd, 0x0, 0x1000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x442, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0x10004}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/242, 0xf2}], 0x1) 11:04:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0xc0000103, 0x0, 0x40000003], [0xc2]}) 11:04:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) [ 306.182682] kvm [8097]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 11:04:01 executing program 4: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 11:04:01 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0x1b}], 0x3, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) r0 = gettid() perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x6f, 0x9, 0x0, 0x5, 0x0, 0x0, 0xc01, 0x2, 0x7, 0x7, 0x311, 0x654dd018, 0x800, 0xddfa, 0x100000001, 0x7ff, 0x120000000000, 0x4, 0x7, 0x0, 0x0, 0x7, 0x0, 0x5c, 0x3, 0x7, 0x3f, 0x10000000000000, 0x5, 0x65, 0x4, 0x3f, 0xf, 0x100, 0xffffffffffffffe0, 0xa3, 0x0, 0x90, 0x1, @perf_config_ext={0x9, 0x7}, 0x20000, 0x3, 0xffffffff7fffffff, 0x6, 0x0, 0x8, 0x765}, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000007c0)) socketpair(0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000880)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)=r1, 0x4) sendmsg$kcm(r2, &(0x7f0000000d00)={&(0x7f0000000980)=@l2={0x1f, 0x7, {0xe7, 0x3, 0x63, 0x8, 0x396c, 0x256}, 0x3, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000a00)="5392ef21ebff9f93af4eeab6101ca826fa358bbae0df46ac83d56ae2e6291b294a2661227abcd9a4458ab30889748ae30c1dc9fccca1f18a0a333bca1a9bed68ceeaa35d9c83de3aa110617b4fbff0dcb125af309527838adee253affe748667b8e127a3de5ff3b1a8f5abec0cfa8306f2520d35f9a21161fa353797213dec4b9dbe0b1b7a8d72d0e14fa23bfa77d76783bc4889c74a0a97bc3b59ec30dc668eb574a5eeb012087c97e5984cbeccfbb6a93681d94600b23895e758463bc842cf9174acdbbc425968d6811b937884a37dbf", 0xd1}], 0x1, &(0x7f0000000c00)=ANY=[], 0x0, 0x10}, 0x800) socketpair(0x2, 0x8, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x894c, &(0x7f0000000040)) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', r4}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)=')\x00') ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000700)) r6 = socket$kcm(0xa, 0x6, 0x0) getpid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x175) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) socketpair(0x7, 0xa, 0x4b, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r8}) 11:04:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f0000000180), 0x80000000, &(0x7f0000000500)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @broadcast}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x111}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r0, 0x0, 0x0) 11:04:01 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@random="77b0e1efedfa", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @multicast1}, @igmp}}}}, &(0x7f0000aed000)) [ 306.776529] ptrace attach of "/root/syz-executor0"[8127] was attempted by "/root/syz-executor0"[8128] 11:04:01 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1a5) write(r1, &(0x7f00000000c0)="a26e", 0x2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:02 executing program 4: clone(0x820002102011ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x10) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000400)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0, &(0x7f0000000ac0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="1273954ec820"}, 0x14) 11:04:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x7) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="0e", 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x6, 0x4) 11:04:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:02 executing program 3: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f00000003c0)='./file1\x00', 0x40, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) execve(&(0x7f0000000480)='./file1\x00', &(0x7f0000000600), &(0x7f0000000800)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320fd) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 11:04:02 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) 11:04:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="66b98103000066b80200008066ba000000000f30baf80c66b818a0078e66efbafc0cb80040efbad00466b80b00000066ef260f01b50d00f20f0136003067260f01cb0f07bad004ec0f01cb0f35", 0x4d}], 0x1, 0x0, &(0x7f0000000080), 0x0) 11:04:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={"6272696467655f736c6176655f310004", @random="01003a1e2410"}) 11:04:02 executing program 1: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xdc, &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[]}, 0x0) mbind(&(0x7f00002ba000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000000c0), 0x45, 0x0) 11:04:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:03 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r0 = open(&(0x7f0000000080)='./file0\x00', 0x721541, 0x2a) recvfrom$inet6(r0, &(0x7f0000000480)=""/250, 0xfa, 0x12000, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) mknod(&(0x7f0000000380)='./file0\x00', 0xd616a9c21189c7e8, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYBLOB="a07447a6"], &(0x7f0000000340)=0x1) mkdirat(0xffffffffffffffff, &(0x7f00000189a2)='./file0\x00', 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) readahead(r1, 0x8, 0x0) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000000)=0x66f6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000001000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 11:04:03 executing program 0: clone(0x0, &(0x7f0000659ffe), &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000480)) clone(0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0)) wait4(0x0, 0x0, 0x80000002, &(0x7f0000000240)) wait4(0x0, &(0x7f0000000100), 0x40000002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) 11:04:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000400)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) 11:04:03 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) close(r0) 11:04:03 executing program 3: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f00000003c0)='./file1\x00', 0x40, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) execve(&(0x7f0000000480)='./file1\x00', &(0x7f0000000600), &(0x7f0000000800)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320fd) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 11:04:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:04 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000c40)={0x0, 0x6}, &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000cc0)={r0, 0x2}, &(0x7f0000000d00)=0x8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) timer_create(0x2, &(0x7f0000000840)={0x0, 0x2f, 0x4}, &(0x7f0000000880)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip6_tables_targets\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2, 0x500}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000046a000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000040)="65f3650f0052000f06e20bf2a7ba200066b80e00000066efda78000f196f00c8f5ff7cd9f8b800008ee0", 0x2a}], 0x1, 0x0, &(0x7f0000000540), 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x0) 11:04:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2f, 'pids'}, {0x2f, 'rdma'}, {0x0, 'cpu'}, {0x0, 'cpu'}]}, 0x16) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0x4, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory', 0xe}]}, 0x200600) [ 309.667001] mmap: syz-executor4 (8231) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:04:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040), 0x1e) 11:04:04 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r0 = open(&(0x7f0000000080)='./file0\x00', 0x721541, 0x2a) recvfrom$inet6(r0, &(0x7f0000000480)=""/250, 