[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.445426] audit: type=1800 audit(1541758003.495:25): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.464590] audit: type=1800 audit(1541758003.495:26): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.484078] audit: type=1800 audit(1541758003.515:27): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts. 2018/11/09 10:06:56 fuzzer started 2018/11/09 10:07:01 dialing manager at 10.128.0.26:38493 2018/11/09 10:07:02 syscalls: 1 2018/11/09 10:07:02 code coverage: enabled 2018/11/09 10:07:02 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/09 10:07:02 setuid sandbox: enabled 2018/11/09 10:07:02 namespace sandbox: enabled 2018/11/09 10:07:02 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/09 10:07:02 fault injection: enabled 2018/11/09 10:07:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/09 10:07:02 net packed injection: enabled 2018/11/09 10:07:02 net device setup: enabled 10:09:25 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800}, 0x20) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = gettid() readahead(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000280)) tkill(r0, 0x15) clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000340)="afd2bfcd2fdfd68b60e7e6cf6ae07dd058c3273308590092138d59bc3cd0aef36653cdfb05be0a91d34299bfa1ca4a54d96a797138e26900000000d87461ed7322901f70deac636f2d31c381a2a15dc5cf87c10ff7e4b6bcedd3fd9bc02ccd6eb4d3d54877c30d42ec4512742724aa25b19208eb50e668ed04bf115d05cfada308cfc1aacdda4f7ad307d4e0bc4a1b405aaea46f992ca000fae80dd46d6d64e54c4585987d9b48f0dec121c8d8f6b9201a250675") tkill(r0, 0x1000000000016) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100)='wlan0\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000002c0)="bf78cea0312ebb4045c317a2199db4c1d022d01cc64a42de7d253e492cc0b9a615b705eaef58693526ed1ecf37f2dc0e73f6bc115a48ec4dc31a1f1058048088e120c18b941e1bd4cc9338bb22deebb8a82f9a7734827ac1667442f6903e8545da342c3aeb1cba938aaefc2089a5") syzkaller login: [ 216.990642] IPVS: ftp: loaded support on port[0] = 21 [ 219.135653] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.142248] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.150608] device bridge_slave_0 entered promiscuous mode [ 219.276923] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.283521] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.292001] device bridge_slave_1 entered promiscuous mode [ 219.416741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.541170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.929718] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.059590] bond0: Enslaving bond_slave_1 as an active interface with an up link 10:09:29 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) [ 220.815902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.823998] team0: Port device team_slave_0 added [ 221.067187] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.075346] team0: Port device team_slave_1 added [ 221.076999] IPVS: ftp: loaded support on port[0] = 21 [ 221.200982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.210131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.219126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.455138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.629548] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.637360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.646494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.840932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.848652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.857715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.306145] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.312736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.319706] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.326326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.334848] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.459202] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.465764] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.474244] device bridge_slave_0 entered promiscuous mode [ 224.502023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.704230] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.710729] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.719291] device bridge_slave_1 entered promiscuous mode [ 224.983731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 225.227059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 10:09:34 executing program 2: io_setup(0x20000000002, &(0x7f00000002c0)=0x0) r1 = socket(0x2, 0x803, 0xff) io_submit(r0, 0x1, &(0x7f0000001640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000300)="2e1107beee9333ae838abd17325ae56064a20f516d855fbe25b70187003fd2e7b0df634ac57732447f3edd2230e9b2d19a9b840d4430d523cb98e903756d30213676533ef0d74ea50eee654526393f36680cc0be5d65c53663132986b0616b281e433a02f32817bc4ddd72b5d880d1045fa52053ee05ffc5674a01954f8745a8c14d3a12d8d55c4c5f8a3915182dccf908ab543fc8cf0a2ef1ba1812373674305e4d4160aa69f0bd7a6075e1b56bac866bc86ebdf13548354a36dd197fcf710d11932c5239f9c44138133435140d4c78dc86ee4f7dd3b08606b41836da0e7b5fab95c5469e9dee9fdfffd45e3045fa3ff5b1347b9aab3daac4208c7d33fba27b6276d7421ed1f5000101b89e6341b45ae2213940fb475a8de826d2684b1142c980508bb6717a37826b601e42982e6c673f8afbe3dc239bbec248283eafba7fe7340b6740cef6a41de286581500394825e737b07754b00b289780ede0ec22d2523777523bcfd1f83729787d67cb7f0bcbe5a20f34985449b6b5251fd8547e82ea0e9cf07a8033e05495b15f07f9f163770bc3b1450bd8dd474a4f9991c5b025c754abc4e93dcce6c1fc4e542e355a096dbed6df7abd9434b6eb53d3ba54d790ddb946be1a7ebfb18b66ea2d5b4c0ede60fd90a4b161ccae91be4bd70360936a5791fc33ef4d6ac7efba58451c73146ff917addc6cfc7c7a7f211d572a787eee05912378b75fde039fe00ea9e36367103bc7a39f137f6af6684b7f3d14630a5c121fa924998d486f0cd7e0c7db894b7b3c74c788fecf2346e65dec1469ee8a47835144337d76de8b3e783b4333f5b285da788abf492d359bab257ede4ed5bd4d7637eff59f0b875f8fb254981f3bd18237f547c9c0c12e8f1dee2b007da79d67bbaa48edd5accb99c8f4924750c206501d8592a935ab5557abec7eb5d47429139aee5e02a11d5a7eec36b094bfca04e68ed31569214e030249d526d4058fa18327b0f9d9d2a3d55082935e08ab3a26dcf082d999ac207d8518d5677f7de292b69fae38a37d86be180d1bf861f0312d8c7202e63cfcbe5899b8a9d36b7d52e744cd46590d87d5ed39f5e096ff0c96240459cdffe169eca7144ed6be2828b3d57422cff4f6d90d44ab2f7c80b45221af8339990ef9a16c3ece75c1f017a2ea05ab26d13a0e269bbdc326e6324b45aee9c93c3585bfce28b388505e05b9762f982de8504fccde1b23359dacde1d42908a183098702ff0e7661548b685bde4317e9b038880fd3a3af8b1fa7e0c6d98ab1305a746a62bcaf947895b111cd1f70b41ee8429edd2782b507239324593b60ebd4efad19fd657522983156d239080e29d571e06255139f3473a2cc1528d9f859a6c68cac02e7126ec8b06a7b3365d2abd11eb8c73541ae000d21aca346f796f4609c263607daf566406635cb58926a057f4e11e", 0x401}]) [ 225.772271] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.104824] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.387119] IPVS: ftp: loaded support on port[0] = 21 [ 226.405292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 226.414020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.585104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 226.592411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.423644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.431566] team0: Port device team_slave_0 added [ 227.621259] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.629479] team0: Port device team_slave_1 added [ 227.909705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 227.917230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.926054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.149238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.156503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.165429] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.369049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.376976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.386161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.664121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 228.671881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.680704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.753006] ip (6500) used greatest stack depth: 53088 bytes left [ 230.618934] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.625647] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.634264] device bridge_slave_0 entered promiscuous mode [ 230.787819] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.794485] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.802980] device bridge_slave_1 entered promiscuous mode [ 230.973948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.292116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.866830] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.873436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.880377] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.886990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.895626] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.005730] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.279319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.641868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.732926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 232.740058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.528799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.536979] team0: Port device team_slave_0 added [ 233.782879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.790784] team0: Port device team_slave_1 added [ 234.005811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.013135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.022265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:09:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340)={0x0, 0x2710}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) [ 234.328353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.335632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.344778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.679516] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.687357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.696323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.040864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.048596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.057498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.152358] IPVS: ftp: loaded support on port[0] = 21 [ 235.469658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.559517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.801779] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.808448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.816615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.815399] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.821946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.828843] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.835428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.843957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.080799] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.862850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.358531] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.365205] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.373690] device bridge_slave_0 entered promiscuous mode [ 240.706421] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.713134] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.721494] device bridge_slave_1 entered promiscuous mode [ 241.063747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.277949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.327072] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.647283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.005588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.013668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.375294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.382519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.358716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.368714] team0: Port device team_slave_0 added [ 244.564107] 8021q: adding VLAN 0 to HW filter on device bond0 10:09:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000000)={0x5}, 0x8, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x200) write(r2, &(0x7f0000c34fff), 0xffffff0b) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000200)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0xec0e}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) [ 244.656255] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.664376] team0: Port device team_slave_1 added [ 245.060104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 245.068442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.077538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.395024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 