[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.769619] audit: type=1800 audit(1542918536.815:25): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.788817] audit: type=1800 audit(1542918536.835:26): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.808227] audit: type=1800 audit(1542918536.845:27): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. 2018/11/22 20:29:11 fuzzer started 2018/11/22 20:29:16 dialing manager at 10.128.0.26:36751 2018/11/22 20:29:17 syscalls: 1 2018/11/22 20:29:17 code coverage: enabled 2018/11/22 20:29:17 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/22 20:29:17 setuid sandbox: enabled 2018/11/22 20:29:17 namespace sandbox: enabled 2018/11/22 20:29:17 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/22 20:29:17 fault injection: enabled 2018/11/22 20:29:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/22 20:29:17 net packet injection: enabled 2018/11/22 20:29:17 net device setup: enabled 20:30:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000031000)) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) syzkaller login: [ 183.477177] IPVS: ftp: loaded support on port[0] = 21 [ 185.830520] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.837157] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.846052] device bridge_slave_0 entered promiscuous mode [ 186.003132] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.009625] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.018343] device bridge_slave_1 entered promiscuous mode [ 186.156297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.295613] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.730377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.876554] bond0: Enslaving bond_slave_1 as an active interface with an up link 20:31:01 executing program 1: add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000ac0)="10323000038741aa81c32cbfd79af8b0063e529c15ba1e620a1c21f0f95a9f00a713d13d717c59306b74df47c2981ca1521ea8ca", 0x34, 0xfffffffffffffffc) [ 187.190625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.197775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.839507] IPVS: ftp: loaded support on port[0] = 21 [ 187.876915] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.885214] team0: Port device team_slave_0 added [ 188.018940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.027250] team0: Port device team_slave_1 added [ 188.196006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.445783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.453011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.461953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.726256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.734139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.743898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.026222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.034020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.043040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.451652] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.458411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.465671] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.472325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.481536] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.650647] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.657268] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.666196] device bridge_slave_0 entered promiscuous mode [ 191.961287] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.967863] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.976716] device bridge_slave_1 entered promiscuous mode [ 192.118026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 192.250900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 192.415827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:31:06 executing program 2: r0 = socket(0x1, 0x800000000002, 0x0) shutdown(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x1}) [ 193.019700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.333408] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.631608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 193.639005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.839943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 193.848888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.990289] IPVS: ftp: loaded support on port[0] = 21 [ 194.572447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.580661] team0: Port device team_slave_0 added [ 194.842441] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.850559] team0: Port device team_slave_1 added [ 195.159125] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.166419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.175493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.475482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.482722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.491869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.861143] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.868951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.878125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.122557] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.130391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.139490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.604678] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.611239] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.620418] device bridge_slave_0 entered promiscuous mode [ 198.898421] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.905198] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.913910] device bridge_slave_1 entered promiscuous mode [ 199.145156] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.151686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.158746] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.165326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.174464] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.183949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.292431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.539428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.358290] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.612217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.791366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.798809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.027945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.035219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:31:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) [ 201.992224] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.000535] team0: Port device team_slave_0 added [ 202.379989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.388328] team0: Port device team_slave_1 added [ 202.768470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.775762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.784978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.855368] IPVS: ftp: loaded support on port[0] = 21 [ 203.109477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.116818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.126011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.346982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.481323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.489437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.498669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.866991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.874838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.884179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.712983] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.979178] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 205.985798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.993991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.393872] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.873703] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.880238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.887439] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.894043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.903342] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.012898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.401510] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.408203] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.417362] device bridge_slave_0 entered promiscuous mode [ 