0xfa, 0x12000, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) mknod(&(0x7f0000000380)='./file0\x00', 0xd616a9c21189c7e8, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYBLOB="a07447a6"], &(0x7f0000000340)=0x1) mkdirat(0xffffffffffffffff, &(0x7f00000189a2)='./file0\x00', 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) readahead(r1, 0x8, 0x0) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000000)=0x66f6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000001000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) 11:04:04 executing program 3: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f00000003c0)='./file1\x00', 0x40, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) execve(&(0x7f0000000480)='./file1\x00', &(0x7f0000000600), &(0x7f0000000800)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x1320fd) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 11:04:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:07 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x100000003, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x10102, &(0x7f0000001540)={r2}) pkey_alloc(0x0, 0x1) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x10001) getegid() sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) getpid() accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) finit_module(r1, &(0x7f0000000280)='\x00', 0x1) r3 = dup3(r0, r1, 0x80000) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) 11:04:07 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) r0 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000380)='no9devposix_acl_access-N%@\a{#keyring,\\#^:\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000001c0), 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) gettid() openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x442, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x800000a, 0x0, 0x0, 0x0, 0x9917, 0x10004}, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x10c) r1 = msgget(0x1, 0x5) msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000505a22d09b9ce94ee49156091e414dfcb209e061c82a6ff5082fe7ca92869d45ff808eda6a33d9f662cad970de3cd579e9301b450988cd5a0bfde5ed87b0010000008f0b8cfe420f6779ebe028ed9c0fe9915af1b7529b4b935fb3f1de1f5f84b8e8d5db55c0a4359e7cf0f963069cfd1acbdc8275701cfc130803505c561d724d427e136369983099785023ac2d1a039f1d6de1b90c97934f49fb4ec1ac782e59f7bce7a0c5bda970e0cecf5c0dbfc08043447c"], 0x1, 0x800) open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x400000026) syslog(0x2, &(0x7f0000000640)=""/89, 0x59) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r2 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000002, &(0x7f0000000200)) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xffffffffffffffff, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) 11:04:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:07 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0xfff, 0x4) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2, 0x0, 0x60}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 11:04:07 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x108) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmmsg(0xffffffffffffffff, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x0, "4bc333b8595a865187089d9bd700000004"}], 0x28}}], 0x1, 0x0) 11:04:08 executing program 2: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 313.051099] kernel msg: ebtables bug: please report to author: bad policy 11:04:08 executing program 4: 11:04:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34003}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002800290800000000000000000800000004000400"], 0x1}}, 0x0) 11:04:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) 11:04:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000600)='fuse\x00', 0x25, &(0x7f0000000680)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 11:04:08 executing program 2: [ 313.996474] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value [ 314.044196] proc: unrecognized mount option "fd=0xffffffffffffffff" or missing value 11:04:09 executing program 2: 11:04:09 executing program 3: 11:04:09 executing program 4: 11:04:09 executing program 0: 11:04:09 executing program 1: 11:04:09 executing program 3: 11:04:09 executing program 2: 11:04:09 executing program 1: 11:04:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:09 executing program 4: 11:04:09 executing program 0: 11:04:10 executing program 2: 11:04:10 executing program 3: 11:04:10 executing program 1: 11:04:10 executing program 4: 11:04:10 executing program 0: 11:04:10 executing program 2: 11:04:10 executing program 3: 11:04:10 executing program 4: 11:04:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:10 executing program 2: 11:04:10 executing program 1: 11:04:10 executing program 0: 11:04:10 executing program 3: 11:04:11 executing program 2: 11:04:11 executing program 4: 11:04:11 executing program 3: 11:04:11 executing program 0: 11:04:11 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:11 executing program 1: 11:04:11 executing program 2: 11:04:11 executing program 4: 11:04:11 executing program 3: 11:04:11 executing program 0: 11:04:11 executing program 1: 11:04:11 executing program 3: 11:04:11 executing program 4: 11:04:12 executing program 2: 11:04:12 executing program 0: 11:04:12 executing program 1: 11:04:12 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:12 executing program 3: 11:04:12 executing program 0: 11:04:12 executing program 2: 11:04:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) 11:04:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b", 0x8b, 0xfffffffffffffffd) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980)="230a9f39cc653f", 0x7, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0xa10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000540], 0x0, &(0x7f0000000000), &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6tnl0\x00', 'teql0\x00', 'bridge_slave_1\x00', 'bridge_slave_1\x00', @link_local, [], @local, [], 0x910, 0x938, 0x980, [@among={'among\x00', 0x87c, {{0x0, 0x800, 0x0, {[], 0x3, [{[], @loopback}, {}, {[], @broadcast}]}, {[], 0x5, [{[], @rand_addr}, {[], @remote}, {[], @rand_addr}, {[], @rand_addr}, {[], @multicast1}]}}}}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@log={'log\x00', 0x24, {{0x0, "1f9bf16029c6f67d33397ab27cb70202980708693b59969ffe29b1186b14"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xaa0) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000540)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)=']\x00']) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000480)={0x6, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffffffff801, 0x1, 0x9, 0x7, 0x6, 0x5}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000700)=0x1) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000140)=0x2) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x20, 0x29, 0x0, "4bc333b8595a865187089d9bd700000004"}], 0x20}}], 0x1, 0x0) 11:04:12 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 317.824473] kernel msg: ebtables bug: please report to author: Wrong len argument 11:04:12 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') pause() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x100b}}, 0x20) 11:04:13 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) [ 318.147037] kernel msg: ebtables bug: please report to author: Wrong len argument 11:04:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x3d1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0xf004, 0x488, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, [], 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x78}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:04:13 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:13 