245.402438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.411061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.786101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.793950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.803165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.900030] IPVS: ftp: loaded support on port[0] = 21 [ 246.010772] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.256488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 246.264238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.273272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.515663] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.522206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.530015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:09:56 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x100000118) sched_setattr(0x0, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xfdff}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x15, 0x0, 0x0, "1e653d284a8d334b2c646b2c907859f2"}, 0x15, 0x0) [ 248.975865] 8021q: adding VLAN 0 to HW filter on device team0 10:09:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffd, 0x8203) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000300)={{0x5, 0x2, 0x3}, 'syz0\x00', 0x4c}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000140)=""/50) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5010181a}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000cdf1", @ANYRES16=r2, @ANYBLOB="060228bd7000fcdbdf25110000002800010014000300ac14141200000000000000000000000008000b0073697000080001000a0000000800050005000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040014}, 0x4004884) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r3 = semget(0x3, 0x3, 0x482) semctl$SEM_STAT(r3, 0x5, 0x12, &(0x7f0000000280)=""/128) syz_execute_func(&(0x7f0000000100)="3666440f9bf56664400f9f324170c3c3e2c997ec5842c401fbf071433e0f1158101019c4029dbb580004cd04cd0f2902") 10:09:58 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000340)="58e724ab397582f3f89c3bcf53eaeb965e530d09af353864aabd0c6453e4c6329313b65568311d589fd5ce6a0274db79cf553ceac51ad803345d45f6b98be464c5612b686a3d9d4cd63d07f4f73adc1d315c75801478013613f32cff73ef75d3c1bc4c0e3285e7ac0abfb9a9436d3bd5c465fb481ef327daa063467bed62ca20ea27921835eb7dedd23647836fa378e7d09dd6a67c8734ca585075cc0ae2aa44c4aebec8289e4f1e39096d87c6e53fb6c6e310ada17ac1f13e60a1ef8c55c2ba6bc22124b9818c924640adcc25806572cf2f65845bad5d1971", 0xd9, 0xfffffffffffffffd) keyctl$link(0x8, r2, r3) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f0000000180)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0x0) 10:09:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x61, "10c7da4e7cb282bdb7afe99f5820e20c323abb78ff4714d8568af287cfccada91058c46e51c59caaf2c19825ed8a1af235b993ea446a49f289c1a40b86361bb673be0b3f8ec3d46b957bcb189d74dedf004adde918085652f336341e718103789d"}, &(0x7f0000000180)=0x69) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000001c0)={r4, 0x88, "df198643260afde9fad8d8a831c7a9e0e669c7eb1fdb982558142dd8e9c9dae31efb9b5e99047bbf93d7a44b67d1eb1e74045092706d56ee58c4c033c4ec3119b0104729641e60c4445975f2120f187801d2be1535cac743b3db67f91cd213011da324f7dad0d4afd03abdc138ec5afe70b8db41332e48218a8b5854354d25c4dbfccd637fd395a3"}, 0xfffffffffffffffd) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x8027, 0x91}) [ 250.405894] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 10:09:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8000000035, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1788, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x1b}, 0x605}}, 0x3, 0x1, 0x10000, "9d516d9ec23627fe7ed25685c6a8f7d6ed16e17545b0037d4832ea44532ea31cac1c0da85c6752761157d2e3a0d8c0f8583555710841e3011d571ecf62bcab0da6489430565d79e4fb951b21cf24a5f7"}, 0xd8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000"], 0x10}}], 0x1, 0x0) [ 250.878241] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.884786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.891830] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.898385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.906819] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 10:10:00 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, 0x3ff, 0x7, 0x564, 0x1c0, 0xfffffffffffffffb}) [ 251.701930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:10:00 executing program 0: prctl$intptr(0x1c, 0x7fff) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x6, 0x3f, 0xfff, 0x6, 0x0, 0x8000, 0x30080, 0x8, 0x3, 0x6, 0x9, 0x8, 0x45fd, 0xaac37cf, 0x1000, 0x3, 0x5, 0xdf, 0x5, 0x2e40, 0x3, 0x2, 0xfffffffffffff184, 0x6, 0x0, 0xffffffffffff8000, 0x2, 0xffff, 0x0, 0xfffffffffffff7eb, 0x80000000, 0x2, 0x40, 0x2, 0x200000000000, 0x20, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x12002, 0x6, 0x5, 0x7, 0x3, 0x5, 0x3}, 0xffffffffffffff9c, 0x9, 0xffffffffffffff9c, 0x4) ppoll(&(0x7f0000000100)=[{r0, 0x8}, {r1, 0x8}], 0x2, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={0x401}, 0x8) 10:10:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000010000000000000000000000000000ffffffff010000001500000000000000810079616d300000000000000000000000006263736630000000000000000000000069706464703000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaabb0000000000000000e000000068010000a001000074696d65000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000766c616e000000000000000000000000000000000000000000000000000000000800000000000000c5cfd1ca000002006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000dcffffff000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000011000000000000000000000000000000fdffffff00000000"]}, 0x2a8) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000300)) [ 252.816343] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.823070] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.831519] device bridge_slave_0 entered promiscuous mode [ 253.174768] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.181239] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.189867] device bridge_slave_1 entered promiscuous mode [ 253.564914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 253.778732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.956224] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 254.969358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.001456] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.310987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.609428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 255.616815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.936813] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 255.944288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.133987] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 256.140430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.148514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.810796] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.819134] team0: Port device team_slave_0 added [ 257.028661] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.036946] team0: Port device team_slave_1 added [ 257.277854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 257.285093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.293877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.306930] 8021q: adding VLAN 0 to HW filter on device team0 10:10:06 executing program 1: fchdir(0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffffffffffffffc) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) lseek(r2, 0x0, 0x3) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) [ 257.568199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 257.575650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.584348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.828868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 257.836736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.845831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.138696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.146698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.155735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.240867] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.247458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.254501] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.260953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.269272] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 260.276125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:10:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 262.120448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.263088] ptrace attach of "/root/syz-executor2"[7377] was attempted by "/root/syz-executor2"[7378] [ 262.708474] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.215241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.241968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.249844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.720194] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.355394] 8021q: adding VLAN 0 to HW filter on device bond0 10:10:15 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) [ 266.853225] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 267.268647] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 267.275087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.283045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.571073] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.412803] hrtimer: interrupt took 33305 ns [ 273.484397] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 273.495852] clocksource: 'acpi_pm' wd_now: 9ea5f7 wd_last: 17978d mask: ffffff [ 273.505342] clocksource: 'tsc' cs_now: 98176041a3 cs_last: 96c46c9f79 mask: ffffffffffffffff [ 273.515971] tsc: Marking TSC unstable due to clocksource watchdog 10:10:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2001) 10:10:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x401000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x800455d1, &(0x7f0000001000)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x80) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x7, 0x2020000000000, 0xd4ff, 0x84, 0x4, 0x2}) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4602050800f7ffffffffffffff02003e002b0000002600000038000000d900000005000000ffff200001000200010108000000000007000000ff0300000700000003000000cc0000000100000000506e02200000006397fb08365a6be12bc74335e4659231593ab9e467888d24d5a0f31f7b4f050000000000000076dd66c2b8eea9843eeff5531154f8632fcade9f23818047f31005003bbfc79bd6944f8e4cb2cea382fc8949603c1a584e9006e2c80b96df3ecfd44d9d0f46ef4de68633ef6626aa65bf7745e1db90144cfff8586085bdd6fae2eee15a200918470c12d68a5f10"], 0xe5) 10:10:22 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x4, 0x420000) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, 0x0) recvmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/72, 0x48}], 0x2, &(0x7f0000000500)=""/71, 0x47, 0xff}, 0x100) setuid(r4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000640)={0x79, 0x0, [0x40, 0x8, 0x9, 0x80]}) readv(r5, &(0x7f0000001a40)=[{&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/174, 0xae}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/155, 0x9b}, {&(0x7f00000019c0)=""/110, 0x6e}], 0x7) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000001ac0)={0x7f, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e24, 0x4, 'dh\x00', 0x2f, 0xffffffff80000000, 0x60}, 0x2c) write$FUSE_GETXATTR(r5, &(0x7f0000001b00)={0x18, 0x0, 0x2, {0x2}}, 0x18) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b80)={&(0x7f0000001b40)='./file0/file0\x00', 0x0, 0x10}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001bc0)={{{@in6=@dev, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000001cc0)=0xe8) socketpair$inet(0x2, 0x1, 0x40, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_type(r5, &(0x7f0000001d40)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000001d80)) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000001dc0)={{0x3f, 0x7194, 0x70000, 0x2}, 'syz0\x00', 0x32}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@mcast1, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001f40)=0xe8) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) write$binfmt_misc(r6, &(0x7f0000001f80)={'syz1', "abe2fa7748b0ff384051b0018a424279bc7610372d0264c2b3"}, 0x1d) flistxattr(r2, &(0x7f0000001fc0)=""/2, 0x2) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000002000), &(0x7f0000002040)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bind$vsock_stream(r5, &(0x7f0000002080)={0x28, 0x0, 0x2710, @host}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000020c0)={0x0, 0x5, 0x2, 0x6}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000002140)={r9, 0x7f}, &(0x7f0000002180)=0x8) 