[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.312753] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.952834] random: sshd: uninitialized urandom read (32 bytes read) [ 42.416859] random: sshd: uninitialized urandom read (32 bytes read) [ 43.587644] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. [ 49.263808] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/06 10:06:57 fuzzer started [ 50.651308] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/06 10:07:00 dialing manager at 10.128.0.26:38893 2018/09/06 10:07:00 syscalls: 1 2018/09/06 10:07:00 code coverage: enabled 2018/09/06 10:07:00 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/09/06 10:07:00 setuid sandbox: enabled 2018/09/06 10:07:00 namespace sandbox: enabled 2018/09/06 10:07:00 fault injection: enabled 2018/09/06 10:07:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/09/06 10:07:00 net packed injection: enabled 2018/09/06 10:07:00 net device setup: enabled 10:07:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:02 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:02 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:02 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:02 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:02 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 10:07:02 executing program 3: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:02 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) [ 55.198463] IPVS: ftp: loaded support on port[0] = 21 [ 55.201546] IPVS: ftp: loaded support on port[0] = 21 [ 55.212020] IPVS: ftp: loaded support on port[0] = 21 [ 55.223689] IPVS: ftp: loaded support on port[0] = 21 [ 55.248144] IPVS: ftp: loaded support on port[0] = 21 [ 55.264861] IPVS: ftp: loaded support on port[0] = 21 [ 55.288116] IPVS: ftp: loaded support on port[0] = 21 [ 55.320261] IPVS: ftp: loaded support on port[0] = 21 [ 57.700211] ip (4919) used greatest stack depth: 53528 bytes left [ 59.418992] ip (5017) used greatest stack depth: 53496 bytes left [ 59.751758] ip (5035) used greatest stack depth: 53384 bytes left [ 60.315836] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.322350] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.383603] device bridge_slave_0 entered promiscuous mode [ 60.408125] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.414659] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.447491] device bridge_slave_0 entered promiscuous mode [ 60.476922] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.483453] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.500601] device bridge_slave_0 entered promiscuous mode [ 60.522573] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.529050] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.565799] device bridge_slave_0 entered promiscuous mode [ 60.587091] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.593621] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.616847] device bridge_slave_0 entered promiscuous mode [ 60.632075] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.638585] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.674262] device bridge_slave_0 entered promiscuous mode [ 60.687808] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.694315] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.723587] device bridge_slave_0 entered promiscuous mode [ 60.757470] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.764095] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.785671] device bridge_slave_1 entered promiscuous mode [ 60.805810] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.812344] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.823839] device bridge_slave_0 entered promiscuous mode [ 60.833567] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.840026] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.852736] device bridge_slave_1 entered promiscuous mode [ 60.865004] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.871458] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.896097] device bridge_slave_1 entered promiscuous mode [ 60.919620] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.926078] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.955824] device bridge_slave_1 entered promiscuous mode [ 61.007643] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.014190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.041770] device bridge_slave_1 entered promiscuous mode [ 61.058836] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.065291] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.089219] device bridge_slave_1 entered promiscuous mode [ 61.100628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.108814] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.115265] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.142447] device bridge_slave_1 entered promiscuous mode [ 61.160266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.173166] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.179662] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.220800] device bridge_slave_1 entered promiscuous mode [ 61.235294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.249274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.301365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.318322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.399084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.434126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.466166] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.546415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.554443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.602155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.618412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.638151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.700222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.872670] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 62.363436] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.546780] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.558948] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.591072] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.602049] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.616261] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.647257] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.754658] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.857808] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.873097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.918679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.934074] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.966615] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.981314] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.992209] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.055587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.075496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.182168] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.191101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.217689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 63.234840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.241841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.264731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.271791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.330011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.337770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.369133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.376140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.399246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.406271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.437107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.444204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.526547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.533670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.549926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 63.559580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.570808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.605573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.649413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.664259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.702543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.709580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.738126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.750373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.776485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.803257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.915106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.922086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.399830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.437297] team0: Port device team_slave_0 added [ 64.520370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.548720] team0: Port device team_slave_0 added [ 