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@remote, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x33, r0, r1}, {0xc9, 0x4, 0xe74b, 0x97d, 0x42ff, 0x6, 0xfff, 0x5}, {0x6, 0xff2, 0x2, 0x9}, 0x3, 0x6e6bb5, 0x3, 0x1}, {{@in=@multicast1, 0x4d2, 0x6c}, 0x2, @in6=@loopback, 0x3501, 0x0, 0x3, 0x8, 0x4, 0x2, 0x6}}, 0xe8) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) 11:04:13 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0x2c) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x80000000075, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)="62627200127a7befb1aecd9d343c125105380d534d033390f728a1d423f4e7de0e284f4e76cd331830592dd776c542f5279a821f624aa22dc8d441c18a0f716a6df525e17304091496afcbc5bb1fdeb3a2b1669c2de799359c50b894", 0x5c) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 318.606008] Option ' ' to dns_resolver key: bad/missing value 11:04:13 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/35, 0x23}], 0x5, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) r1 = gettid() perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x6f, 0x9, 0x0, 0x5, 0x0, 0x0, 0xc01, 0x2, 0x7, 0x7, 0x311, 0x654dd018, 0x800, 0xddfa, 0x100000001, 0x7ff, 0x120000000000, 0x4, 0x7, 0x0, 0x0, 0x7, 0x0, 0x5c, 0x3, 0x7, 0x3f, 0x10000000000000, 0x5, 0x65, 0x4, 0x3f, 0xf, 0x100, 0xffffffffffffffe0, 0xa3, 0x0, 0x90, 0x1, @perf_config_ext={0x9, 0x7}, 0x20000, 0x3, 0xffffffff7fffffff, 0x6, 0x0, 0x8, 0x765}, r1, 0x7, r0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000007c0)) socketpair(0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000880)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000d00)={&(0x7f0000000980)=@l2={0x1f, 0x7, {0xe7, 0x3, 0x63, 0x8, 0x396c, 0x256}, 0x3, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000a00)="5392ef21ebff9f93af4eeab6101ca826fa358bbae0df46ac83d56ae2e6291b294a2661227abcd9a4458ab30889748ae30c1dc9fccca1f18a0a333bca1a9bed68ceeaa35d9c83de3aa110617b4fbff0dcb125af309527838adee253affe748667b8e127a3de5ff3b1a8f5abec0cfa8306f2520d35f9a21161fa353797213dec4b9dbe0b1b7a8d72d0e14fa23bfa77d76783bc4889c74a0a97bc3b59ec30dc668eb574a5eeb012087c97e5984cbeccfbb6a93681d94600b23895e758463bc842cf9174acdbbc425968d6811b937884a37dbf", 0xd1}], 0x1, &(0x7f0000000c00)=ANY=[], 0x0, 0x10}, 0x800) socketpair(0x2, 0x8, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x894c, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', r5}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)=')\x00') ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000700)) r7 = socket$kcm(0xa, 0x6, 0x0) getpid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r8}, 0x175) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r9}, 0x10) socketpair(0x7, 0xa, 0x4b, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r9}) 11:04:13 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x9) 11:04:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:14 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) [ 319.163781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:04:14 executing program 4: r0 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 11:04:14 executing program 2: r0 = epoll_create1(0x0) flock(r0, 0x5) 11:04:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/35, 0x23}], 0x5, &(0x7f0000000600)=""/167, 0xa7, 0xfff}, 0x40000000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) r1 = gettid() perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x6f, 0x9, 0x0, 0x5, 0x0, 0x0, 0xc01, 0x2, 0x7, 0x7, 0x311, 0x654dd018, 0x800, 0xddfa, 0x100000001, 0x7ff, 0x120000000000, 0x4, 0x7, 0x0, 0x0, 0x7, 0x0, 0x5c, 0x3, 0x7, 0x3f, 0x10000000000000, 0x5, 0x65, 0x4, 0x3f, 0xf, 0x100, 0xffffffffffffffe0, 0xa3, 0x0, 0x90, 0x1, @perf_config_ext={0x9, 0x7}, 0x20000, 0x3, 0xffffffff7fffffff, 0x6, 0x0, 0x8, 0x765}, r1, 0x7, r0, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000007c0)) socketpair(0x0, 0x3, 0xfffffffffffffffe, &(0x7f0000000880)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000d00)={&(0x7f0000000980)=@l2={0x1f, 0x7, {0xe7, 0x3, 0x63, 0x8, 0x396c, 0x256}, 0x3, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000a00)="5392ef21ebff9f93af4eeab6101ca826fa358bbae0df46ac83d56ae2e6291b294a2661227abcd9a4458ab30889748ae30c1dc9fccca1f18a0a333bca1a9bed68ceeaa35d9c83de3aa110617b4fbff0dcb125af309527838adee253affe748667b8e127a3de5ff3b1a8f5abec0cfa8306f2520d35f9a21161fa353797213dec4b9dbe0b1b7a8d72d0e14fa23bfa77d76783bc4889c74a0a97bc3b59ec30dc668eb574a5eeb012087c97e5984cbeccfbb6a93681d94600b23895e758463bc842cf9174acdbbc425968d6811b937884a37dbf", 0xd1}], 0x1, &(0x7f0000000c00)=ANY=[], 0x0, 0x10}, 0x800) socketpair(0x2, 0x8, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x894c, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000780)={&(0x7f0000000740)='./file0\x00', r5}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)=')\x00') ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000700)) r7 = socket$kcm(0xa, 0x6, 0x0) getpid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r8}, 0x175) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r9}, 0x10) socketpair(0x7, 0xa, 0x4b, &(0x7f0000000800)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r9}) 11:04:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x3d1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @ioapic={0xf004, 0x488, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x77c}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, [], 0x101}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:04:14 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:14 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev, r1}, 0x14) 11:04:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x0, @rand_addr, 0x0, 0x0, 'lc\x00'}, 0x2c) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x80000000075, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)="62627200127a7befb1aecd9d343c125105380d534d033390f728a1d423f4e7de0e284f4e76cd331830592dd776c542f5279a821f624aa22dc8d441c18a0f716a6df525e17304091496afcbc5bb1fdeb3a2b1669c2de799359c50b894", 0x5c) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 11:04:15 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:15 executing program 0: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1, &(0x7f0000000040)}, 0x0) recvmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=""/133, 0x85}, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000300)=@sco, 0x80, &(0x7f00000003c0), 0x0, &(0x7f00000005c0)=""/10, 0xa}, 0x0) recvmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/67, 0x43}, 0x0) 11:04:15 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000040)) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000a40)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001e40)="b7", 0x1}], 0x1, &(0x7f0000000800)=ANY=[], 0x0, 0x7fe}, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000dc0)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000bc0)="7792809ab945b79c1787be5359d55a29849022cc86a823b9de29fb59e88fe553cbdb7f1bcf6ca532abeec3ae10d038e0d3c4bf26ad34cd341a7715a0cfc40c2a5d5e2e066db5b7fc925d72", 0x4b}], 0x1, &(0x7f0000000580)}, 0x0) 11:04:15 executing program 4: pipe2(&(0x7f0000000100), 0x4800) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20020000) 11:04:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@remote, @in6}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="72bdae87311da679e5feef67bfb5610000d264ba913ee0"], 0x1}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file0\x00') r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000380)) chown(&(0x7f0000000280)='./file0\x00', r1, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x7, 