10:10:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) 10:10:22 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000300)={0x77359400}, &(0x7f0000e7fffc), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000015) 10:10:22 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f000000b700)=[{{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001dc0)=[{0x10, 0x10d}], 0x10}}], 0x1, 0x10) [ 273.528658] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 273.537579] sched_clock: Marking unstable (273587091715, -58454296)<-(273652001787, -123363792) [ 273.538637] clocksource: Switched to clocksource acpi_pm 10:10:22 executing program 1: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x5, @perf_config_ext={0x1, 0x5}, 0x20000, 0x3, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x1f}, 0x0, 0x0, r0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) write$tun(r1, &(0x7f0000000080)={@val, @val={0x2, 0x1, 0x0, 0x3, 0x978}, @x25={0x1, 0x5, 0xff}}, 0x11) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') preadv(r2, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) [ 273.749349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.756385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000001680)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x70) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f0000000140), 0x391, 0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 10:10:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000001753"], 0x0, 0x0, &(0x7f0000000500)}) 10:10:23 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="80d2", 0x2}], 0x1, &(0x7f0000000ac0)}, 0x8000) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000840)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc", 0x2}], 0x1}, 0x0) [ 274.273568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.460534] binder: 7645 RLIMIT_NICE not set [ 274.465285] binder: 7645 RLIMIT_NICE not set [ 274.495584] binder: 7645 RLIMIT_NICE not set [ 274.500204] binder: 7643:7645 got transaction with invalid data ptr 10:10:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) 10:10:23 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r0, r1, &(0x7f0000000180), 0x100000001) [ 274.507115] binder: 7643:7645 transaction failed 29201/-14, size 83-0 line 2989 [ 274.514890] binder: send failed reply for transaction 2 to 7643:7645 [ 274.596344] binder_alloc: binder_alloc_mmap_handler: 7643 20001000-20004000 already mapped failed -16 [ 274.641042] binder: BINDER_SET_CONTEXT_MGR already set [ 274.647271] binder: 7643:7645 ioctl 40046207 0 returned -16 [ 274.709664] binder_alloc: 7643: binder_alloc_buf, no vma [ 274.715531] binder: 7643:7653 transaction failed 29189/-3, size 0-0 line 2970 [ 274.768946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.776563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.865827] binder: 7643:7646 got reply transaction with no transaction stack [ 274.873831] binder: 7643:7646 transaction failed 29201/-71, size 83-0 line 2762 [ 274.875903] binder: 7645 RLIMIT_NICE not set 10:10:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) 10:10:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="230000001a0081aee4050c00000f00fe0a8bc36f16000002000000bfd77ea14af3a311", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000380)=""/253, 0xfd}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/166, 0xa6}], 0x3, &(0x7f0000001500)=""/232, 0xe8}, 0x0) [ 274.919100] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.924912] binder: undelivered TRANSACTION_ERROR: 29190 [ 274.930733] binder: undelivered TRANSACTION_COMPLETE [ 274.936683] binder: undelivered TRANSACTION_ERROR: 29201 [ 274.983914] IPVS: ftp: loaded support on port[0] = 21 [ 275.037667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.190560] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.205666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.085500] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.092050] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.099696] device bridge_slave_0 entered promiscuous mode [ 277.189653] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.196151] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.204274] device bridge_slave_1 entered promiscuous mode [ 277.282636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 277.359433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 277.588356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 277.667852] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 278.043144] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 278.050780] team0: Port device team_slave_0 added [ 278.127893] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 278.135688] team0: Port device team_slave_1 added [ 278.211285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 278.218741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.227529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.301069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.379642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 278.387128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.396151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.468181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 278.475586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.484677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.335064] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.341474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.348470] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.355110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.363281] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 280.022081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.480725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.767418] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.054262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 283.060539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.068551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.351458] 8021q: adding VLAN 0 to HW filter on device team0 10:10:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4000004000000001, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x4, 0x90, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000858], 0x0, &(0x7f0000000040), &(0x7f00000003c0)=[{}, {}, {0x0, '\x00', 0x2}]}, 0x108) 10:10:34 executing program 1: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r0, r1, &(0x7f0000000180), 0x100000001) 10:10:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01634040000000000000000000000000000000000000000000000000000000000000001753"], 0x0, 0x0, &(0x7f0000000500)}) 10:10:34 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) 10:10:34 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2800fffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=@random={'system.', 'TRUE'}, &(0x7f0000000100)='ggeouplo\x00', 0x0, 0x1) 10:10:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) [ 285.524669] binder: 7942 RLIMIT_NICE not set [ 285.529265] binder: 7942 RLIMIT_NICE not set 10:10:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) [ 285.569798] binder: 7942 RLIMIT_NICE not set [ 285.574727] binder: 7937:7942 got transaction with invalid data ptr [ 285.581259] binder: 7937:7942 transaction failed 29201/-14, size 83-0 line 2989 [ 285.589011] binder: send failed reply for transaction 7 to 7937:7942 [ 285.631828] kernel msg: ebtables bug: please report to author: Wrong len argument [ 285.650323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.705030] kernel msg: ebtables bug: please report to author: Wrong len argument 10:10:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) read(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) write$eventfd(r1, &(0x7f0000000080), 0x8) 10:10:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 285.815981] binder: undelivered TRANSACTION_COMPLETE [ 285.821270] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.842264] binder: undelivered TRANSACTION_ERROR: 29190 [ 285.894381] binder: 7951:7952 Acquire 1 refcount change on invalid ref 0 ret -22 10:10:35 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)="000000008c00000001000000008000", 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1000000c0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) [ 285.957452] binder: 7951:7952 Acquire 1 refcount change on invalid ref 0 ret -22 [ 285.958305] binder: 7951:7957 Release 1 refcount change on invalid ref 0 ret -22 10:10:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046306}], 0x0, 0x0, &(0x7f0000008f37)}) 10:10:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000210000)=0x2, 0x4) getsockopt$packet_buf(r0, 0x107, 0x40400000006, &(0x7f0000000240)=""/240, &(0x7f0000ca5ffc)=0x182) [ 286.397966] binder: 7970:7974 Acquire 1 refcount change on invalid ref 0 ret -22 10:10:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$netlink(r1, &(0x7f0000000000)=@unspec, 0xc) read(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) write$eventfd(r1, &(0x7f0000000080), 0x8) [ 286.449656] binder: 7970:7977 Acquire 1 refcount change on invalid ref 0 ret -22 10:10:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x800) ioctl$VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f00000008c0)={0x3, @raw_data="58b0b1e6db837b89183c0e6a064c227b14655ed75fa4cce5edf23312e2f89de6615186bc581d171d33ba6a932a232900da7eded6ce89293e19cbeff5f59fe07d81bd9bec1d3a67df1d4bb84fecb38d7a2e26f1ce3ae72233467937833c53b293480e7a7c06aca2513a85abaeb0ea26e38e5083f5dda189cdae4c35f97cfbd78aef3dbe0f5a2b5469d6ebdf777b45fdb0bbcb68d65c4282c6962c98878c1d66f9a2b0b4e68ecd76832465798874ad28ebceb684de205ad7b2d9888093c0efb1d857f3b01d48e74cc9"}) process_vm_readv(0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000580), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000540), 0x0) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=@flushsa={0x28, 0x1c, 0x2, 0x0, 0x0, {}, [@sec_ctx={0xc, 0x8, {0x8}}, @proto={0x8, 0x19, 0x32}]}, 0x28}}, 0x20000094) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000340)) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x1) pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) [ 286.514140] binder: 7970:7974 Release 1 refcount change on invalid ref 0 ret -22 10:10:35 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$intptr(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x100000002000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0x1000000}, 0x8}) sync() vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 10:10:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000080)}) 10:10:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1d, 0xffffff1f, 0x0, 0x0, {0x1}, [@nested={0x4, 0xf}]}, 0x18}, 0x1, 0x8001a0ffffffff}, 0x0) [ 286.855794] binder: 7992:7993 Acquire 1 refcount change on invalid ref 0 ret -22 [ 286.962777] binder: 7992:7993 Acquire 1 refcount change on invalid ref 0 ret -22 10:10:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000d01000)=0x7ff, 0x4) sendto$inet6(r0, &(0x7f0000adb000)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e602721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a0e1d0607f57f626a5b8d476636ef1ee76307524cf9ae49be4db0ab2c8ea0c5ebd1e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408cc4c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669c24c206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb25c89074fcb1bba20c41bddd9ca5cd2f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2ebdfad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c5912a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c906a38cbda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe9bc88fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f400582bd95e5ad802050d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60be632697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20f4774d66c5ae0a0adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59", 0x599, 0x0, &(0x7f0000809000)={0xa, 0x4e22}, 0x1c) 10:10:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) 10:10:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 10:10:36 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth0_to_bridge\x00'}) gettid() r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x9, 0x6, 0x1ff, 0x1, 0x0, 0x80000000, 0x0, 0x2b3bb4516d94f23c, 0x5, 0x0, 0xd2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0x80000001, 0x10, 0x200, 0x3, 0x2, 0x3, 0x9, 0xffffffff, 0x2, 0x1, 0x4030acbd, 0x7, 0xbd1, 0x8, 0x9, 0x1, 0x800, 0x1000, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffa}, 0x624, 0x0, 0x200, 0x0, 0x400000000000000, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0xd5, 0xfffffffffffffff7, 0xb7, 0x8957, 0x0, 0x1, 0x0, 0xf, 0x5, 0xae5, 0x3, 0x6, 0x7f, 0x7ff, 0x0, 0x0, 0x8, 0x0, 0x3, 0x9, 0x1ff, 0xfffffffffffffff9, 0xcf7, 0x5, 0x1ff, 0x80000001, 