208.761249] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.768200] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.777068] device bridge_slave_1 entered promiscuous mode [ 209.195323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 209.527596] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.628628] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.940919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.341696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.349145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.699354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.706554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:31:26 executing program 4: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x13000002) [ 212.786473] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.794806] team0: Port device team_slave_0 added [ 213.005646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.141474] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.150005] team0: Port device team_slave_1 added [ 213.556593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.564014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.573028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.961889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.968996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.978192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.180313] IPVS: ftp: loaded support on port[0] = 21 [ 214.394284] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.402197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.411146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.512585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 214.798475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.806228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.815930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.610448] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 215.664111] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 215.726205] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) 20:31:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000031000)) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 216.123968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 216.130368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.138510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:31:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000031000)) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 20:31:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000031000)) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 20:31:31 executing program 0: mount$fuse(0xf6ffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 20:31:31 executing program 0: mount$fuse(0xf6ffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 217.909014] 8021q: adding VLAN 0 to HW filter on device team0 20:31:32 executing program 0: mount$fuse(0xf6ffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 20:31:32 executing program 0: mount$fuse(0xf6ffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 20:31:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) get_thread_area(&(0x7f0000000080)={0x5, 0x0, 0xd8c1c70d94cc5ae0, 0xfffffffffffffffa, 0x4, 0x800, 0x5, 0x7, 0x100000000, 0xfffffffffffffffe}) [ 219.046354] netlink: 21 bytes leftover after parsing attributes in process `syz-executor0'. [ 219.105652] netlink: 21 bytes leftover after parsing attributes in process `syz-executor0'. [ 219.677920] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.684605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.691622] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.698446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.707498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 220.092956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.120735] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.127333] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.136080] device bridge_slave_0 entered promiscuous mode [ 221.475778] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.482504] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.491003] device bridge_slave_1 entered promiscuous mode [ 221.869170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.225650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.368578] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.714856] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.056348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 224.063923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.087127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.410431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 224.417988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.311135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.536069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.544532] team0: Port device team_slave_0 added [ 225.862081] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 225.870240] team0: Port device team_slave_1 added [ 226.099781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 226.107301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.116534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.324060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 226.331173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.341124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.532344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 226.538712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.546685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:31:40 executing program 1: add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000ac0)="10323000038741aa81c32cbfd79af8b0063e529c15ba1e620a1c21f0f95a9f00a713d13d717c59306b74df47c2981ca1521ea8ca", 0x34, 0xfffffffffffffffc) [ 226.699010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.706932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.715998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.043360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 227.051048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.060788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.486710] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.333737] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.340291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.347513] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.354183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.363018] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.369765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.849713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.661209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.397061] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.403642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.411460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:31:46 executing program 2: r0 = socket(0x1, 0x800000000002, 0x0) shutdown(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x1}) [ 233.083937] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.260103] 8021q: adding VLAN 0 to HW filter on device bond0 20:31:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) [ 236.775154] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 237.058918] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 237.065328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.073469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.489008] 8021q: adding VLAN 0 to HW filter on device team0 20:31:53 executing program 4: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x13000002) 20:31:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x25, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) get_thread_area(&(0x7f0000000080)={0x5, 0x0, 0xd8c1c70d94cc5ae0, 0xfffffffffffffffa, 0x4, 0x800, 0x5, 0x7, 0x100000000, 0xfffffffffffffffe}) 20:31:53 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xf4, 0x7, 0xfffffffffffff2b7, "5a8312d8b3782192486156a7656bf476", "2bc72cf3f5c4ade409adb5c64d2a04fc69aa344262c757a45dc5b3b4c3573212efff66467c123e2e0cb3a121c6684e7cd2cd295d775695fef757289aefd6577a018bbfb593ab857a8330e63f9af913ebab50c08f78c42c76d993d0ca8c0f05fc225e357feabf4fc3db6c78ea831365876e8cc3ae25a78b6301c48ddc4e57083e2e99fb6fd2ccc02bc5a788c5f6708dfdbd9eef99256b065662d808b20525bbbd8923fb53b349a710cbd5bfac728959cf22de62ff9d6706f59a92faafaa4cf3d44dfb97b7949c3cafc75204869f6f01b0b314e131de9f7601d98a5345b3f743"}, 0xf4, 0x2) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='numa_maps\x00') ioctl$TCSBRK(r3, 0x5409, 0x2ea) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000200)={'veth0_to_bridge\x00', @ifru_map={0x5, 0x100, 0x7fffffff, 0x3, 0x93eb, 0x5}}) pread64(r0, &(0x7f0000000240)=""/43, 0x2b, 0x0) statx(r3, &(0x7f0000000280)='.