0x40}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680), &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa000000000000000000000180c2000001000000000000000000007f000001ac1414aa04000000010000000000813de0000001ffffffffffffffffffffffffffff00000000000000000000000000000000000000ff000000ff00000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000ffffffff000000000000000000000000"], 0x1) setuid(r2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001ff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x2784, 0x4973c041, 0x3, 0x1, 0x1, 0xfffffffffffffffa}, 0x2c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0xffffffffc0000000, &(0x7f00000001c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2, 0x0) restart_syscall() read$eventfd(r4, &(0x7f0000000340), 0x8) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x10001) getpid() getrandom(&(0x7f0000000040)=""/59, 0x3b, 0x1) 11:04:15 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x91) [ 320.913751] IPVS: ftp: loaded support on port[0] = 21 11:04:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:16 executing program 4: 11:04:16 executing program 3: [ 321.265932] IPVS: ftp: loaded support on port[0] = 21 11:04:16 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:16 executing program 4: 11:04:16 executing program 3: 11:04:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:16 executing program 2: 11:04:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@remote, @in6}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="72bdae87311da679e5feef67bfb5610000d264ba913ee0"], 0x1}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file0\x00') r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000380)) chown(&(0x7f0000000280)='./file0\x00', r1, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x7, 0x40}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) request_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680), &(0x7f00000006c0)='\x00', 0xfffffffffffffff9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa000000000000000000000180c2000001000000000000000000007f000001ac1414aa04000000010000000000813de0000001ffffffffffffffffffffffffffff00000000000000000000000000000000000000ff000000ff00000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000ffffffff000000000000000000000000"], 0x1) setuid(r2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001ff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x2784, 0x4973c041, 0x3, 0x1, 0x1, 0xfffffffffffffffa}, 0x2c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0xffffffffc0000000, &(0x7f00000001c0)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2, 0x0) restart_syscall() read$eventfd(r4, &(0x7f0000000340), 0x8) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x10001) getpid() getrandom(&(0x7f0000000040)=""/59, 0x3b, 0x1) 11:04:17 executing program 3: 11:04:17 executing program 4: 11:04:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) [ 322.151517] IPVS: ftp: loaded support on port[0] = 21 11:04:17 executing program 2: 11:04:17 executing program 3: 11:04:17 executing program 4: 11:04:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:17 executing program 2: 11:04:17 executing program 3: 11:04:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:18 executing program 0: 11:04:18 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:18 executing program 4: 11:04:18 executing program 2: 11:04:18 executing program 3: 11:04:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:18 executing program 3: 11:04:18 executing program 4: 11:04:18 executing program 2: 11:04:18 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:18 executing program 0: 11:04:18 executing program 3: 11:04:19 executing program 2: 11:04:19 executing program 4: 11:04:19 executing program 0: 11:04:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x0, 0x0, 0x400000b7], [0xc2]}) 11:04:19 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:19 executing program 2: 11:04:19 executing program 4: 11:04:19 executing program 0: 11:04:19 executing program 3: 11:04:20 executing program 2: 11:04:20 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:20 executing program 0: 11:04:20 executing program 4: 11:04:20 executing program 3: 11:04:20 executing program 2: 11:04:20 executing program 0: 11:04:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:20 executing program 4: 11:04:20 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:04:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x7) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x22080, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="0e", 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x6, 0x4) 11:04:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) close(0xffffffffffffffff) 11:04:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fa0200000000000000000020950000000000000043e37c18824e833c04057565a9f40c74edab72a7e65bb6abdff0980f20b16428caa353e9518e8786fc4c4b148d1468903dd59e615bfa2e89c97a96212e15340af6e6177a4e364041b6331fc0377dcbf36530645a00f7a39d4308ed6885de8d46b8b8e8c3536fdbc58ceaebf0c23e13"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x4, 0x4, 0x5b9, 0x3}, {0x5, 0xb86, 0x9, 0x2}, {0x800, 0x2, 0xffffffff, 0x5}]}) r3 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r3, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc90b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x3f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000140)='sit0\x00') r7 = socket$kcm(0x11, 0x4000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f0000000080)=r7, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) 11:04:21 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040), 0x8) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:21 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:04:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r3, 0x2aa, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x2b283714574a214d}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x7d18, 0x6}) creat(&(0x7f0000000340)='./bus\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 11:04:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:21 executing program 4: userfaultfd(0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002000), 0x1000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) socket$inet_dccp(0x2, 0x6, 0x0) 11:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x7) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x22080, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="0e", 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x6, 0x4) 11:04:22 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:04:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0xf, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x34000}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 11:04:22 executing program 4: clone(0x200, &(0x7f0000000680), &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f00000003c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000680)='./file0\x00', &(0x7f0000000840), &(0x7f0000000a00)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) creat(&(0x7f0000000240)="e91f7189591e9233614b00", 0x3) r1 = creat(&(0x7f0000000080)='./file2\x00', 0x0) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000240), &(0x7f0000000000)) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000002c0)=""/150) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) 11:04:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:22 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:04:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/115, 0x73}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) 11:04:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f00000000c0)=""/1}, 0x18) 11:04:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001400197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07910e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) 11:04:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x100001, 'dh\x00'}, 