0x20, 0x5, 0x1800000000000000, 0x0, 0x400, 0x0, 0x81, 0x80000000, 0x3, 0x5, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x400, 0x1, 0x0, 0x3, 0x4, 0xfffffffffffffe01}, 0x0, 0x9, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000640)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000d80)={&(0x7f0000000a40)=@can, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/56, 0x38}, {&(0x7f0000000cc0)=""/115, 0x73}], 0x2, &(0x7f0000000d40)=""/53, 0x35, 0x5}, 0x40002020) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xfb, &(0x7f0000000340)=""/251}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28}, {0x16, 0x0, 0x4}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)="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") bpf$PROG_LOAD(0x5, &(0x7f0000007540)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="25140c4c5400051e98e4f9d28ce4cef0710000005bdf9007d8000076f09a000000000097808ff2c8c5a478ac801eca7297fe52e6f6e00000000000000000000000"], &(0x7f0000000b40)='GPL\x00', 0x4, 0x1000, &(0x7f0000002bc0)=""/4096, 0x41100, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000b00)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f00000015c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/215, 0xd7}], 0x5, &(0x7f0000002a00)=""/216, 0xd8, 0x3}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) 10:10:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 287.446316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.453349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.622351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.768126] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 287.822678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f19}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000280)={'rowe0\x00', 0x1}) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xffff) ioctl$NBD_CLEAR_QUE(r5, 0xab05) dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') setsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000200)="083d12ceec8ffb177733fa1cf5d71769f22fd6716a5d64f4093e81b4d31909b5a6d3087f008fb7facb8c5007c41948874c", 0x31) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) accept4$unix(r6, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000feff000000000063b5b229448cc8000000"], 0x1}}, 0x0) [ 288.233650] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 10:10:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 288.633133] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 10:10:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 289.112821] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 289.427794] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:38 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$intptr(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x100000002000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0x1000000}, 0x8}) sync() vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 10:10:38 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:38 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008002, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0x2000000000000]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000000200)=""/101, 0xffffffffffffff46, 0x120, 0x0, 0xffffffffffffffeb) 10:10:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) 10:10:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f19}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19) r4 = socket$inet(0x2, 0x3, 0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000280)={'rowe0\x00', 0x1}) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xffff) ioctl$NBD_CLEAR_QUE(r5, 0xab05) dup2(r2, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') setsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000200)="083d12ceec8ffb177733fa1cf5d71769f22fd6716a5d64f4093e81b4d31909b5a6d3087f008fb7facb8c5007c41948874c", 0x31) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) accept4$unix(r6, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000feff000000000063b5b229448cc8000000"], 0x1}}, 0x0) 10:10:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r1, &(0x7f00000000c0)='./file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1/file0\x00') [ 290.004788] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:10:39 executing program 1: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 290.371548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000440)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) 10:10:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x7ffff000}}, 0x0) 10:10:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x800) r3 = gettid() ioctl$VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f00000008c0)={0x3, @raw_data="58b0b1e6db837b89183c0e6a064c227b14655ed75fa4cce5edf23312e2f89de6615186bc581d171d33ba6a932a232900da7eded6ce89293e19cbeff5f59fe07d81bd9bec1d3a67df1d4bb84fecb38d7a2e26f1ce3ae72233467937833c53b293480e7a7c06aca2513a85abaeb0ea26e38e5083f5dda189cdae4c35f97cfbd78aef3dbe0f5a2b5469d6ebdf777b45fdb0bbcb68d65c4282c6962c98878c1d66f9a2b0b4e68ecd76832465798874ad28ebceb684de205ad7b2d9888093c0efb1d857f3b01d48e74cc9"}) process_vm_readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1, &(0x7f0000000580)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x0, @broadcast}], 0x10) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000600)=@flushsa={0x14, 0x1c, 0x2, 0x70bd28, 0x25dfdbfc, {0x3c}}, 0x14}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x2, 0x0, 0x5}) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), &(0x7f0000000280)=0x14) memfd_create(&(0x7f00000003c0)=' ', 0x0) memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x1) 10:10:40 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local, 'ip_vti0\x00'}}, 0x80) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getpid() ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, {}, 0xc4}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) close(r0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @value64}}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) 10:10:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e21, 0x8, @loopback, 0x8}, {0xa, 0x0, 0x3, @mcast2}, 0x7f, [0x0, 0x0, 0x0, 0x6, 0x0, 0x5039, 0x0, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = dup2(r2, r3) write$P9_RLCREATE(r6, &(0x7f00000004c0)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x6}, 0x5}}, 0x18) 10:10:40 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x44002) 10:10:40 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 291.574081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000000000804d0437cc471e5c"]) 10:10:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 291.827265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.020906] kernel msg: ebtables bug: please report to author: bad policy 10:10:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a40fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x8f, &(0x7f0000000100)="46f1263ab0e2d21caa642b2a88a8", &(0x7f0000000280)=""/143, 0xc8b}, 0x28) 10:10:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000040), &(0x7f0000000240)=0x1) 10:10:41 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local, 'ip_vti0\x00'}}, 0x80) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) getpid() ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, {}, 0xc4}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) close(r0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000280)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @value64}}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) 10:10:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x800) r3 = gettid() ioctl$VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f00000008c0)={0x3, @raw_data="58b0b1e6db837b89183c0e6a064c227b14655ed75fa4cce5edf23312e2f89de6615186bc581d171d33ba6a932a232900da7eded6ce89293e19cbeff5f59fe07d81bd9bec1d3a67df1d4bb84fecb38d7a2e26f1ce3ae72233467937833c53b293480e7a7c06aca2513a85abaeb0ea26e38e5083f5dda189cdae4c35f97cfbd78aef3dbe0f5a2b5469d6ebdf777b45fdb0bbcb68d65c4282c6962c98878c1d66f9a2b0b4e68ecd76832465798874ad28ebceb684de205ad7b2d9888093c0efb1d857f3b01d48e74cc9"}) process_vm_readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1, &(0x7f0000000580)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x0, @broadcast}], 0x10) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000600)=@flushsa={0x14, 0x1c, 0x2, 0x70bd28, 0x25dfdbfc, {0x3c}}, 0x14}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x2, 0x0, 0x5}) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), &(0x7f0000000280)=0x14) memfd_create(&(0x7f00000003c0)=' ', 0x0) memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x1) 10:10:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 292.426316] kernel msg: ebtables bug: please report to author: bad policy 10:10:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x300, {0x0, @link_local, 'vcan0\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="fb", 0x1}], 0x1}, 0x20000080) 10:10:41 executing program 4: r0 = gettid() exit(0x0) sched_getaffinity(r0, 0x8, &(0x7f00000001c0)) 10:10:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e21, 0x8, @loopback, 0x8}, {0xa, 0x0, 0x3, @mcast2}, 0x7f, [0x0, 0x0, 0x0, 0x6, 0x0, 0x5039, 0x0, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = dup2(r2, r3) write$P9_RLCREATE(r6, &(0x7f00000004c0)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x6}, 0x5}}, 0x18) 10:10:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 292.942135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, &(0x7f0000000080)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000100)}) [ 293.055123] kernel msg: ebtables bug: please report to author: bad policy [ 293.152463] binder: BINDER_SET_CONTEXT_MGR already set [ 293.157977] binder: 8179:8180 ioctl 40046207 0 returned -16 10:10:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x300, {0x0, @link_local, 'vcan0\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="fb", 0x1}], 0x1}, 0x20000080) 10:10:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x90, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 10:10:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x800) r3 = gettid() ioctl$VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f00000008c0)={0x3, @raw_data="58b0b1e6db837b89183c0e6a064c227b14655ed75fa4cce5edf23312e2f89de6615186bc581d171d33ba6a932a232900da7eded6ce89293e19cbeff5f59fe07d81bd9bec1d3a67df1d4bb84fecb38d7a2e26f1ce3ae72233467937833c53b293480e7a7c06aca2513a85abaeb0ea26e38e5083f5dda189cdae4c35f97cfbd78aef3dbe0f5a2b5469d6ebdf777b45fdb0bbcb68d65c4282c6962c98878c1d66f9a2b0b4e68ecd76832465798874ad28ebceb684de205ad7b2d9888093c0efb1d857f3b01d48e74cc9"}) process_vm_readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1, &(0x7f0000000580)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x0, @broadcast}], 0x10) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000600)=@flushsa={0x14, 0x1c, 0x2, 0x70bd28, 0x25dfdbfc, {0x3c}}, 0x14}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x2, 0x0, 0x5}) recvfrom(r1, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100), &(0x7f0000000280)=0x14) memfd_create(&(0x7f00000003c0)=' ', 0x0) memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x1) 10:10:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000340)=""/251}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xf, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) [ 293.522018] kernel msg: ebtables bug: please report to author: Total nentries is wrong 10:10:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000240)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) 10:10:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x90, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 10:10:42 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, &(0x7f0000000440)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffff7ff, 0x0) 10:10:43 executing program 0: getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x3, @mcast2, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x1, 0x5039, 0x0, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 10:10:43 executing program 5: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000600)=@ipx={0x4, 0x40, 0x80000001, "9c2d8812c84a", 0x33b7ccc9}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) r3 = socket$inet(0x2, 0x4000000000000001, 0x400000000000) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000005c0)=0xfff, 0xffffffffffffff57) sendto$inet(r3, &(0x7f0000002440), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = dup3(r2, r2, 0x80003) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x3, 0x22}) getsockname$inet6(r4, &(0x7f0000000700), &(0x7f0000000000)=0xfffffffffffffdfe) sendto$inet(r3, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x3, 0x7f}, 0xc26, 0x9, 0x100000000004}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x332, 