64.569728] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.587302] team0: Port device team_slave_0 added [ 64.655415] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.674292] team0: Port device team_slave_0 added [ 64.699135] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.717368] team0: Port device team_slave_0 added [ 64.747857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.779407] team0: Port device team_slave_0 added [ 64.808268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 64.827731] team0: Port device team_slave_0 added [ 64.845145] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.865234] team0: Port device team_slave_1 added [ 64.874855] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.906360] team0: Port device team_slave_1 added [ 64.951160] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.976233] team0: Port device team_slave_1 added [ 64.999836] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.011086] team0: Port device team_slave_1 added [ 65.029494] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.044840] team0: Port device team_slave_1 added [ 65.062331] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 65.089033] team0: Port device team_slave_0 added [ 65.133416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.147246] team0: Port device team_slave_1 added [ 65.161896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.171531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.197344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.230981] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.245129] team0: Port device team_slave_1 added [ 65.260584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.270814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.284173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.324231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.337387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.358302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.382406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.393613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.412342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.444402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.459338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 65.468734] team0: Port device team_slave_1 added [ 65.482440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.508738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.534662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.542467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.554415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.582445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.615188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.646382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.687452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.712393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.727439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.757374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 65.766048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.774033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.787847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.795288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 65.813166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.836814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.869284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.902677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.927143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.957321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.979248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.003293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.011444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.019886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.033214] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.043461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.069184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.082017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.100701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.109895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.119811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 66.127172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.139124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.177175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.186525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.196540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.218364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.226695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.241450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.251558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.276796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.303421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.323467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.331089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.351275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.380381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.389137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.406171] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.421404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.434772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.462301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.499435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.526380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.550231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.580353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.606916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.619816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.633381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 66.659107] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.669797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.686033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.708865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.726014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.744899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.765781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.790237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.807161] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 66.820348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.835230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.870376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.898238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.918995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.976256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 66.984841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.012330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.111257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.118764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.131886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.198147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 67.205657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.222319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.948502] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.955035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.961996] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.968453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.050860] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.063633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.107702] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.114195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.121108] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.127573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.211555] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.247482] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.254018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.260904] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.267421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.312061] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.359783] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.366684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.373539] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.380019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.402547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.410012] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.416483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.423389] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.429848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.483703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.515236] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.521707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.528576] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.535022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.576775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.717189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.723702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.730582] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.737028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.820844] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 