0x2c) sendto$inet6(r0, &(0x7f0000000000), 0x32a, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 11:04:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:23 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e80)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002ec0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0xffffffffffffffff}, 0x2c) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) get_robust_list(0x0, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f00000003c0)=0x18) 11:04:23 executing program 0: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 11:04:23 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 11:04:23 executing program 3: open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='p'], 0x1) sendfile(r0, r0, &(0x7f0000000140), 0xd1) [ 328.687738] IPVS: ftp: loaded support on port[0] = 21 11:04:23 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x100001, 'dh\x00'}, 0x2c) sendto$inet6(r0, &(0x7f0000000000), 0x32a, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 11:04:24 executing program 3: socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 11:04:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:24 executing program 1: 11:04:24 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x27, 0x10001, 0x13, 0x6, 0x0, 0x9, 0x0, 0x80, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x5, 0x3, 0x4, 0x0, 0x0, 0x8a, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x820, 0x7fff, 0x0, 0x1, 0x6929, 0x6a, 0x2}, r1, 0x8, r0, 0x1) 11:04:24 executing program 0: r0 = socket(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000280), 0xfe0b, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 11:04:24 executing program 3: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80003, 0x7) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x6, 0x4) 11:04:24 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x12e0) 11:04:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970600dc0d") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f0000000140)}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280), 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000d00)="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") ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r2, 0x0, 0x1b, &(0x7f00000002c0)='em0selinuxppp0%self%cpuset\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f00000004c0)="803bb6b127490d9b130f7192d9495862ad4e03ccf83dfcd79c036fb21cc2226560ad81d9fbbfe8b791aa8b620317e0a2fa91affc5311edd305659bd63d4cbe55c8c742bda4dd4a44be5a56ec26247696db3dfa55cf4aad8c2a9027c79b646fb7871806f3bda11c305955dafcb75e2391bb", &(0x7f0000000340)}, 0x20) gettid() ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9) 11:04:24 executing program 0: 11:04:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:25 executing program 1: 11:04:25 executing program 0: 11:04:25 executing program 1: 11:04:25 executing program 3: 11:04:25 executing program 1: [ 331.388747] device lo entered promiscuous mode [ 331.414266] device lo left promiscuous mode [ 332.006036] device lo entered promiscuous mode 11:04:27 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x27, 0x10001, 0x13, 0x6, 0x0, 0x9, 0x0, 0x80, 0x3ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x5, 0x3, 0x4, 0x0, 0x0, 0x8a, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x820, 0x7fff, 0x0, 0x1, 0x6929, 0x6a, 0x2}, r1, 0x8, r0, 0x1) 11:04:27 executing program 0: 11:04:27 executing program 3: 11:04:27 executing program 1: 11:04:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) 11:04:27 executing program 2: 11:04:27 executing program 0: 11:04:27 executing program 2: 11:04:27 executing program 3: 11:04:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) 11:04:28 executing program 1: 11:04:28 executing program 2: 11:04:29 executing program 4: 11:04:29 executing program 0: 11:04:29 executing program 3: 11:04:29 executing program 1: 11:04:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x0, 0x0) 11:04:29 executing program 2: 11:04:29 executing program 3: 11:04:29 executing program 1: 11:04:29 executing program 0: 11:04:29 executing program 5: 11:04:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @empty, 0x0, 0x100002, 'dh\x00'}, 0x2c) sendto$inet6(r0, &(0x7f0000000000), 0x32a, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 11:04:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002400)={&(0x7f0000000040), 0xc, &(0x7f00000023c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) close(r0) 11:04:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}]}, 0x28}}, 0x0) 11:04:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000004080)='./file0\x00', 0xfffffffffffdffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/autofs\x00', 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000017c0), 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/158, 0x9e}], 0x1}, 0x6}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/71, 0x47}, {&(0x7f0000003b40)=""/121, 0x79}], 0x3, &(0x7f0000003c00)=""/182, 0xb6, 0xfc1}, 0x100}, {{&(0x7f0000003cc0)=@alg, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000003d40)=""/128, 0x80, 0x3f}, 0x2}], 0x3, 0x0, &(0x7f0000003f40)) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x1fffff) msgget(0x0, 0x308) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001500)={0x4, &(0x7f0000000300)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000016c0)={0x0, &(0x7f0000001540)=""/134}) 11:04:29 executing program 3: r0 = socket$packet(0x11, 0x800000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0xfd, 0x4) sendto$inet6(r0, &(0x7f0000000040)="040400000700000000000000fff55b424a938207d9fb3780398d5375000000007929301ee616d543e065902f800094c3b4e431060f118d0000f55dc63cac0000000000faffffff44710d44aeb46245004bae13566424aa00000000000000000000000000e7485d8ddeb7d5fb", 0x6c, 0x0, &(0x7f00000000c0)={0xa, 0x200800800, 0x6, @local}, 0x1c) 11:04:30 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:04:30 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) 11:04:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000004080)='./file0\x00', 0xfffffffffffdffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/autofs\x00', 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000017c0), 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/158, 0x9e}], 0x1}, 0x6}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/71, 0x47}, {&(0x7f0000003b40)=""/121, 0x79}], 0x3, &(0x7f0000003c00)=""/182, 0xb6, 0xfc1}, 0x100}, {{&(0x7f0000003cc0)=@alg, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000003d40)=""/128, 0x80, 0x3f}, 0x2}], 0x3, 0x0, &(0x7f0000003f40)) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x1fffff) msgget(0x0, 0x308) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001500)={0x4, &(0x7f0000000300)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000016c0)={0x0, &(0x7f0000001540)=""/134}) 11:04:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(0xffffffffffffffff, 0x28007d) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x9, 0x0, r0, 0x0, 0x0, 0x9, 0x4}) socket$inet6(0xa, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f00000000c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x9, r1, 0x0, 0x0) 11:04:30 executing program 4: add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, 0x0, 0x0, 0x28d5, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x442, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0x10004}, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) syslog(0x2, &(0x7f0000000640)=""/89, 0x59) 11:04:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mprotect(&(0x7f000010d000/0x4000)=nil, 0x4000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x24180) read(r2, &(0x7f0000000200)=""/30, 0xfffffe80) 11:04:31 