0x3, 0x21}, 0x4, 0x3ff, 0xffffffffffffff80}) r5 = gettid() capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000380)) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x0, 0x62, 0xb5, 0x1, 0x6}) geteuid() getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) getegid() getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@dev, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0xe8) getgid() getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@multicast2, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000d00)=0xe8) getuid() getgroups(0x0, &(0x7f0000001040)) fstat(r1, &(0x7f0000001080)) lstat(0xfffffffffffffffd, &(0x7f0000001100)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000021c0)={{{@in6=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000022c0)=0xe8) sendmmsg$unix(r1, &(0x7f0000002380)=[{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000680)="9013c6d5c92c1f97fb1a6f0c6f93d719610ebad9e31b99925cfdd1a26a017a54f9695037ed41dd8265c8d809491be1185882437662dfda63daaaae7e6ff3ad6cdd0b8569f8c6ee6a5ba721673ace2926643047fd39f3bb0aa1186de7adc73af706286d5a35", 0x65}], 0x1, &(0x7f0000002300), 0x0, 0x40000}], 0x1, 0x2000c040) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getpgid(r5) [ 293.963773] kernel msg: ebtables bug: please report to author: Total nentries is wrong 10:10:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x4030ae7b, 0x400000) 10:10:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x90, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 10:10:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000300)='./bus\x00', 0x0) [ 294.341397] kernel msg: ebtables bug: please report to author: Total nentries is wrong 10:10:43 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x20000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)="2f02726f75702e7374617000"}, 0x10) 10:10:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:43 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local, 'ip_vti0\x00'}}, 0x80) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) close(r0) [ 294.862225] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 10:10:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) [ 295.195511] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 295.219504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:44 executing program 5: sched_setaffinity(0x0, 0xffffffffffffffb1, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000600)=@ipx={0x4, 0x40, 0x80000001, "9c2d8812c84a", 0x33b7ccc9}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7fff) r3 = socket$inet(0x2, 0x4000000000000001, 0x400000000000) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000005c0)=0xfff, 0xffffffffffffff57) sendto$inet(r3, &(0x7f0000002440), 0x0, 0x20000802, &(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r4 = dup3(r2, r2, 0x80003) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000004c0)={0x100008, 0x3, 0x22}) getsockname$inet6(r4, &(0x7f0000000700), &(0x7f0000000000)=0xfffffffffffffdfe) sendto$inet(r3, &(0x7f0000d7cfcb), 0x100000252, 0x0, &(0x7f0000893ff0), 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x3, 0x7f}, 0xc26, 0x9, 0x100000000004}) shutdown(r3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000400)={{0x3, 0x3, 0x332, 0x3, 0x21}, 0x4, 0x3ff, 0xffffffffffffff80}) r5 = gettid() capset(&(0x7f0000000340)={0x20080522, r5}, &(0x7f0000000480)={0x7, 0x4, 0x5, 0xa3e5, 0x9, 0x7fff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @local}}) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000380)) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x0, 0x62, 0xb5, 0x1, 0x6}) geteuid() getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) getegid() getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@dev, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0xe8) getgid() getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@multicast2, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000d00)=0xe8) getuid() getgroups(0x0, &(0x7f0000001040)) fstat(r1, &(0x7f0000001080)) lstat(0xfffffffffffffffd, &(0x7f0000001100)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000021c0)={{{@in6=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000022c0)=0xe8) sendmmsg$unix(r1, &(0x7f0000002380)=[{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000680)="9013c6d5c92c1f97fb1a6f0c6f93d719610ebad9e31b99925cfdd1a26a017a54f9695037ed41dd8265c8d809491be1185882437662dfda63daaaae7e6ff3ad6cdd0b8569f8c6ee6a5ba721673ace2926643047fd39f3bb0aa1186de7adc73af706286d5a35", 0x65}], 0x1, &(0x7f0000002300), 0x0, 0x40000}], 0x1, 0x2000c040) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)={&(0x7f0000000500)='./file0\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getpgid(r5) [ 295.335503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 295.663464] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 10:10:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) 10:10:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x170, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0xa8, 0xa8, 0xe0, [@realm={'realm\x00', 0x10}]}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1e8) 10:10:45 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$intptr(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x7}, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0)={0x1000000}, 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) [ 296.127317] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 10:10:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/106) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 296.594160] kvm [8278]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 296.712098] kvm [8278]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 296.748817] kvm [8278]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 [ 296.908009] kvm [8278]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 296.968303] kvm [8278]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 297.016744] kvm [8278]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 [ 297.089676] kvm [8278]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 297.114174] kvm [8278]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 297.159702] kvm [8278]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc2 data 0x4000 [ 297.172228] kvm [8278]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 10:10:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10000) 10:10:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) 10:10:46 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local, 'ip_vti0\x00'}}, 0x80) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) close(r0) 10:10:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) 10:10:46 executing program 2: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYBLOB="f9d388bf"], &(0x7f0000000700)=0x1) r0 = request_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000740)='cgroup\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, r0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000bc0)="2f70726fa103b7d984a8c6b09af4c9632f7379732f6e65742f697076342f76732f73796e635f72657472696573008e552ac919424840c354573ad3819b9b3aa3815df209533dc5d6688e9738f6f229154576dfc45a9071cac85cefab9534f54203e7507198b9735a3ee1be3c36d2600d051cd687fa813b75d0d877eb8f4067b414920f0bd208fd08312b8e19b69b932a7144ec2b23cb50e5c49787144226e43a3f2396b99c6fb9e5695c2b641672f7b984b5dbbd830b47592e251a5a614d9faf61e55a5a56178467fa6a9058e71ee969e2b5e2718625a3a2fd302a6e6cc629", 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000480)=ANY=[@ANYBLOB="dadcfd938b94bc0175e1268a4ea64226013a9bec2cdd4430b7a7aa67da0011e7cb05ba0b85e218455e7a7bf1ffea2be81add0000002e4c80000800000000000000003ddf4008e6ecdf2b4e67f7abe86a7fe4fa453b90ab760ea47ec3155de5dd8c82320b7db63f966b7bcafa9eae2a024a42e0a22c5e66b0410630ba17b552362a9e229ad5236fc10160a5fa1b48e82155012510d21297bad787b075902ccf6d641724d2ca15ddee0800000039c2f30cc54c319b469ca15dc9cfdeef998fcc89cf3d0810b1111639e011ded34083cb422bc94e1056fe20f28c4f9d20845a35c38a000000cd0000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x2004e28, @remote}, 0x10) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103dd33a06e75bda9077fe94e781219960e54ecbd01000000"]}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000380)={@remote}, &(0x7f0000000640)=0x14) r6 = dup2(r3, r3) ioctl$RTC_PLL_SET(r4, 0x401c7012, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x106, 0x8, 0x3fe}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x10, 0x5, 0xc8, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x443200}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000440)={r8, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="25000000d69c452ba876e6bac3c04525631033185e70bdd082e2ec63a7c6a5b97ea32260d59354afe110df9a6f5e57190c49a2c2c30c769f08197525472599ac8b3ca5e8f590ea2270a800ceccf0aacdf8696d08854d0a676d4dd868959149866a4e1260f298f19f53e785680d1dcd22273566421c41c0"], &(0x7f0000000240)=0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000600)={0x0, 0xa8}, &(0x7f0000000280)=0x8) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r6, 0x402, 0x13) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r9 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x85) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000380)) writev(r10, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) 10:10:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/106) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) [ 297.713117] kvm [8292]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 [ 297.830921] kvm [8292]: vcpu0, guest rIP: 0x2db ignored wrmsr: 0x11e data 0xbe706111 10:10:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) 10:10:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) [ 297.874030] kvm [8292]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0x186 data 0x4000 10:10:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) [ 298.163849] kvm [8292]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 10:10:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x8, @dev, 0x8000}, 0x262) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f00000022c0), 0x0, &(0x7f0000002300), 0x0, 0x80}], 0x1, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r2, &(0x7f0000000200)=""/30, 0x10000038b) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x0, &(0x7f00007fc000/0x600000)=nil) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003780), 0x0, 0x0, &(0x7f00000038c0)) 10:10:47 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x4008ae48, 0x80ffff) [ 298.314324] kvm [8292]: vcpu0, guest rIP: 0x2db disabled perfctr wrmsr: 0xc1 data 0x4000 10:10:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) 10:10:47 executing program 5: clone(0x200, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280)) mknod(&(0x7f0000000440)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00000005c0)='./file0\x00', &(0x7f00000003c0), &(0x7f00000004c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl(r1, 0x0, &(0x7f0000000340)) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000600)) [ 298.713429] kernel msg: ebtables bug: please report to author: bad policy 10:10:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) 10:10:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=""/106) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:48 executing program 3: process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f00000015c0)=""/124, 0x7c}, {&(0x7f0000000200)=""/40, 0x28}], 0x3, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/53, 0x1b}, {&(0x7f0000001580)=""/60, 0xff71}], 0x4, 0x0) 10:10:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) [ 299.126668] kernel msg: ebtables bug: please report to author: bad policy 10:10:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) 10:10:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff}, 0x20) [ 299.458451] kernel msg: ebtables bug: please report to author: bad policy 10:10:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x1e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f0000000640)='ip6gre0\x00') 10:10:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x80000001, 0x1, 0x0, 0x2, 0x7f, 0x1, 0x3}, &(0x7f0000000280)=0x20) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:10:48 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/35, 0x23}], 0x1, 0x0) 10:10:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x20000802, &(0x7f00000003c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140), 0xa736f8fe1123547d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00\b\x00', 0x10) sendto$inet(r0, &(0x7f0000000400)="1f", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, &(0x7f0000002fc0)="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", 0xb28, 0x0, &(0x7f0000000500), 0x10) 10:10:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) 