\x00', 0x7800, 0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x2710}, {r4, r5/1000+10000}}) getresuid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, &(0x7f0000000540)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)=@updpolicy={0x328, 0x19, 0x0, 0x70bd27, 0x25dfdbff, {{@in=@local, @in6, 0x4e23, 0x8, 0x4e23, 0x0, 0xa, 0xa0, 0xa0, 0x6, r1, r6}, {0x2, 0x1, 0x9, 0x2, 0x7fff, 0x7820, 0x401, 0x9e00000000000}, {0x8, 0x7b, 0x8, 0x7fffffff}, 0x0, 0x6e6bb1, 0x0, 0x0, 0x3, 0x2}, [@policy={0xac, 0x7, {{@in=@multicast1, @in6=@local, 0x4e22, 0x0, 0x4e21, 0x7, 0x0, 0xa0, 0x20, 0x6f, r1, r7}, {0x4, 0x80000001, 0x0, 0x342, 0x5, 0x4, 0x9, 0x1}, {0x6, 0x380000, 0x3e, 0x80}, 0x7, 0x6e6bc0, 0x3, 0x0, 0x2, 0x3}}, @algo_auth={0xc4, 0x1, {{'sha3-224\x00'}, 0x3e0, "b8b41e215e6819b2517d2ddb2baaf67e64cf2c4ec11e888b07188b2d889b8db060cd7d888c4865c7b3d63f1559011d530ed2bf1f5cd997c548c11df80e257452539798a40397d18a272051f1ba68c8d4f6eddaa33cf4cab76d8b42e6e60f57e9dbcb728cf2191975b6c909bf3beee642d00695b1cd4dd310a8e2c8e1"}}, @extra_flags={0x8, 0x18, 0xb4eb}, @coaddr={0x14, 0xe, @in6=@loopback}, @algo_aead={0xd0, 0x12, {{'authencesn(crc32,cbc-camellia-aesni-avx2)\x00'}, 0x408, 0xc4cf6db099de369d, "78ae5a112ee9e2c6f12b37fcc0cd95e22f3d9c01246de65b2ce70996812a4fbcd41768bd1e1abd931ed0ab5eb213802ebf55a5926da405cc4801cb21501427a5fb0a4ee5c1d341b674559fe229bbbb69fe3ff306d89191db6d869e89f57e4e82735405fbc6881975a923106886f2e916bc348cd1ebdae37ab3876a58671a96a8d2"}}, @srcaddr={0x14, 0xd, @in6}]}, 0x328}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vcs\x00', 0x240840, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40)='fou\x00') sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r9, 0x820, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x50}}, 0x50) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000b80)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000bc0)={0x0, 0xffff}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000c40)={0x0, 0x1, 0x84b}, &(0x7f0000000c80)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000cc0)={r10, 0x2, 0x80000000, 0x5, 0xfffffffffffffff8, 0x2, 0x7f, 0x44d0, {r11, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x1}}, 0x6, 0x10000, 0x200, 0xfffffffffffffff7, 0xff}}, &(0x7f0000000d80)=0xb0) fsetxattr$security_evm(r8, &(0x7f0000000dc0)='security.evm\x00', &(0x7f0000000e00)=@v2={0x5, 0x0, 0x4, 0xffffffffffffffff, 0x37, "d8b6280abc5f8759b2bb9f2f5e4843f2d860b1050562206c32cff1743c49d9fd85d75f1a344007acb4cfb100a1372e7dbf27d92c5b9fed"}, 0x41, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000e80)={0x20, 0x81, 0x8202, 0x9, 0x7ff, 0x0, 0x325d, 0x80000000, r11}, 0x20) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000f40)={r12, 0x1, 0x4, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000f80), &(0x7f0000000fc0)=0xb) sched_getaffinity(r2, 0x8, &(0x7f0000001000)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r13, 0x310, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff01}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 20:31:53 executing program 1: add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000ac0)="10323000038741aa81c32cbfd79af8b0063e529c15ba1e620a1c21f0f95a9f00a713d13d717c59306b74df47c2981ca1521ea8ca", 0x34, 0xfffffffffffffffc) 20:31:53 executing program 2: r0 = socket(0x1, 0x800000000002, 0x0) shutdown(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x1}) 20:31:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) [ 239.399167] netlink: 21 bytes leftover after parsing attributes in process `syz-executor0'. 20:31:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) 20:31:53 executing program 2: r0 = socket(0x1, 0x800000000002, 0x0) shutdown(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x1}) 20:31:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) 20:31:53 executing program 1: add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000ac0)="10323000038741aa81c32cbfd79af8b0063e529c15ba1e620a1c21f0f95a9f00a713d13d717c59306b74df47c2981ca1521ea8ca", 0x34, 0xfffffffffffffffc) 20:31:54 executing program 4: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x13000002) 20:31:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) 20:31:54 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x208b}}, 0x0) [ 240.859374] IPVS: ftp: loaded support on port[0] = 21 [ 242.118237] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.124791] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.133206] device bridge_slave_0 entered promiscuous mode [ 242.212860] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.219320] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.227676] device bridge_slave_1 entered promiscuous mode [ 242.306799] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.387988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.625580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.705598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.854614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.861592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.091187] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.098943] team0: Port device team_slave_0 added [ 243.177930] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.185648] team0: Port device team_slave_1 added [ 243.260274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.337553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.415011] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 243.422493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.431319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.505908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.513242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.522261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.372466] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.378897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.385941] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.392413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.400228] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.802044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.410642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.695149] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.969480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.975787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.983977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.370895] 8021q: adding VLAN 0 to HW filter on device team0 20:32:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10000000000000b, &(0x7f0000000400), &(0x7f0000000040)=0xffffffffffffffd1) 20:32:04 executing program 4: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x13000002) 20:32:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f0000000040)="01000000000000001804000006000000000000001cd849832f") 20:32:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0x8aae, &(0x7f0000000000)) 20:32:04 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x208b}}, 0x0) 20:32:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) 20:32:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x208b}}, 0x0) 20:32:04 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2000000001, @pix_mp={0x0, 0x0, 0x34524742}}) [ 250.671721] hid-generic 0000:0000:0000.0001: unknown main item tag 0xe [ 250.678777] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.685791] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.692712] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.699487] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.706423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.713362] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 20:32:04 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10000000000000b, &(0x7f0000000400), &(0x7f0000000040)=0xffffffffffffffd1) 20:32:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f0000000040)="01000000000000001804000006000000000000001cd849832f") [ 250.720178] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 250.727144] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 20:32:04 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x208b}}, 0x0) [ 251.013013] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 20:32:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2000000001, @pix_mp={0x0, 0x0, 0x34524742}}) 20:32:05 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10000000000000b, &(0x7f0000000400), &(0x7f0000000040)=0xffffffffffffffd1) 