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007011dfffd940101830020200a00090f000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) 11:04:31 executing program 0: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00006e9ff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', &(0x7f00009b9000)="0500de00667300", 0x1008, &(0x7f0000000100)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r2, &(0x7f00000001c0)='./file0/file0/file0/file0\x00', r2, &(0x7f0000284000)='./file0/file0/file0/file0\x00', 0x0) 11:04:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x40044040, 0x0) 11:04:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000004080)='./file0\x00', 0xfffffffffffdffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/autofs\x00', 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f00000017c0), 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)=""/158, 0x9e}], 0x1}, 0x6}, {{&(0x7f0000002a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/71, 0x47}, {&(0x7f0000003b40)=""/121, 0x79}], 0x3, &(0x7f0000003c00)=""/182, 0xb6, 0xfc1}, 0x100}, {{&(0x7f0000003cc0)=@alg, 0x80, 0xfffffffffffffffe, 0x0, &(0x7f0000003d40)=""/128, 0x80, 0x3f}, 0x2}], 0x3, 0x0, &(0x7f0000003f40)) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x1fffff) msgget(0x0, 0x308) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001500)={0x4, &(0x7f0000000300)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000016c0)={0x0, &(0x7f0000001540)=""/134}) 11:04:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000002400)={&(0x7f0000000040), 0xc, &(0x7f00000023c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) 11:04:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup2(r0, r0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x6) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) pwritev(r0, &(0x7f0000002400)=[{&(0x7f00000023c0)}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) 11:04:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mprotect(&(0x7f000010d000/0x4000)=nil, 0x4000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x24180) read(r2, &(0x7f0000000200)=""/30, 0xfffffe80) 11:04:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x9, &(0x7f00000000c0)={0x2259, &(0x7f0000000040)}, 0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001840), 0x4) 11:04:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) sendto$inet(r0, &(0x7f0000000980)="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", 0x1000, 0x40800, &(0x7f00000006c0)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r0, 0x1) 11:04:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000005c0)) process_vm_writev(0x0, &(0x7f0000000380), 0x0, &(0x7f0000001900), 0x0, 0x0) time(&(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) fanotify_init(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) timer_delete(0x0) write(r1, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00feb4ec0030492a"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) 11:04:32 executing program 3: r0 = eventfd(0x0) r1 = dup(r0) write$P9_RAUTH(r1, &(0x7f0000000280)={0x14}, 0x7) 11:04:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) mprotect(&(0x7f000010d000/0x4000)=nil, 0x4000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000003640)='/dev/loop#\x00', 0x0, 0x24180) read(r2, &(0x7f0000000200)=""/30, 0xfffffe80) 11:04:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40a85321, &(0x7f000023efa8)) 11:04:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x10000000, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000340)) 11:04:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast2}}) 11:04:32 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, &(0x7f0000000040)) 11:04:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000380)="6b657972696e676c6f00f9e33210d477f0fbca82bfc24b1c95aa5076be6e8bd7af0c6eddf0182722feff2b9a00cef0fb6984e56060deb090815d9ef9fbc9febcd2657d98065f630f14bce0d32e2c81a5bf34f60344d5d17455fd1b7f26602b74c3463c13bfbdc263e8e6c0e4fdb0b353d96e05f4afdaa5e9a2311e0b0437b3d7794fd33ecc811f6db806da54ef2b3ac66cdb41bdb6422d389ef53b016cb127cbae7c676758e1997524ea6f57fe8e3158a0b89339f54d6d86b3f1d5eb4e932e4a22b6da0d1d3eaff939d9312019fc9882c37b64cc3ff3e001281c7623c89116a7dd8aef6a2110b5c822717d7f9d03016128ea6e95a66f6bb417583bf0dd54d1cd015b30f296d8f6e5ee438b267cf4039a905f6a8309927696e6dcfba61b16107585a2a188ba10ea576bd699bc9078d3edeccfbdbfc55f43dd89399ed35844e77bf95ba79f17bb93bf85e16cf62a13b52c25c252b7e4514f011c9da6b2cb7f1908fe58ce657216b2a5190e0a727099ab0d83ccdddbaa6792f2bebf9a8b716b3dd88d1590c1d4fcc1e818dc823246d6d59e449fcff4970ff888ef63c1277d76c859f6eba08c013d2bba0d79187403bfe45d22a2b8dcb5ff679e748156c57b3265256f7397f6c18c9122db5bdfb67076ee1a04dccfd32699aad47199bde505", 0x0) write(r2, &(0x7f0000000300)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x11, r2, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000007a80)=""/60, 0x3c) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000000)=""/2, &(0x7f0000000100)=0x2) 11:04:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40a85321, &(0x7f000023efa8)) 11:04:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7a, 0x0, [0x40000002, 0xfffffffffffffffd]}) 11:04:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x6, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) 11:04:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fe4)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x781a241f, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 11:04:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x40) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000005c0)) process_vm_writev(0x0, &(0x7f0000000380), 0x0, &(0x7f0000001900), 0x0, 0x0) time(&(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0) fanotify_init(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) timer_delete(0x0) write(r1, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00feb4ec0030492a"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) 11:04:33 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, &(0x7f0000004640)={0x0, 0x989680}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=""/159}, 0x18) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000001600)={'ip_vti0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}) 11:04:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x4401}, {0xffffffffffffffff, 0x4}, {r3, 0x80}, {}, {r0}], 0x5, &(0x7f0000000480)={0x77359400}, &(0x7f0000000640)={0x4}, 0x8) 11:04:33 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) prctl$intptr(0x1d, 0xfffffffffffffce8) prctl$getreaper(0x40400000000001e, &(0x7f0000000080)) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c27d794e003e0f11581010196f66430f2902") 11:04:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 11:04:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:04:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000200)='bond_slave_1\x00'}) 11:04:34 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="240000002a0007011dff0e950101830020200a002a00000006000000ca70787f7bf80080", 0x24}], 0x1}, 0x0) 11:04:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) membarrier(0x0, 0x0) 11:04:34 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) getpid() perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040), 0x8) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:34 executing program 3: 11:04:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x20, 0x20, 0xd05}, 0x20}}, 0x0) [ 339.525916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 11:04:34 executing program 5: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x800800000002, 0x0) recvmsg$kcm(r1, &(0x7f0000002c00)={&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000007c0)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1, &(0x7f0000002c40)=ANY=[]}, 0x0) recvmsg$kcm(r1, &(0x7f0000000780)={&(0x7f00000005c0)=@in6, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000000740)=""/21, 