10:10:49 executing program 4: pipe(&(0x7f0000000380)) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 299.979570] kernel msg: ebtables bug: please report to author: bad policy 10:10:49 executing program 3: r0 = socket$kcm(0x2, 0x1000000000000801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0x1ecac}], 0x1, &(0x7f0000002a40)}, 0x0) 10:10:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xa4, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r3 = gettid() r4 = open(&(0x7f00000002c0)="e91f7189591e9233614b00", 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x9, 0x3, 0x7}, 0x1, 0x20000000, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x20, 0xb690, 0x80}) accept(r2, &(0x7f00000001c0)=@xdp, &(0x7f0000000100)=0x80) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) listen(r1, 0x5) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000400)={@broadcast, @broadcast}, 0x8) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0), 0x6) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)="e91f7189591e9233614b00", 0xb, 0x0) 10:10:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e21, 0x8, @loopback, 0x8}, {0xa, 0x0, 0x3, @mcast2, 0x3}, 0x7f, [0x0, 0x0, 0x0, 0x6, 0x1, 0x5039, 0x0, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 300.276637] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 10:10:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) [ 300.529975] kernel msg: ebtables bug: please report to author: bad policy 10:10:49 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000640)=@rc, 0x80, &(0x7f00000026c0), 0x0, &(0x7f00000028c0)=""/4096, 0x1000, 0x81}, 0x100) r0 = gettid() socketpair(0x11, 0xf, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x2, 0x6, 0xbe, 0x80, 0x0, 0x8, 0x9000, 0xb, 0x4, 0x0, 0xffff, 0x4, 0x40, 0x2, 0x2, 0x10000, 0x7, 0x200, 0x1, 0x3, 0x4, 0x2, 0x40, 0x3db, 0x9f31, 0x1, 0xca8, 0x8001, 0x1, 0xb7, 0xfffffffffffff03a, 0x401, 0x86ed, 0xd87e, 0x9, 0x8a, 0x0, 0x3a5, 0x0, @perf_config_ext={0x8000, 0x80000000}, 0x200, 0x0, 0x1c000000, 0x7, 0x1f, 0x5, 0x7fffffff}, r0, 0x7, r1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) [ 300.626451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000480)=""/254, &(0x7f00000003c0)=0xfe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702e6e657400075cb72a86d5", 0x200002, 0x0) 10:10:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) 10:10:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000180)="6474a14538ee8960ab"}) [ 300.929980] kernel msg: ebtables bug: please report to author: bad policy 10:10:50 executing program 3: [ 300.997252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:50 executing program 1: 10:10:50 executing program 4: 10:10:50 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) close(r0) 10:10:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x208200) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0x0, 0xc000000000000000}) 10:10:50 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000180)='/dSs\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x400012, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, &(0x7f0000000040)="c483494ba49a0000000000"}, &(0x7f00000000c0)={&(0x7f0000000000), {}, 0x0, &(0x7f0000000000)="c4816decef"}, 0x8, &(0x7f00005eaff8)) 10:10:51 executing program 0: 10:10:51 executing program 1: 10:10:51 executing program 4: 10:10:51 executing program 2: 10:10:51 executing program 3: 10:10:51 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200000000001, r1}) close(r0) 10:10:51 executing program 3: 10:10:51 executing program 2: 10:10:51 executing program 0: 10:10:51 executing program 4: 10:10:51 executing program 1: 10:10:52 executing program 4: 10:10:52 executing program 2: 10:10:52 executing program 1: 10:10:52 executing program 0: 10:10:52 executing program 3: 10:10:52 executing program 5: 10:10:52 executing program 4: 10:10:52 executing program 3: 10:10:52 executing program 1: 10:10:52 executing program 0: 10:10:52 executing program 5: 10:10:52 executing program 2: 10:10:52 executing program 4: 10:10:53 executing program 1: 10:10:53 executing program 3: 10:10:53 executing program 5: 10:10:53 executing program 0: 10:10:53 executing program 4: 10:10:53 executing program 1: 10:10:53 executing program 2: 10:10:53 executing program 3: 10:10:53 executing program 5: 10:10:53 executing program 0: 10:10:53 executing program 1: 10:10:53 executing program 4: 10:10:53 executing program 2: 10:10:53 executing program 3: 10:10:54 executing program 5: 10:10:54 executing program 4: 10:10:54 executing program 1: 10:10:54 executing program 3: 10:10:54 executing program 0: 10:10:54 executing program 2: 10:10:54 executing program 4: 10:10:54 executing program 5: 10:10:54 executing program 2: 10:10:54 executing program 0: 10:10:54 executing program 1: 10:10:54 executing program 3: 10:10:55 executing program 5: 10:10:55 executing program 4: 10:10:55 executing program 2: 10:10:55 executing program 3: 10:10:55 executing program 0: 10:10:55 executing program 1: 10:10:55 executing program 5: 10:10:55 executing program 2: 10:10:55 executing program 3: 10:10:55 executing program 0: 10:10:55 executing program 4: 10:10:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, 0x0) r2 = memfd_create(&(0x7f00000001c0)="0099e62aaf0000000000", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000040), 0x1000) 10:10:55 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1000, &(0x7f00000001c0)=0x0) io_destroy(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:10:55 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x94e, 0xae) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:10:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003880)) 10:10:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) lstat(&(0x7f0000000140)='./control/file0\x00', &(0x7f0000000300)) rmdir(&(0x7f0000000080)='./control\x00') 10:10:56 executing program 0: clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x1c795534) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x0, &(0x7f0000000080), 0x1c) accept(r1, 0x0, &(0x7f0000000240)=0x336) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000400)=""/130, 0x82, 0x0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) tee(r1, 0xffffffffffffffff, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000800)={0x84, 0x38, 0x500, 0x70bd29, 0x25dfdbfe, {0x1c}, [@generic="53010073c02a8ab43c95da0b64244ceaa9c024c3340f86f89a3c7dcb41087923eb4f400c7e44f959fd2a558840bfd0729fa913dcbb6d74cdb722fc0134f703acfaf3eeb43d83fd89aa8e38b3f45b460b31cccc6f06a5f63ee418ad22ad7221e634835112194b9042d8abb15764e5"]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x8005) 10:10:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x8000, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x200000d4}}, 0x0) 10:10:56 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x2, 0x0, 0x0, 0x3, 0x1}) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x40001, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:10:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae71, 0x0) 10:10:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x4010ae42, 0x0) [ 307.655285] ptrace attach of "/root/syz-executor4"[8608] was attempted by "/root/syz-executor4"[8609] 10:10:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x3, @mcast2, 0x3}, 0x7f, [0x0, 0x0, 0x0, 0x6, 0x1, 0x5039, 0x0, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)) sync_file_range(r1, 0x0, 0x0, 0x2) [ 308.028520] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.035531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:57 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x5039]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 10:10:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x20000000000002, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) [ 308.464485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 308.551748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:10:57 executing program 2: socket$kcm(0xa, 0x0, 0x11) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) sendfile(r0, r1, &(0x7f0000000140), 0x2000007fe) 10:10:57 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x44, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={"6c6f0000002400000000000008000011", 0xff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e20, @loopback}}) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[{0x0, 0x2}, {0x8, 0xe4a}], 0x2) sendto$inet6(r3, &(0x7f00000000c0), 0x34debf3, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xb, 0xfffffffffffffffc) 10:10:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)) sync_file_range(r1, 0x0, 0x0, 0x2) 10:10:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000280)=r0, 0x706) 10:10:58 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r2) 10:10:58 executing program 2: socket$kcm(0xa, 0x0, 0x11) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) sendfile(r0, r1, &(0x7f0000000140), 0x2000007fe) 10:10:59 executing program 2: socket$kcm(0xa, 0x0, 0x11) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) sendfile(r0, r1, &(0x7f0000000140), 0x2000007fe) [ 310.548504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:11:00 executing program 2: socket$kcm(0xa, 0x0, 0x11) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) sendfile(r0, r1, &(0x7f0000000140), 0x2000007fe) [ 311.354107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.443987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.450836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.650111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:11:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000380)=""/194, &(0x7f0000000300)=0xc2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x3, @mcast2, 0x3}, 0x7f, [0x0, 0x0, 0x0, 0x6, 0x1, 0x5039, 0x0, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000480)=""/39, 0x27, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r2, r3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:11:01 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x44, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x0, &(0x7f0000001880), 0x1c) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000200), &(0x7f0000000380)=0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={"6c6f0000002400000000000008000011", 0xff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x4e20, @loopback}}) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[{0x0, 0x2}, {0x8, 0xe4a}], 0x2) sendto$inet6(r3, &(0x7f00000000c0), 0x34debf3, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xb, 0xfffffffffffffffc) 10:11:01 executing program 0: 10:11:01 executing program 3: 10:11:01 executing program 2: socket$kcm(0xa, 0x0, 0x11) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') exit(0x0) sendfile(r0, r1, &(0x7f0000000140), 0x2000007fe) 10:11:01 executing program 1: 10:11:02 executing program 3: 10:11:02 executing program 1: 10:11:02 executing program 0: 10:11:02 executing program 3: 10:11:02 executing program 0: 10:11:02 executing program 1: [ 314.235005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:11:03 executing program 4: 10:11:03 executing program 0: 10:11:03 executing program 3: 10:11:03 executing program 2: 10:11:03 executing program 1: 10:11:03 executing program 5: 10:11:04 executing program 2: 10:11:04 executing program 3: 10:11:04 executing program 4: 10:11:04 executing program 5: 10:11:04 executing program 1: 10:11:04 executing program 0: 10:11:04 executing program 2: 10:11:04 executing program 4: 10:11:04 executing program 3: 10:11:04 executing program 1: 10:11:04 executing program 0: 10:11:04 executing program 2: 10:11:04 executing program 5: 10:11:04 executing program 4: 10:11:04 executing program 3: 10:11:05 executing program 1: 10:11:05 executing program 2: 10:11:05 executing program 1: 10:11:05 executing program 4: 10:11:05 executing program 0: 10:11:05 executing program 5: 10:11:05 executing program 3: 10:11:05 executing program 2: 10:11:05 executing program 4: 10:11:05 executing program 0: 10:11:05 executing program 5: 10:11:05 executing program 1: 10:11:05 executing program 3: 10:11:06 executing program 4: 10:11:06 executing program 0: 10:11:06 executing program 2: 10:11:06 executing program 1: 10:11:06 executing program 3: 10:11:06 executing program 5: 10:11:06 executing program 4: 10:11:06 executing program 2: 10:11:06 executing program 0: 10:11:06 executing program 5: 10:11:06 executing program 1: 10:11:06 executing program 3: 10:11:07 executing program 2: 10:11:07 executing program 0: 10:11:07 executing program 4: 10:11:07 executing program 5: 10:11:07 executing program 1: 10:11:07 executing program 3: 10:11:07 executing program 2: 10:11:07 executing program 4: 10:11:07 executing program 0: 10:11:07 executing program 3: 10:11:07 executing program 4: 10:11:07 executing program 5: 10:11:07 executing program 1: 10:11:07 executing program 2: 