20:32:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f0000000040)="01000000000000001804000006000000000000001cd849832f") 20:32:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) 20:32:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) [ 251.670883] hid-generic 0000:0000:0000.0002: unknown main item tag 0xe [ 251.678063] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.685057] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.691945] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.698733] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.705573] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.712478] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:32:05 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10000000000000b, &(0x7f0000000400), &(0x7f0000000040)=0xffffffffffffffd1) 20:32:05 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2000000001, @pix_mp={0x0, 0x0, 0x34524742}}) [ 251.719274] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 251.726131] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:32:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) 20:32:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f0000000040)="01000000000000001804000006000000000000001cd849832f") [ 252.003864] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 252.123082] hid-generic 0000:0000:0000.0003: unknown main item tag 0xe [ 252.130007] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 252.137052] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 252.143982] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 252.150785] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 252.157727] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 252.164656] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 20:32:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) [ 252.171457] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 252.178436] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 20:32:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) 20:32:06 executing program 2: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') lseek(r0, 0x0, 0x3) 20:32:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2000000001, @pix_mp={0x0, 0x0, 0x34524742}}) [ 252.517913] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 252.555755] hid-generic 0000:0000:0000.0004: unknown main item tag 0xe [ 252.562746] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.569605] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.577130] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.583989] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.590779] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.597625] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.604481] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.611274] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 20:32:06 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[:6.:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 20:32:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200), 0x8) [ 252.796942] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 20:32:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) 20:32:06 executing program 2: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') lseek(r0, 0x0, 0x3) [ 252.893230] libceph: parse_ips bad ip '[:6.:nullb' [ 252.951279] libceph: parse_ips bad ip '[:6.:nullb' [ 253.050852] hid-generic 0000:0000:0000.0005: unknown main item tag 0xe [ 253.057835] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.064908] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.071785] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.078683] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.085680] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.092535] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.099322] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 253.106222] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 20:32:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00091"], 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0xfffffe4e) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x12a) [ 253.194969] sctp: failed to load transform for md5: -2 [ 253.271823] hrtimer: interrupt took 236330 ns [ 253.294118] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 20:32:07 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[:6.:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 253.448533] hid-generic 0000:0000:0000.0006: unknown main item tag 0xe [ 253.456032] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.462998] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.469786] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.476653] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.483547] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.490337] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 20:32:07 executing program 2: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') lseek(r0, 0x0, 0x3) [ 253.497207] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.504077] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 20:32:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000140)="d296fe058ab17b44", 0x8, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008480)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000180)=""/105, 0x69}, {0x0}, {&(0x7f0000000200)=""/238, 0xee}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/111, 0x6f}, {0x0}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f00000006c0)=""/130, 0x82}, {0x0}, {&(0x7f0000000840)=""/12, 0xc}], 0x6, &(0x7f0000000980)=""/28, 0x1c, 0x7}, 0xc296}, {{&(0x7f0000000e80)=@ax25, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f00)=""/209, 0xd1}], 0x1}, 0x1000}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x0, 0x0) [ 253.716003] libceph: parse_ips bad ip '[:6.:nullb' 20:32:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) 20:32:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001}) 20:32:07 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[:6.:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 253.886796] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 20:32:08 executing program 2: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') lseek(r0, 0x0, 0x3) 20:32:08 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[:6.:nullb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 20:32:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001}) 20:32:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) [ 254.336626] libceph: parse_ips bad ip '[:6.:nullb' 20:32:08 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) 20:32:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) 20:32:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x1d}]}, 0x20}}, 0x0) 20:32:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001}) 20:32:08 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) 20:32:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) 20:32:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001}) 20:32:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x1d}]}, 0x20}}, 0x0) 20:32:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) read(r0, &(0x7f00000000c0)=""/166, 0xa6) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffff49) 20:32:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) 20:32:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) 20:32:09 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f2e726f75702e73746174003c23fb574b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 20:32:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x1d}]}, 0x20}}, 0x0) 20:32:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) 20:32:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x1d}]}, 0x20}}, 0x0) 20:32:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f2e726f75702e73746174003c23fb574b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 20:32:10 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000180)) 20:32:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) 20:32:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) 20:32:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) read(r0, &(0x7f00000000c0)=""/166, 0xa6) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffff49) 20:32:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f2e726f75702e73746174003c23fb574b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 20:32:10 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000180)) 20:32:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x3}, 0x8) 20:32:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) 