70.863483] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.870016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.876892] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.883358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.940606] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 71.123455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.143415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.170478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.183579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.192196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.201569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.210712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.003641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.078130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.172139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.248983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.330913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.770696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.816044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.927520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.266046] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.294187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.419791] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.430073] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.459891] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 84.933399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.072514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.093482] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 85.436285] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.442697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.456313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.510364] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.516714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.529234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.607628] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.614144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.628712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.705544] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.712143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.734132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.772416] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 85.784792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.834121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.212688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.219249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.234826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.294860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.301194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.311642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.427549] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 86.434037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.449329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.674326] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.785155] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.812232] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.949066] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.053012] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.494999] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.525037] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.649874] 8021q: adding VLAN 0 to HW filter on device team0 10:07:42 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:42 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) 10:07:42 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:42 executing program 3: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:43 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) 10:07:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 10:07:43 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:43 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:43 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 10:07:43 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) 10:07:43 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:43 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:43 executing program 3: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 10:07:43 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:43 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:43 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:43 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:43 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:43 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:44 executing program 3: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:44 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:44 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:44 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:44 executing program 4: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:44 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:44 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 10:07:44 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) 10:07:44 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000000c0085, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080)="83ca04cfdcfd9037b2d169c06315dba894000bfff3000062", 0x18, 0x0) 10:07:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:44 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:44 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:44 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:44 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:44 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) 10:07:45 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:45 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2000ff, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x400000000002, 0x0, 0x0, 0x0, 0x8}, 0x20) 10:07:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:45 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:45 executing program 6: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) move_pages(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0) 10:07:45 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) unshare(0x20400) ioctl$BLKFLSBUF(r0, 0x40480923, &(0x7f0000000140)) 10:07:45 executing program 1: r0 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r0, 0x100000114, 0x1d, &(0x7f0000c63ffc)="66014ebe", 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00003e9ffc), &(0x7f0000727ffc)=0x4) 10:07:45 executing program 6: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) move_pages(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0) 10:07:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x404c534a, &(0x7f0000dc5f98)) 10:07:45 executing program 6: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) move_pages(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0) 10:07:45 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22082) close(r0) 10:07:45 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:45 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:45 executing program 6: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) move_pages(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0) 10:07:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1'}, 0x4) 10:07:46 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:47 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:47 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0xf, 0x6}]]}}}]}, 0x38}}, 0x0) 10:07:47 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 10:07:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 10:07:47 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[]}], 0x1, 0x0) unshare(0x20400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000000c0)) 10:07:47 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") [ 99.361655] netlink: 'syz-executor5': attribute type 15 has an invalid length. [ 99.391887] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.413302] autofs4:pid:7160:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(791543808.1701603686), cmd(0x0000937e) [ 99.427259] autofs4:pid:7160:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 10:07:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:47 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x90) 10:07:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6001, 0xffffffffffffffff) 10:07:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0xf, 0x6}]]}}}]}, 0x38}}, 0x0) 10:07:47 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 10:07:47 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 10:07:47 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[]}], 0x1, 0x0) unshare(0x20400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000000c0)) 10:07:47 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x90) [ 99.922338] netlink: 'syz-executor5': attribute type 15 has an invalid length. 