10:11:07 executing program 0: 10:11:08 executing program 4: 10:11:08 executing program 5: 10:11:08 executing program 1: 10:11:08 executing program 3: 10:11:08 executing program 2: 10:11:08 executing program 0: 10:11:08 executing program 5: 10:11:08 executing program 1: 10:11:08 executing program 4: 10:11:08 executing program 2: 10:11:08 executing program 3: 10:11:08 executing program 0: 10:11:08 executing program 1: 10:11:09 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) close(r0) 10:11:09 executing program 2: 10:11:09 executing program 4: 10:11:09 executing program 3: 10:11:09 executing program 0: 10:11:09 executing program 1: 10:11:09 executing program 2: 10:11:09 executing program 4: 10:11:09 executing program 3: 10:11:09 executing program 5: 10:11:09 executing program 0: 10:11:09 executing program 1: 10:11:10 executing program 2: 10:11:10 executing program 4: 10:11:10 executing program 3: 10:11:10 executing program 5: 10:11:10 executing program 0: 10:11:10 executing program 1: 10:11:10 executing program 4: 10:11:10 executing program 2: 10:11:10 executing program 5: 10:11:10 executing program 3: 10:11:10 executing program 0: 10:11:10 executing program 4: 10:11:10 executing program 1: 10:11:10 executing program 2: 10:11:11 executing program 3: 10:11:11 executing program 5: 10:11:11 executing program 0: 10:11:11 executing program 4: 10:11:11 executing program 5: 10:11:11 executing program 2: 10:11:11 executing program 3: 10:11:11 executing program 1: 10:11:11 executing program 0: 10:11:11 executing program 4: 10:11:11 executing program 1: 10:11:11 executing program 5: 10:11:11 executing program 3: 10:11:12 executing program 2: 10:11:12 executing program 0: 10:11:12 executing program 1: 10:11:12 executing program 5: 10:11:12 executing program 4: 10:11:12 executing program 3: 10:11:12 executing program 0: 10:11:12 executing program 2: 10:11:12 executing program 1: 10:11:12 executing program 5: 10:11:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75255600bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x8000a0, 0xe, 0x85, &(0x7f0000000300)="00000074000000000000000039e4", &(0x7f0000000340)=""/133}, 0x28) 10:11:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000280)=@rc, 0x35, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:11:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x4030ae7b, 0x0) 10:11:13 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f000000b700)=[{{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001dc0)=[{0x10, 0x10d, 0xa4f1}], 0x10}}], 0x1, 0x10) 10:11:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 10:11:13 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'bridge0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x1b0) 10:11:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f000005e000/0x2000)=nil, 0x2000, 0x0, 0x51, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x155, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0}, &(0x7f0000001400)=0xc) fstat(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002e40)={0x0}, &(0x7f0000002e80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002ec0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}}}, &(0x7f0000002fc0)=0xe8) r8 = getgid() sendmsg$netlink(r0, &(0x7f00000030c0)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8040800}, 0xc, &(0x7f0000002e00)=[{&(0x7f00000000c0)={0x12ec, 0x3f, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x2a, @ipv4=@rand_addr=0xa3}, @generic="6ac1a4c404204f136e71e38bc6e98b69c2f9a8dd4fbc23224a2aec410f1b5a67cc38165cdca470a65a17a5117a5985e00d49a8dcb201806a44e34f01568f6c326a6e28af8b2f219b231f3ca2b9bd9ee237fe069a19f2eb311734e1677cd6898ceb01dbf2860a6bf14c3c4ed09e514354939f7113f2e3f75ec9953643e184224535e2a11132d711235774f1266741601c99188c045e64d10856fe5b781699014ba1c7ee1992f28af8b654075a8e778648145ba6a707a24ce130274ffebae9aa1edfad5c54bd62a2aee06764d852477f5ff7ad725d3566f2c44e8c1248b795561889e54bea6a035ed4a71927f96b93c224fcf08aa4a35d46c54fc34d4904f38cde2f2376c7cbaeb6a8ba938edfd5fd35b6abd26be163cc1e7bf8bbcae1e4ca73f4d262252708096b1e1d7b127a2901b6fcdd5cf202468d7b9fb41aeda59d1295a7592bee53bfaad0ae05bfca48379bfc5ff1d51ae49a6f41ab681a610518c53acaede22ddcefae33b03aea6c526501dec3294c7ca08b92a5dd76afb5ec4495e22ea7d7407850708cc41aeef44ae454802e4e6d61fe1451d51a5cfb3578c5a0d920ba604e60c43e47775d2f98d4e18eb58aaceb813227b8bba2618f6f0f7bcdb797f5d6e653302aebb0aa90e229de9495a922cd5535bfeaa0f5469bbc9dd530ff7808ee783342d6dce9c2040a4ae196ffd072a1b540d3ad6b19bf96d1eba4773ec1f3fc94e0b333fa4772f2a75fd30f711594c63895acead43101abc19fcdad5b05f0fc562d95b260f3107711d70b0a8c58f86aefcdb53bbd157cfad2c2689cc2b321ed25108f78fb7fc860559f742a4f08fa2c80165deeeea560a7855f7c4bad6620959a1f05e982af1d4ca527eea42efcc396c07c9812d17dda272b7c6dc068abfc40a85945fb3900f51cc03046ca75f07750b4f37ad1dbd1a86af04ad95186ea9d761ded2d36ecf83a999eee366383101fc1fb6853af6f5eab3e9614aa6a1aa08c88de073c92a908dfb05f0d61be224b3667ead9372888b446e1d3c3ad01dacb8cc3de880cd00df86a37c224de354d999195f3d69713de32e81e7c21e3e3e1a09760bb48335da6216ec6f15f632bbf521d99a49b8300152a6ec2f161497d2e51c2f01bf6f84f99b598668314e64d0c52b2635a8b938877ae8022c0c96c6123163d435459d11310642fa3f33e552bc1bea3ac91c96dd53d4b4215a9599300087f2b71f44bc41396a938ee875a5cb10258398b76fdeb23647a6be72d89f16298015fe9bdc8850330eff8eda2547e24bd4607ef42eee6c19bee1ae2c15d42dc71cf1b66a4749d4a80e09073b228e6d5b178c0b85bb75c6ee154139b9eb7b3712d70f34c9dea178660aa491891fc15892e44ec0828699ae17020b7959da4a243ecc92377e03a4ac4eda3a33b2bb8172e302838eec1f3d9e2ea6af39faf87c4b85508f9dff6b714df8a3b6280f25daf996e8e8c1892e200ef0007b1ddd66c2d1bc3b52904edd4c56eb1c0bb51ebd0f6df27501e1726dae09844df5055045844e5c615412a969c6170723ab28a6da15f6c3295b7f38428073c2dd0fa018f98b593ecb4bb388d44fd671db03de9757d6905159c456406a03699459854fa8d5508b8b7f3558fb80caf4b1674f27cbe39947eba906b4fb672044219ace9cbaf0bf140d8df332dffd167e240644e7082368792e56cfc9b7c01628cf0e08815d22f74933cd10d5ad760a0de1dfea0b8c28d5be16ef107b3c836fde8033bd27595febc7e342a8495626e65d4e1653c77c5e36f1833641ad76b5a0c2696950d9485040a9e18cd9f55dbef29c5da2403928ee5eb47c975c9f4484a67843e367af8959dc8ca39fa166a20ce75aaf7dfb711eb382b4f66fa1c13dd25fd4e23f7a18f1499d1d0aab414fd9f32aaee91af161379e38e927f57ab35012db040a35a582fac5185410dc9f5723bb786ae5e9c96eb61f3c475e60a4e5fd3104413928c722f4abffb9757d88d605bfef0cf4fddfed80e74a2150b6956af1b4c9427f99697b2452b9bb894f8d4bfa8888615a74950dd090436b3ff7b8bc4f76ca7a42d8379f8ca1637901111ddf0e74115f83529ce10702fe076eb765d8457c384045988e6ce42b4eff4e3cddac47c4e392dd8fc2874ca13237ac43c19c784482f01c2fc48fed507c0e0e74fcabe4b08a48c062608c0bc6cdabb16d886fa0c375d0b1aedc0a249415719b8bcc167df5fd0c72e874e0bf5aa27f60f26033fd4bab0e5caaf7454b58e7b17198972fc4e28e9eaf2c732cc482cc701f9e2a2d6f179159559844fc69a3e9be49a7837a2ec150d3a7c05da4b8c5ceaf3d099e288543ca686b50f796d588e0e872a100e3b34997ff5d34ddd5eff419e23e776efb33b3c9734ae9f3302315359682b4d94ed4b7dbc0661ac210454a598cd4d4ceb58e7b0c4b3e5a14ae075be982367bbb41909f5d3c5556b6def76331b4c2c5676e4911ddb5a908a235c6578e7986940061690070f9b794c05a507d733a9844e1c9136809053dac1c7d87fbb53fb59f76a1999eb2a7065116cca345d99a64de4eb47bfae95956c8f3cdaef30ff178d23335d5bac167b0abba6822fa523c50bbf708a9ddc48d40301fce40ab2285b2194bc65ae398e924b07273a3825a6af7c3460dd565a4e7f80005bb8d153cae0cf98387ec51b3fefba5d17ddac86866559646d7fec54994b71f6fe6fe9552624eee6030256c9e69e666d2065a583de74824623eb6032e8a3ed75ddf2f8d11149d7fb738fe6e62a28e4c5b3ade5bfe5d8c0d682951bfbbd6061badbcd55dae6a59743be27106e5e234f7c8dabd339347f2db51a882a4e086551c89ab7ae71ca7324bab7d1e281ed2a388f6231d0088df201c0ef2162252e093210ff4bd0a28fc7a1590ec519bd95389d2b9ed0ddb66e5377e5bc6185419058f3df0937e06bedaab72ad5d289d4a7cbbe3b9fac09d0a7eb8deba88a21e0b17004f089e8371f990692e584ecd8d60a20d02b75c6f72d2ced983a5b40aedd3a508e9406fc42f9058eff47f2ace6fbe755a688c11824ab0fe0b9559344b622265add7aff611e039f3f221acb4ddebd1cc8d2c002f31a104b364af126d7bd07afb14ddbc2d6f3219af8fdf44372144a1cdb6a1f41251ec0d20b2c7ad26508fb7b83ad338c4dec81a38051f7796fab283639653b05682a3fcdb63f7acc1363b7f41433c9e9e53ae1c15e8f3bf14f22a944dcb32f279af94d95b2e9146ef20d7ab69cca6b9293852a70b83f96ad3b9f1f2c8fb5541453f06870dd138db1f575de717ad9e70c148f76d9d60e2bfec6575806e5c360ce7f6afcb81a012d0e66f0642f3755e2970525f169112b93013892307b2abc0a9591bf6ac81e54ae77bb6c692ae4e19704f4824b2986e50354f52bd94ea062fb5f3b5adc9f5272ea8eb25a7b9053e5e263b14824c29c04ecb3eef1cc9e311584fd2f0642c8aaff92a5682926911fc9cfa40da6436c6cca0757d4114b99fbb87415fbfc99d0172c5ed199cc62ca9ddbc6d81278e8a0a2a364f8978048eb35e0c51039d472e6fce5bf7666c34573a83064abefbd5063bc9d427c22dd4a555a82542e8e68185643a5b32752810a4c315190211f6b0a976cae5da455d838a29a617d1878526a03318fc22bc8375c7f8d4a90226a2dd60e0720d2b4c163d402c0f66793df4dc3f5078c29b328145fbe58ae5e187cf1346fddd5b9fff1e8de8e67c7b814680db3e36bd11bb5645ec039ae3bbb5566344f326a776273917802a1c7108067e1abf19ea06ba164d936bb31427f6b3240a74787567d47bd188601464f8f858f6d81ef0f5087ac77d4cfa23da3229f6c344e9f495b90837f7e3f3347624b3f969b3bd33005a7254705b24c9c288fbf7157f40128d05e1e0ab895b3b870259cdefdbe87c95af837a8aebaa6a2c9b0e0262f3c73b20817b00c5523df0e46683358c5000886aeadc31a3a2a8dfba236442b21af03115438e9253b9c9ee5b75193b640df3e16c3e780c2ad5154bc50ceeeca04f9f6eb54280931d6f06e96e5c950f84caafb8c4d81ece6187858e8358ae04ccdc10f2284437e78d5d2593c7188d5f811ca86e759f243ac0d6b9f7a58d35a4b99927e6c23017f5754838b50ee024f0f45cfa42c46f72958e970e97c7baf1c95f75784c7adcc6a68bb323da1f5a34deb9d3c5f6288848caead7cb5399c31268ab55eeb003be389e509054bcdfaadb8302c9f17bd9d09083eebe76a1829f94f3418e764591508fb1a72de01ecfe24effacb3394549bbaedd0653325079d53894d27228024cd46ab259a7b58d8b74dad0f2c72051eb19bbc19367cb5fed8160c40fe086d7550b605982c86c388b4174b4027bb801a3db20a82f19e673bc17e2aa52f2980e0ba27df1742f53c8a9d15de279f77e0f3d0149e6ff41c6416c749743fb69c0eb82a90fe0fc362ceb36b8ab96eb5e61853c8376ad0f9e01f8a8d02aaf5641c61f395b6969885450e3adcd6ecd29e0495affbe52d488fb103189a7f25ba3d1cdeab4c18aceabcbd72aa73e242fce3ba4d8c54d67f937d1bf0954f53bccadcd2ac3d3742837d978c0b1d0154468f97684256d25799ed43c93ff908b6021e657bd18134007d99b6ee893128a96131df0a8505c5b76dd4512e0f436c6a562fa113baebd2e37705576679759622e3f6cf1731d0ac79be80f53db8fcfa57bae25ecbbb60af341a3b5969c3174917aca87cd139721c76fd0a4b7823eb187389a33529e350795bbdc218a556d7615d5d2763b6f2dad8f1d08dd1e997063a7d3b0e64132ae80a8020f493d42aaa7efaa23a40be23bc66eeab393a505e71e9b0b5db1eb8f76c8bb15da66d97c6d7dc20b8ead4a23325da157844e9d9025f08caa1f1cc94efead705160438fd47e8e2ea78716439a82b2d39fec56315a6a834532f10bdf2ddd1cfd24e5565d657621d254bce9563b905307bee91e9370664f05b9fdf2115d4655752afed71ce1a2dfc58c647ee09a718795d5966099f6a05e1453e588864d133d12f2029068ecf05e7ba55f46c017643705e9125820ca015a6bdac9855ba186db4355ec786400ab3a9b288e6817589596ab7730623c381ec11994bc590e02b4e7b179170e94c65220f076d54d7c97e7e0b662c23f53dadf42beaab8449e4dbc02184166b092ac14f53e88d67806931db83c79a567049d302c18b3ba042ad3374736b86d7bffdd9128934f0dc979fd3351f95344e45d4d2875506c6e8135583ed4db92dba3926639f74e7f14069ad87bffe76740b209d130f32562a2e0e72f1d3bc2c49c22832c81132eec2e4f7d645a5093aa347358561e564c71ab0ebf7564ebbc71374d7f871e23adc2e3ee3b6c5d04b849a3e9f74e7b5ad21120363ccb4f430264816247c4adee823412113d5f0260950c39d45f7231f58a38432c6183ead86f3dc29b18d2aa169ed4c44019710eac54e23a291c5391369abd1ed6253f6bd5ae75129f4acf5aa9673ca2bcf15e6f006e9ece29ff990d18c66360f6891b55062826c83896fb243170ee17a9b7bb5883adf050ca8c126bba70ecaeb333bcae1109e02f4c033601c196d34b8727c2050eb7075d250e2e9f28612d825057bf04c91dd574cf49bac33e4b22d2a9f062f5cde1d47ffa4d12c9e1db0f55653939692401f6a07e04a489209d4906aec312f58c16765831386a3b2c2e7cae19def43d05766e010dffb5c3d051db2ef521e1c3064340bfd4dd95779addbcdfbd2d2a19dd56288d33be75dc99f2592763d0cf8e22e2febac2ccb247e311734ff14f0a7c0f857a6", @typed={0x8, 0x2a, @u32=0x1}, @typed={0xd0, 0x6b, @binary="6e5ad6fd683c743c9470abf3366b2ff3bff6096b701bb34e5bc95fb2d7efd4cb528fa149b7202612f3706ffe778be25aa210ded525aef4a7ee902a855901c3a73634b3e86abe99a68b4cb374d06d2ff44c60bc94349883a425b8421f72b66532c4999dca9c687ce15e1fb604f9f9f467afef83fafbb3bd004d8aa190d71e9037770f7ac651e1f589502a65218086ab1876c0846f195ada76da50b34c091d4575d31820a6a2c3483e2481ec992ce7b2c36180702463668bb526e5b182b143cc05c544d60b69ea92ef4523b179"}, @generic="1b37a85a929f134a6ea9704ff69020ca53a1e82fe0b40e77f213dff4dd566df4fc2bd55995b1fb9b9fdbaed582be0960545c11ecceda353ce85bbdd19a2cf72b47b0241fa648ecd7b2db095860a0577e33578cabfe9c9664ca73d7133d9afa31f6de2880c75208e3c457ea948e561a101421bb4e8c5b198a1d587cbacbef464e08a8cd459eaeb8e13b375186c6de7c3e1c569f577aee1ceaad98d2adecb5", @typed={0x8, 0x8, @fd=r0}, @generic="af8890603003cf41a4d45c7d20418abc3de5a7e5ff0ad3f2c4020030e60131125121c88e50964cb28a6680b85ccf370eb1d0667752fde84f39709112391a8f066ade203fbfd8c9dc71bdb540bdd7aac191e5676471f6a4", @nested={0x74, 0x61, [@generic, @generic="ca3eedd2bf7e524ef3b8e10065b13440d31787a11b74fb059a82a69f3d37d5991b182aec18dcac7fd70a1288dcbb4fa77a2d1d320e41393635154b4708c5261a83c5bd7bab75aaeec2662100c5eaf47164848e2ccc8111f63efb926fb22f300bcfd041c0aaae0c37f444d6d4fb8c"]}, @typed={0xc, 