20:32:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f2e726f75702e73746174003c23fb574b4d9d9a1f63f8785ad188a7e1c48875e05b18a4cb3a9cd12dcea440d899c22cebd3b6abf62d996addb07aa3cde470652b3a471b4a7fa2f3fdf6e034d8000000004b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 20:32:11 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000180)) 20:32:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) 20:32:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x1c, 0x18, 0x105, 0x0, 0x0, {0xa, 0x80, 0x14}}, 0x1c}}, 0x0) 20:32:11 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2716, 0x0, &(0x7f0000000180)) 20:32:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) read(r0, &(0x7f00000000c0)=""/166, 0xa6) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffff49) 20:32:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, 0x10) 20:32:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x1c, 0x18, 0x105, 0x0, 0x0, {0xa, 0x80, 0x14}}, 0x1c}}, 0x0) 20:32:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:32:11 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000080)=""/44) 20:32:11 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80) 20:32:12 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x1c, 0x18, 0x105, 0x0, 0x0, {0xa, 0x80, 0x14}}, 0x1c}}, 0x0) 20:32:12 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80) 20:32:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=@ipv6_newroute={0x1c, 0x18, 0x105, 0x0, 0x0, {0xa, 0x80, 0x14}}, 0x1c}}, 0x0) 20:32:12 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:12 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000080)=""/44) 20:32:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) read(r0, &(0x7f00000000c0)=""/166, 0xa6) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xffffff49) 20:32:13 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80) 20:32:13 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:32:14 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:14 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000080)=""/44) 20:32:14 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, 0x80) 20:32:14 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) [ 259.949276] syz-executor1 (8629) used greatest stack depth: 52928 bytes left 20:32:14 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:14 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:14 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = epoll_create(0x80000034c6) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 20:32:14 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:14 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000080)=""/44) 20:32:14 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:15 executing program 4: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0xffffffffffffffff) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 20:32:15 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:32:15 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120008000800110000000000040000000000", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 20:32:15 executing program 0: syz_emit_ethernet(0x46, &(0x7f000018f000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'qm=', 0x10, 0x0, 0x0, @local, @empty, {[], @dccp={{0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8ee587", 0x0, "051b76"}}}}}}}, 0x0) 20:32:15 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = epoll_create(0x80000034c6) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 20:32:15 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000240)=""/219, 0xdb) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) close(r0) 20:32:15 executing program 4: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0xffffffffffffffff) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 261.879615] IPv6: NLM_F_CREATE should be specified when creating new route 20:32:16 executing program 4: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0xffffffffffffffff) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 20:32:16 executing program 0: syz_emit_ethernet(0x46, &(0x7f000018f000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'qm=', 0x10, 0x0, 0x0, @local, @empty, {[], @dccp={{0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8ee587", 0x0, "051b76"}}}}}}}, 0x0) 20:32:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120008000800110000000000040000000000", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 20:32:16 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x841) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000440), &(0x7f0000000480), 0x8) 20:32:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = epoll_create(0x80000034c6) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 20:32:16 executing program 0: syz_emit_ethernet(0x46, &(0x7f000018f000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'qm=', 0x10, 0x0, 0x0, @local, @empty, {[], @dccp={{0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8ee587", 0x0, "051b76"}}}}}}}, 0x0) 20:32:17 executing program 4: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0xffffffffffffffff) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 20:32:17 executing program 0: syz_emit_ethernet(0x46, &(0x7f000018f000)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'qm=', 0x10, 0x0, 0x0, @local, @empty, {[], @dccp={{0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8ee587", 0x0, "051b76"}}}}}}}, 0x0) 20:32:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120008000800110000000000040000000000", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 20:32:17 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:32:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = epoll_create(0x80000034c6) poll(&(0x7f0000000080)=[{r1}], 0x1, 0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000069cff4)={0x4}) 20:32:17 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x841) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000440), &(0x7f0000000480), 0x8) 20:32:17 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f0, 0x0) 20:32:17 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120008000800110000000000040000000000", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) 20:32:17 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x841) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000440), &(0x7f0000000480), 0x8) 20:32:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)="4ad8c2c0c90470faffaa02040fd6241c302c32d5951ab58e42e52ab82da086d6e6", 0x21}], 0x1}], 0x1, 0x0) 20:32:17 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:18 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x841) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000440), &(0x7f0000000480), 0x8) 20:32:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)="4ad8c2c0c90470faffaa02040fd6241c302c32d5951ab58e42e52ab82da086d6e6", 0x21}], 0x1}], 0x1, 0x0) 20:32:18 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:18 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f0, 0x0) 20:32:18 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) [ 265.038155] binder: 8837:8838 got transaction with invalid data ptr [ 265.045138] binder: 8837:8838 transaction failed 29201/-14, size 8192-0 line 2992 20:32:19 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:19 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) [ 265.156453] binder: BINDER_SET_CONTEXT_MGR already set [ 265.162039] binder: 8837:8840 ioctl 40046207 0 returned -16 20:32:19 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) [ 265.223164] binder_alloc: 8837: binder_alloc_buf, no vma [ 265.228855] binder: 8837:8843 transaction failed 29189/-3, size 8192-0 line 2973 20:32:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)="4ad8c2c0c90470faffaa02040fd6241c302c32d5951ab58e42e52ab82da086d6e6", 0x21}], 0x1}], 0x1, 0x0) 20:32:19 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 20:32:19 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:19 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_timedsend(r0, &(0x7f0000307ffd), 0x0, 0x0, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f00000000c0)=""/130, 0x2a, 0x0, 0x0) close(r0) 20:32:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005980)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)="4ad8c2c0c90470faffaa02040fd6241c302c32d5951ab58e42e52ab82da086d6e6", 0x21}], 0x1}], 0x1, 0x0) 20:32:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f0, 0x0) 20:32:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) [ 266.047955] binder: 8870:8871 got transaction with invalid data ptr [ 266.054915] binder: 8870:8871 transaction