10:07:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6001, 0xffffffffffffffff) 10:07:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) [ 100.080628] autofs4:pid:7201:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(791543808.1701603686), cmd(0x0000937e) [ 100.094624] autofs4:pid:7201:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 10:07:48 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 10:07:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0xf, 0x6}]]}}}]}, 0x38}}, 0x0) 10:07:48 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 10:07:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:48 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x90) 10:07:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6001, 0xffffffffffffffff) [ 100.353660] netlink: 'syz-executor5': attribute type 15 has an invalid length. 10:07:48 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 10:07:48 executing program 7: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000fb8], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=ANY=[]}, 0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") 10:07:48 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[]}], 0x1, 0x0) unshare(0x20400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000000c0)) 10:07:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0xf, 0x6}]]}}}]}, 0x38}}, 0x0) 10:07:48 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x90) 10:07:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6001, 0xffffffffffffffff) 10:07:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 10:07:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) [ 100.801050] autofs4:pid:7243:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(791543808.1701603686), cmd(0x0000937e) [ 100.815051] autofs4:pid:7243:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 100.826349] netlink: 'syz-executor5': attribute type 15 has an invalid length. 10:07:48 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000800)=ANY=[]}], 0x1, 0x0) unshare(0x20400) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000000c0)) 10:07:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) [ 101.326459] autofs4:pid:7270:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(791543808.1701603686), cmd(0x0000937e) [ 101.340465] autofs4:pid:7270:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) 10:07:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xffffffff00000000]}, 0x10) shutdown(r0, 0x1) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f) 10:07:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:49 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) [ 102.670069] ================================================================== [ 102.677516] BUG: KMSAN: uninit-value in __kmalloc_node_track_caller+0x667/0x1160 [ 102.685085] CPU: 0 PID: 7331 Comm: syz-executor4 Not tainted 4.19.0-rc1+ #41 [ 102.692284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.701657] Call Trace: [ 102.704273] dump_stack+0x14b/0x190 [ 102.707938] kmsan_report+0x183/0x2b0 [ 102.711778] __msan_warning+0x70/0xc0 [ 102.715629] __kmalloc_node_track_caller+0x667/0x1160 [ 102.720861] ? sk_stream_alloc_skb+0x172/0xc90 [ 102.725489] ? sk_stream_alloc_skb+0x172/0xc90 [ 102.730101] __alloc_skb+0x2f5/0x9e0 [ 102.733839] ? sk_stream_alloc_skb+0x172/0xc90 [ 102.738468] sk_stream_alloc_skb+0x172/0xc90 [ 102.742925] tcp_fragment+0x43b/0x1f20 [ 102.746855] ? sched_clock_cpu+0x7a/0x9b0 [ 102.751052] tcp_write_xmit+0x2eb8/0xa5a0 [ 102.755370] __tcp_push_pending_frames+0x124/0x400 [ 102.760355] tcp_data_snd_check+0x180/0xe40 [ 102.764731] ? __kfree_skb+0x236/0x280 [ 102.768674] tcp_rcv_established+0x1e44/0x2860 [ 102.773309] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 102.778724] tcp_v4_do_rcv+0x689/0xd50 [ 102.782661] ? inet_sk_rx_dst_set+0x290/0x290 [ 102.787189] __release_sock+0x2ae/0x660 [ 102.791213] __sk_flush_backlog+0x52/0x70 [ 102.795397] tcp_sendmsg_locked+0xf98/0x68f0 [ 102.799910] tcp_sendmsg+0xb2/0x100 [ 102.803578] ? tcp_sendmsg_locked+0x68f0/0x68f0 [ 102.808289] inet_sendmsg+0x49a/0x740 [ 102.812122] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 102.817530] ? inet_getname+0x490/0x490 [ 102.821529] __sys_sendto+0x868/0xa30 [ 102.825366] ? prepare_exit_to_usermode+0x46/0x410 [ 102.830438] ? syscall_return_slowpath+0xdb/0x700 [ 102.835339] __se_sys_sendto+0x107/0x130 [ 102.839457] __x64_sys_sendto+0x6e/0x90 [ 102.843463] do_syscall_64+0xb8/0x100 [ 102.847292] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 102.852498] RIP: 0033:0x457099 [ 102.855716] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 102.874663] RSP: 002b:00007fd8924e3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.882415] RAX: ffffffffffffffda RBX: 00007fd8924e46d4 RCX: 0000000000457099 [ 102.889709] RDX: fffffffffffffe6e RSI: 0000000020a88f88 RDI: 0000000000000003 [ 102.896992] RBP: 00000000009300a0 R08: 0000000020e68000 R09: 0000000000000010 [ 102.904291] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 102.911579] R13: 00000000004d4cb0 R14: 00000000004c91a3 R15: 0000000000000000 [ 102.918890] 10:07:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) 10:07:50 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x585, 0x29, 0x7, 0xfa3}, 0x8) io_setup(0x20, &(0x7f0000000280)=0x0) io_destroy(r1) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r0, 0x1) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) [ 102.920521] Uninit was created at: [ 102.924109] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 102.929240] kmsan_kmalloc+0x98/0x100 [ 102.933060] kmsan_slab_alloc+0x10/0x20 [ 102.937058] __kmalloc_node_track_caller+0x9e7/0x1160 [ 102.942272] __alloc_skb+0x2f5/0x9e0 [ 102.946014] __tcp_send_ack+0x10d/0x880 [ 102.950017] tcp_send_ack+0x68/0x90 [ 102.953678] tcp_compressed_ack_kick+0x15a/0x2e0 [ 102.958477] __hrtimer_run_queues+0xbfc/0x15b0 [ 102.963110] hrtimer_run_softirq+0x1b3/0x2b0 [ 102.967531] __do_softirq+0x562/0x948 [ 102.971377] ================================================================== [ 102.978750] Disabling lock debugging due to kernel taint [ 102.984200] Kernel panic - not syncing: panic_on_warn set ... [ 102.984200] [ 102.991581] CPU: 0 PID: 7331 Comm: syz-executor4 Tainted: G B 4.19.0-rc1+ #41 [ 103.000182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.009537] Call Trace: [ 103.012142] dump_stack+0x14b/0x190 [ 103.015797] panic+0x35d/0x8cb [ 103.019044] kmsan_report+0x2a8/0x2b0 [ 103.022865] __msan_warning+0x70/0xc0 [ 103.026692] __kmalloc_node_track_caller+0x667/0x1160 [ 103.031897] ? sk_stream_alloc_skb+0x172/0xc90 [ 103.036525] ? sk_stream_alloc_skb+0x172/0xc90 [ 103.041121] __alloc_skb+0x2f5/0x9e0 [ 103.044851] ? sk_stream_alloc_skb+0x172/0xc90 [ 103.049463] sk_stream_alloc_skb+0x172/0xc90 [ 103.053898] tcp_fragment+0x43b/0x1f20 [ 103.057810] ? sched_clock_cpu+0x7a/0x9b0 [ 103.061989] tcp_write_xmit+0x2eb8/0xa5a0 [ 103.066245] __tcp_push_pending_frames+0x124/0x400 [ 103.071199] tcp_data_snd_check+0x180/0xe40 [ 103.075544] ? __kfree_skb+0x236/0x280 [ 103.079452] tcp_rcv_established+0x1e44/0x2860 [ 103.084094] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 103.089478] tcp_v4_do_rcv+0x689/0xd50 [ 103.093390] ? inet_sk_rx_dst_set+0x290/0x290 [ 103.097900] __release_sock+0x2ae/0x660 [ 103.101907] __sk_flush_backlog+0x52/0x70 [ 103.106095] tcp_sendmsg_locked+0xf98/0x68f0 [ 103.110596] tcp_sendmsg+0xb2/0x100 [ 103.114263] ? tcp_sendmsg_locked+0x68f0/0x68f0 [ 103.118946] inet_sendmsg+0x49a/0x740 [ 103.122770] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 103.128155] ? inet_getname+0x490/0x490 [ 103.132147] __sys_sendto+0x868/0xa30 [ 103.135970] ? prepare_exit_to_usermode+0x46/0x410 [ 103.140915] ? syscall_return_slowpath+0xdb/0x700 [ 103.145806] __se_sys_sendto+0x107/0x130 [ 103.149897] __x64_sys_sendto+0x6e/0x90 [ 103.153885] do_syscall_64+0xb8/0x100 [ 103.157708] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 103.162908] RIP: 0033:0x457099 [ 103.166118] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 103.185026] RSP: 002b:00007fd8924e3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 103.192753] RAX: ffffffffffffffda RBX: 00007fd8924e46d4 RCX: 0000000000457099 [ 103.200031] RDX: fffffffffffffe6e RSI: 0000000020a88f88 RDI: 0000000000000003 [ 103.207314] RBP: 00000000009300a0 R08: 0000000020e68000 R09: 0000000000000010 [ 103.214676] R10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff [ 103.221955] R13: 00000000004d4cb0 R14: 00000000004c91a3 R15: 0000000000000000 [ 103.229554] Dumping ftrace buffer: [ 103.233084] (ftrace buffer empty) [ 103.236779] Kernel Offset: disabled [ 103.240397] Rebooting in 86400 seconds..