0x15}, 0x0) 11:04:34 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:34 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 11:04:34 executing program 3: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x42) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:34 executing program 4: 11:04:35 executing program 2: 11:04:35 executing program 4: 11:04:35 executing program 5: 11:04:35 executing program 4: 11:04:35 executing program 1: 11:04:35 executing program 2: 11:04:35 executing program 5: 11:04:35 executing program 4: 11:04:36 executing program 0: 11:04:36 executing program 1: 11:04:36 executing program 3: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x42) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:36 executing program 2: 11:04:36 executing program 5: 11:04:36 executing program 4: 11:04:36 executing program 1: 11:04:36 executing program 0: 11:04:36 executing program 2: 11:04:36 executing program 4: 11:04:36 executing program 5: 11:04:36 executing program 0: 11:04:36 executing program 1: 11:04:37 executing program 2: 11:04:37 executing program 3: 11:04:37 executing program 5: 11:04:37 executing program 4: 11:04:37 executing program 0: 11:04:37 executing program 1: 11:04:37 executing program 2: 11:04:37 executing program 0: 11:04:37 executing program 1: 11:04:37 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x10000000000008) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(r0, &(0x7f0000002e00), 0x386, 0x22, 0x0) 11:04:37 executing program 3: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) wait4(0x0, &(0x7f0000000100), 0x80000000, &(0x7f0000000400)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000600)="80", 0x1}], 0x1) 11:04:37 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60093a0600083a00fe800000000000000000978d0c7fe2b2552a070000000000bbff0200000000000000000000000000"], &(0x7f0000000100)) 11:04:37 executing program 2: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680), &(0x7f0000000380)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x0) r2 = dup2(r0, r1) execve(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 11:04:38 executing program 1: 11:04:38 executing program 0: 11:04:38 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:04:38 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/61) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x6, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffea8, &(0x7f0000001bc0)='{}cpuset]keyring:user@vboxnet0vmnet0wlan0$'}, 0x30) getpgid(0x0) 11:04:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 11:04:38 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x0, &(0x7f0000004640)={0x0, 0x989680}) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x5d9d, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket(0x200000000000011, 0x3, 0x1f) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000100)={0x8000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) fgetxattr(r0, &(0x7f00000001c0)=ANY=[], &(0x7f0000000580)=""/151, 0x97) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 343.338956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 11:04:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ff5, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) clone(0x80002102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) connect$inet6(r0, &(0x7f0000000100), 0x1c) write$apparmor_current(r1, &(0x7f0000000140)=@hat={'changehat '}, 0x1d) 11:04:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) getpid() perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x9, 0x8) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:04:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) write(r0, &(0x7f0000000200)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbca17b2c0600000000000000ff1f75642558334444c9fe3d13", 0x42) r1 = syz_open_pts(r0, 0x2) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000280)="19", 0x1}], 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)) 11:04:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0xfee7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x10}}, &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x50, &(0x7f0000000040)}, 0x10) 11:04:39 executing program 5: exit(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={"6c6f3a0500", {0x2, 0x0, @dev}}) 11:04:39 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xa0, 0x4a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:04:39 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r2+30000000}) shutdown(r1, 0x1) 11:04:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) 11:04:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) fsetxattr$security_selinux(r1, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000500)="73797374656d5f753a6f626a6563745f723a64686370635f7661725f72756e5f743a7330000b5ec1bca6b88bcba4bccd9db4066c09322e4827b5a559ddebbde3a5d66cc88fc313563d06c57545103eb4c7691d4084a6b7e419ee8a74e254e389bb244ac6e68cc18b57d4a987b37da4e6c3d595bb5bdea3a7da", 0x79, 0x0) dup3(r2, r1, 0x0) [ 344.652896] input:  as /devices/virtual/input/input7 [ 344.748084] input:  as /devices/virtual/input/input8 11:04:39 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080), &(0x7f0000000180)=0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)=""/254, &(0x7f0000000600)=0xfe) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockname(r0, &(0x7f00000006c0)=@nfc_llcp, &(0x7f0000000640)=0x80) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000340)={'filter\x00'}, &(0x7f0000000280)=0x54) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x376a5224, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in, 0x5}, 0x90) 11:04:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 11:04:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000008c0)={0x0, {0x2, 0x0, @rand_addr}, {}, {0x2, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bridge_slave_1\x00'}) 11:04:40 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x3, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x10}}, &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x20000090, &(0x7f0000000040)}, 0x10) 11:04:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000001031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 11:04:40 executing program 5: 11:04:40 executing program 1: 11:04:41 executing program 0: 11:04:41 executing program 1: 11:04:41 executing program 5: 11:04:41 executing program 3: 11:04:41 executing program 4: 11:04:42 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080), &(0x7f0000000180)=0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)=""/254, &(0x7f0000000600)=0xfe) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockname(r0, &(0x7f00000006c0)=@nfc_llcp, &(0x7f0000000640)=0x80) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000340)={'filter\x00'}, &(0x7f0000000280)=0x54) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x376a5224, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in, 0x5}, 0x90) 11:04:42 executing program 5: 11:04:42 executing program 0: 11:04:42 executing program 1: 11:04:42 executing program 3: 11:04:42 executing program 4: 11:04:42 executing program 0: 11:04:42 executing program 5: 11:04:42 executing program 4: 11:04:42 executing program 3: 11:04:42 executing program 1: 11:04:43 executing program 5: 11:04:43 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080), &(0x7f0000000180)=0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)=""/254, &(0x7f0000000600)=0xfe) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockname(r0, &(0x7f00000006c0)=@nfc_llcp, &(0x7f0000000640)=0x80) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000340)={'filter\x00'}, &(0x7f0000000280)=0x54) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x376a5224, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in, 