failed 29201/-14, size 8192-0 line 2992 20:32:20 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080), 0xe9, &(0x7f00000013c0)}, 0x20000054) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x6, 0x1d, &(0x7f0000000100), 0x4) 20:32:20 executing program 5: timer_create(0xffbffffffffffff1, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) timer_settime(0x0, 0x5, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, 0x0) 20:32:20 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 20:32:20 executing program 3: unshare(0x20400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) 20:32:20 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080), 0xe9, &(0x7f00000013c0)}, 0x20000054) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x6, 0x1d, &(0x7f0000000100), 0x4) 20:32:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 20:32:20 executing program 5: process_vm_writev(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x167, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000009c0)=""/47, 0x2f}], 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x4, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:32:20 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 20:32:20 executing program 3: unshare(0x20400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) 20:32:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924924924924f0, 0x0) [ 266.886238] binder: 8892:8893 got transaction with invalid data ptr [ 266.893207] binder: 8892:8893 transaction failed 29201/-14, size 8192-0 line 2992 20:32:21 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080), 0xe9, &(0x7f00000013c0)}, 0x20000054) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x6, 0x1d, &(0x7f0000000100), 0x4) 20:32:21 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) 20:32:21 executing program 3: unshare(0x20400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) 20:32:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 20:32:21 executing program 5: process_vm_writev(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x167, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000009c0)=""/47, 0x2f}], 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x4, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 267.552975] binder: 8916:8917 got transaction with invalid data ptr [ 267.559768] binder: 8916:8917 transaction failed 29201/-14, size 8192-0 line 2992 20:32:21 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 20:32:21 executing program 3: unshare(0x20400) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}) 20:32:21 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080), 0xe9, &(0x7f00000013c0)}, 0x20000054) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x6, 0x1d, &(0x7f0000000100), 0x4) 20:32:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r5}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r5, 0x0, 0x2, r4}) 20:32:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) 20:32:22 executing program 5: process_vm_writev(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x167, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000009c0)=""/47, 0x2f}], 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x4, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:32:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 20:32:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)) 20:32:22 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000018c0)='./file0\x00', &(0x7f00000017c0)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a47bb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f00000012c0)) open$dir(&(0x7f0000000600)='./file0\x00', 0x40bfe, 0x0) [ 268.193344] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 20:32:22 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:22 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 20:32:22 executing program 5: process_vm_writev(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x167, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000009c0)=""/47, 0x2f}], 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x4, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:32:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)) 20:32:22 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000018c0)='./file0\x00', &(0x7f00000017c0)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a47bb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f00000012c0)) open$dir(&(0x7f0000000600)='./file0\x00', 0x40bfe, 0x0) 20:32:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r5}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r5, 0x0, 0x2, r4}) 20:32:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)) 20:32:23 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000018c0)='./file0\x00', &(0x7f00000017c0)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a47bb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f00000012c0)) open$dir(&(0x7f0000000600)='./file0\x00', 0x40bfe, 0x0) 20:32:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:23 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)) 20:32:23 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r5}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r5, 0x0, 0x2, r4}) 20:32:23 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f00000018c0)='./file0\x00', &(0x7f00000017c0)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a47bb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f00000012c0)) open$dir(&(0x7f0000000600)='./file0\x00', 0x40bfe, 0x0) 20:32:23 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:23 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)) 20:32:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3}) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r5}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r5, 0x0, 0x2, r4}) 20:32:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:24 executing program 0: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:24 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:24 executing program 1: r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="3800000000000000290000000400000078040401000000c0073510fbff0000b4fe2cd0b0fa510000000000f878002000004e5e0000382722"], 0x38}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0xffffffffffffff70, &(0x7f0000002580), 0x0, &(0x7f00000025c0)}, 0x0) 20:32:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000180)={0xca80}) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f00000001c0)=0x9, 0x4) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[]}}, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:32:25 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x84000) 20:32:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f043, 0x0, [], @p_u8=&(0x7f0000000080)}}) 20:32:25 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:25 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f, 0xc}}, 0x50) 20:32:25 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f043, 0x0, [], @p_u8=&(0x7f0000000080)}}) 20:32:25 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6tnl0\x00', 0x336) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000001600)="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", 0x579}], 0x1, &(0x7f0000000c40)}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 20:32:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x1b8, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x230) 20:32:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f043, 0x0, [], @p_u8=&(0x7f0000000080)}}) 20:32:26 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) unshare(0x20400) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x40087705, 0x0) 20:32:26 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x1b8, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x230) 20:32:26 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f043, 0x0, [], @p_u8=&(0x7f0000000080)}}) 20:32:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6tnl0\x00', 