0x6c, @u64=0x1}, @nested={0x7c, 0x5, [@generic="ace344bc320d6ffe13600bc796a26b4577f78484dc8ab1d320a32336adf89747d0ef56271373bbd313ae16ca8250250fd2b44196e66b8c353f87db2fc099d7724de487218ef7839df70846bfff045c8287792e2486cbaa1696851ad5d90ef49839450b64d814a66ec84dd66c7073410a624b526903"]}]}, 0x12ec}, {&(0x7f0000001440)={0x1f4, 0x42, 0x0, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x5b, @ipv4=@multicast2}, @typed={0xc, 0x65, @u64=0x6}, @typed={0x14, 0x2c, @ipv6=@mcast1}, @generic="7d859708c5fd865de8aee1ace623fcce751565d0c6191e1a3db8f641ca198bdda044399ca4be95f0eb1c52ff63ae5b066565813c5c4a89ba0d7603df3450e83b966eb4f3f2b9fa0e50aa9bcdf440c3e08224139ab2d5d07f0443e414b140c78abf5ea75dfb6dde1c8a351f7f0d8190fca16a763f91bcef32657eac412487dc8f623b72e30d6d7e8b8c8031dd34733503842589e7", @nested={0x128, 0x8f, [@typed={0x8, 0x37, @uid=r3}, @typed={0xc8, 0x21, @binary="081876af6d2132ea91b4ccc79f30f94e03026fdbca2292f6fadf42950e19ff5f27d9e17f3f5aba10a47c6d6754d1a6395143c3d486d20bcc8403ea9fe7d055ee4d2acb75c7c7f6bc4e5078c32416c121c74b864d08b06e1e3a57909dad38455f03db92c70d62e8254f186712d31eb85cf3ff595ef528e654109fc4307392bb90373947761f8f52991809c960c51fffdf9b84f76369b3a1c2342cf02f239bf2a3921b5b47a640a0be0f5cc492e52644aaffa6b22b0f4d8a73df0c631d181da4d1af3d8d5f"}, @generic="20ed9df3e4773b52a8ce4f327c6920f042815dec8efa624a2af0f0d6b3ce3201acdc1881f20790de720dcc", @typed={0x14, 0x22, @ipv6=@local}, @typed={0xc, 0x21, @u64=0x8001}, @typed={0x8, 0x69, @fd=r1}]}]}, 0x1f4}, {&(0x7f00000016c0)={0xd4, 0x2a, 0xc08, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x67, @uid=r4}, @generic="f3194b333869fd59b2c3168d1ab9bdb051a5dfcec44d2fbc1389d47e0f88f4d090860165aa955ba8ba6952951dfe37784cbad8ae73cfafa91cb66522200d92d08f51b69a20ca671a9bfaba817553c11c1875e800bc66c0bb89d9de0548d8c68fead05d0c1066d82e77014bdc680ec38b83527048e92f3275fc4e396a1d087f0a43f2c44e1f876a7758005a7a1a87f8b68bc8eb1d13e2fb7b6c3c39952f3e6ab4d159d8e2ccb482ad978636eca48fb3d557e798ef741545254ab321"]}, 0xd4}, {&(0x7f0000001880)={0x1544, 0x29, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="134cd8103cc61c41e18500dc3000d281cd760bbc01206efbdb4270607b384c7a825ecd8f59f05cdbb6d888340c25fc4710b2820b6b603a7e1dc9", @typed={0x8, 0x44, @fd=r0}, @nested={0x1368, 0x30, [@typed={0x14, 0x1f, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @generic="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", @typed={0x8, 0x51, @ipv4=@local}, @generic="88926ab1d71c433c2f37fe3c1510c9f3513024a6292c769089501655c8cda3f44d2b365fedf0ee48efeaa44eb3d1da2db521ac591b44df575cdddb8c0839a993df3e036fd35ad7c227ef264da3ecac0a9201038c24d11838fda2e14f522b2e939f96ad1ad2236502f538f3a00398c589952003ff5244965985aae0790b88488b5914895a2fb9b871af1e5295c91ef87ccdeece48f2d16f6ff0216c16f149952099f9bb94d6e0", @generic="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", @generic="d46951a9a05a5bc8b3676516f0578127f0fd6f94a2d30d930be5c55b53bb1dfc92208848d2acc962ef21f224975432384a71a69b028ad8a0bcc3400c353f6950046d728fc9d7e20409d242726d9b65c8832e4a5b490d3a200e64ba29f3bf506a142d159bf4eddd54296574780d814e7eabe6515785baaaaaf7f8f509686e958d23ad761b", @generic="aeaab5376d6f2fbcf4646cb620a9a62684f2c8b723185151c97ca919e8311e1c6b9c50f0703f2ac25e3c030b0448a3448ef61bdc8b30a293e67d57c4bd8279d4731af135809dce82abb8b47aa8b6363c7a9c321cd1ad6c20b371e92e17129ef4afeb9622c7799daa9d1581f64e416b4c3c33df3e58dcd7618cab090c2e2eb02cf2f131746746729464b303656acb2d776eb3f3fe185aff74aed5e044680c667c090d1c49b99dcc06e43f3f37653156a8f23d7dd78962a68fb728cccc48", @generic="1014647704b4be87c58676dc0b45142016fcae9856628e7831c5c312e720ef0219ace996d96b3afe1668ff5e994ef572f0641add9e8f696305aaad448fe841369cdb9c33f7b8c08968883b66b8bf60ffed275f079c7af9c21c4e67132fcdfe49d546d4877f0731"]}, @generic="6320fcd5e891995e05d0025ecaa9f87b91cc6d8b1c02ec84fd68a59ac38377f104789d94784a1c39657609e31d6d3dd41ac0f0f2dc95a19e972dcd69fc3007d3bc11b6345f14e054db0e7184a81ae0459d779cc17f6bdd9c37726dca73aa50e08897f164fb41c128c6813fd47f06bfab475d7c8dff26b5ca00baec98563f6f0b5d72af5b9fa4fad5e78d", @generic="ce47b7e03593356837d56db04ac3f5689b8cb3efafe4de4d0784467d00ff4011435c2fd71f7c65a0dcd37e61c589ade3b5682f3458b4ba2d830eff7245e99588369037f147304618586112573f74f2c1a1ae775148471ac1e2f3601ba8693722118ed6fbcb2f8fa26508bf6ad27538e0c2464a98c25c3d071f573a01fe7a3e579c01649ffe14e9b33cbbffd37ddd84ac4855decde8512836c7f9e57906d0132f50a6246820fa155126f4d170d3e638a011d2a98a3a69961861886a56ba461fbac5adb0eca443d450cab131444c4d9b460756e350a2c03f060d61f979c2a20f5e5a27a8a545196a396f5cb35d461f0d572bbe7325f013", @typed={0x8, 0x85, @uid=r5}]}, 0x1544}], 0x4, &(0x7f0000003000)=[@rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r2]}], 0x90, 0x20000801}, 0x40000) [ 324.318918] FAULT_INJECTION: forcing a failure. [ 324.318918] name failslab, interval 1, probability 0, space 0, times 1 [ 324.330635] CPU: 1 PID: 9040 Comm: syz-executor3 Not tainted 4.19.0+ #80 [ 324.337545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.345018] Call Trace: [ 324.345018] ================================================================== [ 324.345018] BUG: KMSAN: uninit-value in get_stack_info+0x720/0x9d0 [ 324.345018] CPU: 1 PID: 9040 Comm: syz-executor3 Not tainted 4.19.0+ #80 [ 324.366643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.378860] Call Trace: [ 324.378860] dump_stack+0x419/0x480 [ 324.378860] ? get_stack_info+0x720/0x9d0 [ 324.378860] kmsan_report+0x19f/0x300 [ 324.378860] __msan_warning+0x76/0xd0 [ 324.378860] get_stack_info+0x720/0x9d0 [ 324.378860] __unwind_start+0x7d/0xe0 [ 324.378860] show_trace_log_lvl+0x20e/0x11e0 [ 324.378860] show_stack+0x12e/0x170 [ 324.378860] dump_stack+0x32d/0x480 [ 324.378860] should_fail+0x11e5/0x13c0 [ 324.378860] __should_failslab+0x278/0x2a0 [ 324.378860] should_failslab+0x29/0x70 [ 324.378860] __kmalloc_node+0x257/0x1520 [ 324.378860] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 324.378860] ? __get_vm_area_node+0x28c/0x820 [ 324.378860] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 324.378860] __get_vm_area_node+0x28c/0x820 [ 324.451807] __vmalloc_node_range+0x290/0x12a0 [ 324.451807] ? do_replace+0x388/0x860 [ 324.451807] ? kmsan_set_origin+0x83/0x130 [ 324.451807] vmalloc+0xd8/0xf0 [ 324.451807] ? do_replace+0x388/0x860 [ 324.451807] do_replace+0x388/0x860 [ 324.451807] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 324.451807] ? security_capable+0x1ca/0x200 [ 324.451807] do_ebt_set_ctl+0x27a/0x430 [ 324.451807] ? INIT_S64+0xd/0x30 [ 324.451807] ? mutex_unlock+0x21c/0x300 [ 324.451807] ? ebt_cleanup_entry+0xb50/0xb50 [ 324.451807] ? ebt_cleanup_entry+0xb50/0xb50 [ 324.451807] nf_setsockopt+0x47c/0x4e0 [ 324.451807] ip_setsockopt+0x24b/0x2b0 [ 324.451807] ? ipv4_pktinfo_prepare+0x6a0/0x6a0 [ 324.451807] tcp_setsockopt+0x1c0/0x1f0 [ 324.521775] ? tcp_disconnect+0x1a00/0x1a00 [ 324.521775] sock_common_setsockopt+0x13b/0x170 [ 324.521775] ? sock_common_recvmsg+0x290/0x290 [ 324.521775] __sys_setsockopt+0x493/0x540 [ 324.521775] __se_sys_setsockopt+0xdd/0x100 [ 324.521775] __x64_sys_setsockopt+0x62/0x80 [ 324.521775] do_syscall_64+0xcf/0x110 [ 324.521775] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 324.521775] RIP: 0033:0x457569 [ 324.521775] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.521775] RSP: 002b:00007fde2952cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.521775] RAX: ffffffffffffffda RBX: 00007fde2952cc90 RCX: 0000000000457569 [ 324.594250] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 324.594250] RBP: 000000000072bf00 R08: 00000000000001b0 R09: 0000000000000000 [ 324.594250] R10: 0000000020000080 R11: 0000000000000246 R12: 00007fde2952d6d4 [ 324.594250] R13: 00000000004c3c88 R14: 00000000004d5f80 R15: 0000000000000004 [ 324.594250] [ 324.594250] Local variable description: ----state@show_trace_log_lvl [ 324.594250] Variable was created at: [ 324.594250] show_trace_log_lvl+0xb3/0x11e0 [ 324.594250] show_stack+0x12e/0x170 [ 324.594250] ================================================================== [ 324.594250] Disabling lock debugging due to kernel taint [ 324.594250] Kernel panic - not syncing: panic_on_warn set ... [ 324.594250] [ 324.594250] CPU: 1 PID: 9040 Comm: syz-executor3 Tainted: G B 4.19.0+ #80 [ 324.594250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.594250] Call Trace: [ 324.594250] dump_stack+0x419/0x480 [ 324.594250] panic+0x57e/0xb28 [ 324.594250] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 324.594250] kmsan_report+0x300/0x300 [ 324.594250] __msan_warning+0x76/0xd0 [ 324.594250] get_stack_info+0x720/0x9d0 [ 324.594250] __unwind_start+0x7d/0xe0 [ 324.594250] show_trace_log_lvl+0x20e/0x11e0 [ 324.594250] show_stack+0x12e/0x170 [ 324.721845] dump_stack+0x32d/0x480 [ 324.723152] should_fail+0x11e5/0x13c0 [ 324.723152] __should_failslab+0x278/0x2a0 [ 324.723152] should_failslab+0x29/0x70 [ 324.723152] __kmalloc_node+0x257/0x1520 [ 324.723152] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 324.723152] ? __get_vm_area_node+0x28c/0x820 [ 324.723152] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 324.755384] __get_vm_area_node+0x28c/0x820 [ 324.755384] __vmalloc_node_range+0x290/0x12a0 [ 324.755384] ? do_replace+0x388/0x860 [ 324.755384] ? kmsan_set_origin+0x83/0x130 [ 324.755384] vmalloc+0xd8/0xf0 [ 324.776644] ? do_replace+0x388/0x860 [ 324.776644] do_replace+0x388/0x860 [ 324.776644] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 324.776644] ? security_capable+0x1ca/0x200 [ 324.791798] do_ebt_set_ctl+0x27a/0x430 [ 324.796543] ? INIT_S64+0xd/0x30 [ 324.796543] ? mutex_unlock+0x21c/0x300 [ 324.796543] ? ebt_cleanup_entry+0xb50/0xb50 [ 324.796543] ? ebt_cleanup_entry+0xb50/0xb50 [ 324.796543] nf_setsockopt+0x47c/0x4e0 10:11:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet(0x10, 0x3, 0x9) setsockopt(r0, 0xffffffff, 0x3, &(0x7f0000000080)="f9443b50ca420b454c8a044b398fb4c6f02b59a00301748b7655ad608167b5b4f3a2c9f86a615a71acc1537b6e320edf7ea89069eda078878fae1fe4acfdbf2c172ec8806fd522d4b1e6b929722e6a64e4ba9d112c08997997dc2fabd6ed7a3f98d622ff3e95e28ebcd8da3937bb7c729bb406fac2017643871c1ee19774be1ca81d262b38aa8922f2a8eda2cc16cc43150a0cd2bd7d38f4c9203ab7fdefd2b377e8c330dddd8fe80967385d838c20a88db2c74c11fe6d2d33caf0bb55beeb11ea5a99aa2feaa46e9f", 0xc9) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 10:11:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001300add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa800000265789c734a000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0xfd77}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000180)=0x122) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x3, 0x8, 0x0, 0x8, 0x1f, 0x200, 0x7fff, 0x1e2000000000, 0xfffffffffffffff8, 0x7, 0x4, 0x2}) 10:11:13 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4000, 0x0) mq_timedsend(r2, &(0x7f0000000100)="c312d84791cde3aee7803cc8b4346ce96cd600ac465f609079bffed409adc3a9d66e268b1017b621ba95a1c8c9b1e0af4b6d17a209b866bcb5fa8c92650096d1200243dc58737389d931136e755ed29c62cd8e161d672c9fb1aa25ee5c3a0692fe2f139788af5a", 0x67, 0xb5, &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0x0, 0x1}, 0x18) 10:11:13 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x2, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@getsadinfo={0x1c, 0x23, 0x8, 0x70bd2a, 0x25dfdbfd, 0x0, [@extra_flags={0x8, 0x18, 0x9}]}, 0x1c}}, 0x20040040) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x100, 0xbc) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={r0}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x80, 0x6, 0x0, 0x2, 0x80}) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x9) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f00000002c0)) [ 324.796543] ip_setsockopt+0x24b/0x2b0 [ 324.821262] ? ipv4_pktinfo_prepare+0x6a0/0x6a0 [ 324.821262] tcp_setsockopt+0x1c0/0x1f0 [ 324.821262] ? tcp_disconnect+0x1a00/0x1a00 [ 324.821262] sock_common_setsockopt+0x13b/0x170 [ 324.821262] ? sock_common_recvmsg+0x290/0x290 [ 324.821262] __sys_setsockopt+0x493/0x540 [ 324.821262] __se_sys_setsockopt+0xdd/0x100 [ 324.821262] __x64_sys_setsockopt+0x62/0x80 [ 324.821262] do_syscall_64+0xcf/0x110 [ 324.861992] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 324.861992] RIP: 0033:0x457569 [ 324.869705] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.869705] RSP: 002b:00007fde2952cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.869705] RAX: ffffffffffffffda RBX: 00007fde2952cc90 RCX: 0000000000457569 [ 324.869705] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 324.869705] RBP: 000000000072bf00 R08: 00000000000001b0 R09: 0000000000000000 [ 324.869705] R10: 0000000020000080 R11: 0000000000000246 R12: 00007fde2952d6d4 [ 324.869705] R13: 00000000004c3c88 R14: 00000000004d5f80 R15: 0000000000000004 [ 324.931773] Kernel Offset: disabled [ 324.931773] Rebooting in 86400 seconds..