0x5}, 0x90) 11:04:43 executing program 0: 11:04:43 executing program 1: 11:04:43 executing program 3: 11:04:43 executing program 4: 11:04:43 executing program 5: 11:04:43 executing program 3: 11:04:43 executing program 5: 11:04:44 executing program 1: ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './bus', [{0x20, './cgroup.cpu\x00'}, {0x20, "0e21626465762625"}, {0x20, ',em0'}, {}], 0xa, "6a5be0d903672c32a8c886e12583d154d5a860a4360e74128fdddfb8fd399f4ddc9ef0d6325fd6bdad0a5efe66ccbc4f34438bd6c9060555f47d215e712628a7e3e92174c1f18d54e5b9fdcfba0084887194a90b57a51e5871f21acac09fb981d5dd389a3807b1694199a756fc5de5062078fdd6e5a45223387f722a3a6f337ba168482d45cce40b8ffddc112ee3ecb0cf52c1f3"}, 0xba) 11:04:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="6c6f67696e7569640039dad3c444de4a35f0fd223db6aa1e2fdd63c9f35f389e4669e0af6522c225bbb645ae9e0f46c87cd44db4919c1a34ab1d00bb4157f79b23912e9b96566ebf23618dfdd331fcacfeccdb938974f48d420c49e5b37f94bdb651b9c102659034f4192f") write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) 11:04:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000180001000000000000000000090000000c000300000000000000000010000600010000000100000000000000"], 0x1}}, 0x0) 11:04:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) accept4(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000000)=0x80, 0x800) 11:04:45 executing program 2: r0 = socket(0xa, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0}) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x1013e, &(0x7f0000001540)={r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioprio_set$pid(0x1, r2, 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 11:04:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:45 executing program 5 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x721}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492935, 0x0) 11:04:45 executing program 1 (fault-call:2 fault-nth:0): preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x91) 11:04:45 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0f"]}) 11:04:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xb21}]}, 0x3c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") [ 350.208287] FAULT_INJECTION: forcing a failure. [ 350.208287] name failslab, interval 1, probability 0, space 0, times 1 [ 350.219933] CPU: 1 PID: 9387 Comm: syz-executor0 Not tainted 4.19.0+ #80 [ 350.226846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.236268] Call Trace: [ 350.238893] ================================================================== [ 350.246281] BUG: KMSAN: uninit-value in get_stack_info+0x720/0x9d0 [ 350.252706] CPU: 1 PID: 9387 Comm: syz-executor0 Not tainted 4.19.0+ #80 [ 350.259557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.268923] Call Trace: [ 350.271540] dump_stack+0x419/0x480 [ 350.275187] ? get_stack_info+0x720/0x9d0 [ 350.279373] kmsan_report+0x19f/0x300 [ 350.283201] __msan_warning+0x76/0xd0 [ 350.287026] get_stack_info+0x720/0x9d0 [ 350.291037] __unwind_start+0x7d/0xe0 [ 350.294857] show_trace_log_lvl+0x20e/0x11e0 [ 350.299305] show_stack+0x12e/0x170 [ 350.302963] dump_stack+0x32d/0x480 [ 350.306624] should_fail+0x11e5/0x13c0 [ 350.310543] __should_failslab+0x278/0x2a0 [ 350.314811] should_failslab+0x29/0x70 [ 350.318720] kmem_cache_alloc_node+0x164/0xec0 [ 350.323356] ? __alloc_skb+0x32e/0xeb0 [ 350.327270] ? __msan_poison_alloca+0x1e0/0x2b0 [ 350.331971] __alloc_skb+0x32e/0xeb0 [ 350.335727] rtmsg_ifinfo_build_skb+0x150/0x410 [ 350.340434] rtmsg_ifinfo+0x112/0x260 [ 350.344266] netdev_state_change+0x1ea/0x2f0 [ 350.348704] br_dev_ioctl+0x2552/0x2ce0 [ 350.352708] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 350.358088] ? strncmp+0xc4/0x200 [ 350.361577] dev_ifsioc+0x8b3/0xf60 [ 350.365224] ? br_ioctl_deviceless_stub+0xcb0/0xcb0 [ 350.370357] dev_ioctl+0x1096/0x1f50 [ 350.374113] sock_ioctl+0x86d/0xe00 [ 350.377766] ? sock_poll+0x4c0/0x4c0 [ 350.381498] do_vfs_ioctl+0xf77/0x2d30 [ 350.385416] ? security_file_ioctl+0x92/0x200 [ 350.389942] __se_sys_ioctl+0x1da/0x270 [ 350.393945] __x64_sys_ioctl+0x4a/0x70 [ 350.397860] do_syscall_64+0xcf/0x110 [ 350.401773] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 350.406980] RIP: 0033:0x457569 [ 350.410196] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.429375] RSP: 002b:00007f021b005c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.437123] RAX: ffffffffffffffda RBX: 00007f021b005c90 RCX: 0000000000457569 [ 350.444405] RDX: 0000000020000140 RSI: 00000000000089f0 RDI: 0000000000000003 [ 350.451702] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.458989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f021b0066d4 [ 350.466283] R13: 00000000004c21b1 R14: 00000000004d3250 R15: 0000000000000004 [ 350.473575] [ 350.475212] Local variable description: ----state@show_trace_log_lvl [ 350.481706] Variable was created at: [ 350.485451] show_trace_log_lvl+0xb3/0x11e0 [ 350.489795] show_stack+0x12e/0x170 [ 350.493438] ================================================================== [ 350.500805] Disabling lock debugging due to kernel taint [ 350.506269] Kernel panic - not syncing: panic_on_warn set ... [ 350.506269] [ 350.513778] CPU: 1 PID: 9387 Comm: syz-executor0 Tainted: G B 4.19.0+ #80 [ 350.522101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.531557] Call Trace: [ 350.534167] dump_stack+0x419/0x480 [ 350.537819] panic+0x57e/0xb28 [ 350.541067] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 350.546550] kmsan_report+0x300/0x300 [ 350.550430] __msan_warning+0x76/0xd0 [ 350.554271] get_stack_info+0x720/0x9d0 [ 350.558273] __unwind_start+0x7d/0xe0 [ 350.562117] show_trace_log_lvl+0x20e/0x11e0 [ 350.566600] show_stack+0x12e/0x170 [ 350.570252] dump_stack+0x32d/0x480 [ 350.573903] should_fail+0x11e5/0x13c0 [ 350.577824] __should_failslab+0x278/0x2a0 [ 350.582087] should_failslab+0x29/0x70 [ 350.585989] kmem_cache_alloc_node+0x164/0xec0 [ 350.590598] ? __alloc_skb+0x32e/0xeb0 [ 350.594506] ? __msan_poison_alloca+0x1e0/0x2b0 [ 350.599206] __alloc_skb+0x32e/0xeb0 [ 350.602949] rtmsg_ifinfo_build_skb+0x150/0x410 [ 350.607748] rtmsg_ifinfo+0x112/0x260 [ 350.611573] netdev_state_change+0x1ea/0x2f0 [ 350.616013] br_dev_ioctl+0x2552/0x2ce0 [ 350.620015] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 350.625393] ? strncmp+0xc4/0x200 [ 350.628888] dev_ifsioc+0x8b3/0xf60 [ 350.632554] ? br_ioctl_deviceless_stub+0xcb0/0xcb0 [ 350.637615] dev_ioctl+0x1096/0x1f50 [ 350.641359] sock_ioctl+0x86d/0xe00 [ 350.645017] ? sock_poll+0x4c0/0x4c0 [ 350.648750] do_vfs_ioctl+0xf77/0x2d30 [ 350.652673] ? security_file_ioctl+0x92/0x200 [ 350.657194] __se_sys_ioctl+0x1da/0x270 [ 350.661190] __x64_sys_ioctl+0x4a/0x70 [ 350.665099] do_syscall_64+0xcf/0x110 [ 350.668917] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 350.674120] RIP: 0033:0x457569 [ 350.677334] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.696251] RSP: 002b:00007f021b005c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:04:45 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x3fffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0xfbb8, 0x7fff, 0x1, 0x1000, 0x7f}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x61, &(0x7f0000000000), &(0x7f0000000080)=0x28) r2 = getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r1, r1, 0x6}) [ 350.703977] RAX: ffffffffffffffda RBX: 00007f021b005c90 RCX: 0000000000457569 [ 350.711267] RDX: 0000000020000140 RSI: 00000000000089f0 RDI: 0000000000000003 [ 350.718551] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.726012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f021b0066d4 [ 350.733299] R13: 00000000004c21b1 R14: 00000000004d3250 R15: 0000000000000004 [ 350.741890] Kernel Offset: disabled [ 350.745526] Rebooting in 86400 seconds..