0x336) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000001600)="9392b27164a4e172b5f23a809273c7cdd50f4fd5725383276895a580a720dfb107e8a688859afb0cdc9525ea4457b54469e4cb0f86b80bfd383de3267518afed70ec78b85c8dd41c41b2c59c9ff08994349736270ca8b3b5a8cafcea98a51360da6b3a513d2d8642958784bba89c29c93ead49ad838c214cefb037fc8e3dd8c305d61e566e599e48495560349e609cf8897400e8b8e7b51111578fa835655fe4f86fafdbcd33e9fabdfc6e5ebd9c9f361f4ec6867d12568979bcc6fdee660bbc90eabc1ae93e9ecf6ea7e29ab8d2aefd1912f61337e2f756e712c71f5f298f85679722893bb0636e9d3410e1cdb3151d983a34d5f1cfdd3efb51d4f67bdb4e52bde8ef7d5e2fbb0399f0f4b84bf9565a51d1843c29fd7f91de47587063dffd13dadbfcf22cb89fdac3ca9b95e1e64db43deb3fe7980d1ba288f14b0c9e5f88dbde2d71acb7fa5945818b488507b2cb2607d1ccfee0416faae0ba2726d020c23b1b16b7aade2cea9577d1b23d1bb2ea6ee809423f18994c7c3855ba14a78887766ceaeaacc3de855ec8f713f3623734a203e2edc59bebe62f6b4282d5044177569b20be9eb0c303aec2fad3f2adf87b90b28ec25adabf289478f796a64a6b17c29999c24f872f767bf63114a621b306ba181fd34560da0c6a3b80f2b7c19b45a69512459f4b45ee7f9dadedb2c05270826141efa1f1dbf724e905bf7aa950683340c53f81c97c60095d461c23e7a3747d4c093e6c486c1748cf522b8e31a1a0754f8b53157f51dbbe94ed168a266f82e1a2469519e69408be16939f8bd9a6e24d16b6e628f69e38ad0743937851e0b4026e1b7183ff2032653a822e89faec355fb8b94231a2c1b4259c1b3bb99998ed974b6aeb29fd6253532b1d52595dfa63f1568e91c8da13a529125d3ffe6b5dcdf15b38fa7064cedbbe9cab1e890c1225a48e7b9a49526f0728e231df21c58dd6aceed147ca466478ac79bfe56b97c05955fcece000876001bd1bfcb33f427335556fe34745dca87b662b2e2ea3e4fa760b913675419fff2356bf9bb491175d93ce1b96fbfd87015700d62d5523181f3769f1111dbcd4dad6b52157637d1649878882064bbd942005d9c523430a89f25f0568082427abe73c85efb1ede461df9fba88469e8af776a8c2d05b0d76b3b6f5e978c5cfd0c94902a5f326746d3feec47b884b8bd7f7d3dd33ffdb390e54a03271eb5e98d0b2ba23cc552e3b7982504787303cf66c2e2152936df58c9e9996acc872485d18e29c3c171dc7b33340abaea0dd967629d6f5b62e1b5d6ade5ef438ac1fcde4b16bbe135c49e431263bd8382c755b7a7a8bc219e8e20957af4288c9f1c2a57b25f730faef7e2bfd011e822e415e3e2cf899d3dd3a13d6115bc8cae9a2405a8f0a236206445e3f2191db189c7aed7efc102d852f8e994171b9d38fb42fefd934acc08baf1afaaa1f021b93b0e9f7b36bf77cfc6e4fadb7fdade82e0b21224456d2ed0b9cfc0bdaca65bd90ad78243b4d8502b7517706e268ae7fa78635cdcde5ead0e5f6456fbe0ecec82438562b6866c1acc16eecabb2a11ebea8220440c8cd545358dd3a7a1bff21b1c91d7e7b29cae03dca03f21e81bd6c1b23c59713845175bd0adfe7808480b30d1b784e0e076143aceb5b53aabd528cda23f9c556c3be6cc80ea2bd71aed6bcbe12f7a7c79050e3d19e234edf776e2b137137f0e5b88c1c3c3fe7b6041dc3f0473020155baecf78884b83250dd0855afb817385d0f007060c3ffdef9753d57db895bb45da3acbf4d8ff21a3f07dc82ea300bc2af687c84e8034ae11bf78633746a93ba20036a47a10383829d9e016b6c375e9acd6d7b4f2587eba8a4c60f640211d847b05698a337b6971c72a3a7eae5f349b3eaf9a7cec84250d1113bb73800c1376a1cbc8ca6cec27e5cd72c5e127edff8d2a6748243b9b82768f430f2fb8674631a50b8c8561745931a35e", 0x579}], 0x1, &(0x7f0000000c40)}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 20:32:26 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x32) dup2(r3, r1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) 20:32:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) unshare(0x20400) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x40087705, 0x0) 20:32:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x1b8, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x230) 20:32:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) 20:32:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(_(hainiv(rfc)106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 20:32:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000eed000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x8000000000000004) connect$inet6(r3, &(0x7f0000000080), 0x1c) writev(r4, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 20:32:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) unshare(0x20400) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x40087705, 0x0) 20:32:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6tnl0\x00', 0x336) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000001600)="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", 0x579}], 0x1, &(0x7f0000000c40)}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 20:32:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x1b8, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x230) 20:32:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(_(hainiv(rfc)106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 20:32:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000eed000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x8000000000000004) connect$inet6(r3, &(0x7f0000000080), 0x1c) writev(r4, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 20:32:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) unshare(0x20400) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x40087705, 0x0) 20:32:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6tnl0\x00', 0x336) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000001600)="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", 0x579}], 0x1, &(0x7f0000000c40)}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) 20:32:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @dev}, 0x10) 20:32:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(_(hainiv(rfc)106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 20:32:28 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) 20:32:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000eed000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x8000000000000004) connect$inet6(r3, &(0x7f0000000080), 0x1c) writev(r4, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 20:32:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) 20:32:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @dev}, 0x10) 20:32:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(_(hainiv(rfc)106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 20:32:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(0xffffffffffffffff, r0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000eed000)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x8000000000000004) connect$inet6(r3, &(0x7f0000000080), 0x1c) writev(r4, &(0x7f00007af000)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 20:32:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @dev}, 0x10) 20:32:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x0, 0x1) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:32:29 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 20:32:29 executing program 0: write$nbd(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 20:32:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @dev}, 0x10) 20:32:29 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) 20:32:29 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) 20:32:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x0, 0x1) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:32:29 executing program 4: prctl$PR_GET_PDEATHSIG(0x2b, &(0x7f0000000000)) 20:32:29 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 20:32:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001200add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 20:32:30 executing program 4: prctl$PR_GET_PDEATHSIG(0x2b, &(0x7f0000000000)) 20:32:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x0, 0x1) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:32:30 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) [ 276.357275] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. 20:32:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001200add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 20:32:30 executing program 4: prctl$PR_GET_PDEATHSIG(0x2b, &(0x7f0000000000)) 20:32:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) [ 276.783663] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. 20:32:30 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xe, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 20:32:31 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x3, 0xfff}, 0xc) 20:32:31 executing program 4: prctl$PR_GET_PDEATHSIG(0x2b, &(0x7f0000000000)) 20:32:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001200add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 20:32:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x0, 0x1) dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:32:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x13}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000208000000000000000000000000000000000004ada800800400000020000000000003000600000000000200030000000000000000000000a20003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 277.278338] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. 20:32:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001200add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 277.671631] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. 20:32:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x13}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000208000000000000000000000000000000000004ada800800400000020000000000003000600000000000200030000000000000000000000a20003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 20:32:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)={0x1, 0x0, [{}]}) 20:32:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:32 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x2c00, 0x77d50800, 0x8}}}}}}, &(0x7f0000000040)) 20:32:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x13}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000208000000000000000000000000000000000004ada800800400000020000000000003000600000000000200030000000000000000000000a20003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 278.464779] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 20:32:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)={0x1, 0x0, [{}]}) [ 278.520264] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 20:32:32 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x2c00, 0x77d50800, 0x8}}}}}}, &(0x7f0000000040)) 20:32:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x13}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000208000000000000000000000000000000000004ada800800400000020000000000003000600000000000200030000000000000000000000a20003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 20:32:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)={0x1, 0x0, [{}]}) 20:32:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_MCE_KILL(0x21, 0x1, 0xfffffffffffffffd) 20:32:33 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x2c00, 0x77d50800, 0x8}}}}}}, &(0x7f0000000040)) 20:32:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x1000000000000145, 0x0, [{}]}) 20:32:33 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1000000000003) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) 20:32:33 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') unlink(&(0x7f0000000180)='./file0\x00') fcntl$setlease(r0, 0x400, 0x1) [ 279.692040] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 20:32:33 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x2c00, 0x77d50800, 0x8}}}}}}, &(0x7f0000000040)) 20:32:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)={0x1, 0x0, [{}]}) 20:32:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x100}}]}) [ 280.048696] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 20:32:34 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') unlink(&(0x7f0000000180)='./file0\x00') fcntl$setlease(r0, 0x400, 0x1) 20:32:34 executing program 1: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1400000, 0x5e96}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0x550}) 20:32:34 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {}], 0x42, 0x0) 20:32:34 executing program 2: socketpair(0x100000001, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000003f}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 20:32:34 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0) 20:32:34 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {}], 0x42, 0x0) 20:32:34 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') unlink(&(0x7f0000000180)='./file0\x00') fcntl$setlease(r0, 0x400, 0x1) 20:32:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x100}}]}) 20:32:35 executing program 2: socketpair(0x100000001, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000003f}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 20:32:35 executing program 1: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1400000, 0x5e96}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0x550}) 20:32:35 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0) 20:32:35 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') unlink(&(0x7f0000000180)='./file0\x00') fcntl$setlease(r0, 0x400, 0x1) 20:32:35 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {}], 0x42, 0x0) 20:32:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x100}}]}) 20:32:35 executing program 2: socketpair(0x100000001, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000003f}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 20:32:35 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0) 20:32:35 executing program 1: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1400000, 0x5e96}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0x550}) 20:32:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0xa3, 0x0, [0x707000]}) 20:32:35 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r1}, {}], 0x42, 0x0) 20:32:36 executing program 2: socketpair(0x100000001, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000003f}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000040)="6c6f00966fd651b159a9c84a2c60d29800000020") 20:32:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x100}}]}) 20:32:36 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0) [ 282.120804] ================================================================== [ 282.128253] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x19a/0x230 [ 282.134783] CPU: 1 PID: 9417 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #93 [ 282.141992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.151365] Call Trace: [ 282.153995] dump_stack+0x32d/0x480 [ 282.157660] ? _copy_to_user+0x19a/0x230 [ 282.161787] kmsan_report+0x19f/0x300 [ 282.165637] kmsan_internal_check_memory+0x9dc/0xa60 [ 282.170805] kmsan_copy_to_user+0x7c/0xe0 [ 282.174988] _copy_to_user+0x19a/0x230 [ 282.178921] kvm_arch_vcpu_ioctl+0x5dee/0x7680 [ 282.183541] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 282.188974] kvm_vcpu_ioctl+0xca3/0x1f90 [ 282.193097] ? do_vfs_ioctl+0x184/0x2f70 [ 282.197213] ? __se_sys_ioctl+0x1da/0x270 [ 282.201403] ? kvm_vm_release+0x90/0x90 [ 282.205411] do_vfs_ioctl+0xfbc/0x2f70 [ 282.209355] ? security_file_ioctl+0x92/0x200 [ 282.213891] __se_sys_ioctl+0x1da/0x270 [ 282.217915] __x64_sys_ioctl+0x4a/0x70 [ 282.221833] do_syscall_64+0xcf/0x110 [ 282.225673] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 282.230887] RIP: 0033:0x457569 [ 282.234131] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.253069] RSP: 002b:00007f97a361fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.260819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 20:32:36 executing program 1: syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1400000, 0x5e96}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x0, 0x550}) [ 282.268147] RDX: 00000000200001c0 RSI: 000000004068aea3 RDI: 0000000000000005 [ 282.275448] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.282756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97a36206d4 [ 282.290064] R13: 00000000004bff9d R14: 00000000004d0970 R15: 00000000ffffffff [ 282.297420] [ 282.299077] Local variable description: ----__pu_val@kvm_arch_vcpu_ioctl [ 282.305968] Variable was created at: [ 282.309731] kvm_arch_vcpu_ioctl+0x29d/0x7680 [ 282.314267] kvm_vcpu_ioctl+0xca3/0x1f90 [ 282.318346] [ 282.320004] Bytes 0-1 of 2 are uninitialized [ 282.324443] Memory access of size 2 starts at ffff88812c3ffbb0 [ 282.330438] Data copied to user address 0000000000707000 [ 282.335921] ================================================================== [ 282.343314] Disabling lock debugging due to kernel taint [ 282.348801] Kernel panic - not syncing: panic_on_warn set ... [ 282.354748] CPU: 1 PID: 9417 Comm: syz-executor0 Tainted: G B 4.20.0-rc3+ #93 [ 282.363359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.372756] Call Trace: [ 282.375399] dump_stack+0x32d/0x480 [ 282.379082] panic+0x624/0xc08 [ 282.382383] kmsan_report+0x300/0x300 [ 282.386235] kmsan_internal_check_memory+0x9dc/0xa60 [ 282.391416] kmsan_copy_to_user+0x7c/0xe0 [ 282.395616] _copy_to_user+0x19a/0x230 [ 282.399577] kvm_arch_vcpu_ioctl+0x5dee/0x7680 [ 282.404221] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 282.409680] kvm_vcpu_ioctl+0xca3/0x1f90 [ 282.413817] ? do_vfs_ioctl+0x184/0x2f70 [ 282.417909] ? __se_sys_ioctl+0x1da/0x270 [ 282.422088] ? kvm_vm_release+0x90/0x90 [ 282.426140] do_vfs_ioctl+0xfbc/0x2f70 [ 282.430100] ? security_file_ioctl+0x92/0x200 [ 282.434659] __se_sys_ioctl+0x1da/0x270 [ 282.438698] __x64_sys_ioctl+0x4a/0x70 [ 282.442642] do_syscall_64+0xcf/0x110 [ 282.446495] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 282.451729] RIP: 0033:0x457569 [ 282.454960] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.473899] RSP: 002b:00007f97a361fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.481653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 282.488963] RDX: 00000000200001c0 RSI: 000000004068aea3 RDI: 0000000000000005 [ 282.496267] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 282.503576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97a36206d4 [ 282.510877] R13: 00000000004bff9d R14: 00000000004d0970 R15: 00000000ffffffff [ 282.519280] Kernel Offset: disabled [ 282.522926] Rebooting in 86400 seconds..