[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 30.645091] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.456669] random: sshd: uninitialized urandom read (32 bytes read) [ 33.927558] random: sshd: uninitialized urandom read (32 bytes read) [ 35.250696] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. [ 40.732613] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/07 10:28:22 fuzzer started [ 42.178237] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/07 10:28:25 dialing manager at 10.128.0.26:34783 [ 67.391921] can: request_module (can-proto-0) failed. [ 67.402991] can: request_module (can-proto-0) failed. 2018/06/07 10:28:51 kcov=true, comps=false 10:28:57 executing program 0: 10:28:57 executing program 1: 10:28:57 executing program 7: 10:28:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000002c0)=""/187, &(0x7f0000000140)=0xbb) 10:28:57 executing program 5: r0 = socket(0x18, 0x0, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000001780), &(0x7f00000017c0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 10:28:57 executing program 6: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000180)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) 10:28:57 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) ioctl$sock_netrom_SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r0, r1) 10:28:57 executing program 3: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) r1 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./control\x00', r2, &(0x7f0000000040)='./control\x00') [ 76.561437] IPVS: ftp: loaded support on port[0] = 21 [ 76.611649] IPVS: ftp: loaded support on port[0] = 21 [ 76.637331] IPVS: ftp: loaded support on port[0] = 21 [ 76.668807] IPVS: ftp: loaded support on port[0] = 21 [ 76.704519] IPVS: ftp: loaded support on port[0] = 21 [ 76.705168] IPVS: ftp: loaded support on port[0] = 21 [ 76.715622] IPVS: ftp: loaded support on port[0] = 21 [ 76.722439] IPVS: ftp: loaded support on port[0] = 21 [ 78.440750] ip (4717) used greatest stack depth: 54520 bytes left [ 78.767779] ip (4742) used greatest stack depth: 54440 bytes left [ 79.160787] ip (4776) used greatest stack depth: 54392 bytes left [ 79.533696] ip (4809) used greatest stack depth: 54312 bytes left [ 80.071105] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.077603] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.100652] device bridge_slave_0 entered promiscuous mode [ 80.132497] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.139095] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.168320] device bridge_slave_0 entered promiscuous mode [ 80.197003] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.203671] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.223663] device bridge_slave_0 entered promiscuous mode [ 80.246865] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.253322] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.273074] device bridge_slave_0 entered promiscuous mode [ 80.289802] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.296317] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.323117] device bridge_slave_0 entered promiscuous mode [ 80.343755] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.350259] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.365116] device bridge_slave_0 entered promiscuous mode [ 80.382103] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.388570] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.397195] device bridge_slave_1 entered promiscuous mode [ 80.404621] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.411123] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.421767] device bridge_slave_1 entered promiscuous mode [ 80.435722] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.442201] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.452256] device bridge_slave_0 entered promiscuous mode [ 80.464803] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.471260] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.487763] device bridge_slave_0 entered promiscuous mode [ 80.502833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.509342] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.535345] device bridge_slave_1 entered promiscuous mode [ 80.545300] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.551739] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.568431] device bridge_slave_1 entered promiscuous mode [ 80.576754] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.583204] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.598010] device bridge_slave_1 entered promiscuous mode [ 80.613188] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.619659] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.648544] device bridge_slave_1 entered promiscuous mode [ 80.664260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.672512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.680408] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.686841] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.701990] device bridge_slave_1 entered promiscuous mode [ 80.725207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.732495] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.739249] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.772073] device bridge_slave_1 entered promiscuous mode [ 80.793225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.805473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.815381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.852688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.927196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.935488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 80.958357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 80.968890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.006191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.020354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.030712] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.157522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.186546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.465685] ip (4939) used greatest stack depth: 53784 bytes left [ 81.503981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.584748] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.607801] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.618558] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.676859] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.739871] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.757079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.784350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.825452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.843794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.855231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.874207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 81.884217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 81.949533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.965928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.010624] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.048123] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.096323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 82.135654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.142719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.163908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.171886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.243423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.250467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.267544] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.274571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.307553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.314625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.335146] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.343859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.351453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.390851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.422872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.430279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 82.437237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.455595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.523692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.530815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.553879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.568336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.619558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 82.627748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.901312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 82.926909] team0: Port device team_slave_0 added [ 82.983984] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.004251] team0: Port device team_slave_0 added [ 83.019951] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.030728] team0: Port device team_slave_0 added [ 83.036370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.062702] team0: Port device team_slave_0 added [ 83.118696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.153260] team0: Port device team_slave_0 added [ 83.172173] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.182809] team0: Port device team_slave_0 added [ 83.195792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.211152] team0: Port device team_slave_1 added [ 83.246487] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.263325] team0: Port device team_slave_1 added [ 83.275462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.292994] team0: Port device team_slave_0 added [ 83.302994] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.319521] team0: Port device team_slave_1 added [ 83.336465] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.353879] team0: Port device team_slave_1 added [ 83.378641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.385639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.402213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.420661] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 83.436161] team0: Port device team_slave_0 added [ 83.442802] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.459258] team0: Port device team_slave_1 added [ 83.466294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.473844] team0: Port device team_slave_1 added [ 83.486927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.494597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.505570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.526801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.558846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.587871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.620674] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.628132] team0: Port device team_slave_1 added [ 83.635598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.655248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.663750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.673965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.684399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.704202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.733016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.740691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.748206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.770865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.785780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.801340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.815187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 83.823268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.831535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.847290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.864972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 83.876929] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 83.899871] team0: Port device team_slave_1 added [ 83.915748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 83.923411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.940995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.951950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.961404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.970703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.980748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.993871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.001429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.012588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.026317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.040925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.064188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.088726] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.097387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.106838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.118595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.131901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.140719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.161012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.168382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.181832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.191933] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 84.200151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.212646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.230504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.238272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.285249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.312719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.334384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.349472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.359080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.372958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.381123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.390316] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.402805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.419979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.440856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.448459] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.456748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.468203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.477383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.493124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.513731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.544710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.563938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.579591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.595131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.604214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.613393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 84.621258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.629415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.663533] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.672345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.679806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.710308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.740260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.775967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.790869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.798959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.819869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.860282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 84.873072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.891107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.925451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 84.933245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.964975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.109512] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 85.117122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.132423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.792537] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.799007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.805810] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.812232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.849307] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.856167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.873352] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.880322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.887160] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.893595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.907303] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 86.946309] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.952782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.959602] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.966083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.975895] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.054604] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.061106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.067931] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.074353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.125379] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.166856] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.173345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.180174] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.186627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.253916] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.260501] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.267001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.273849] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.280329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.304359] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.355777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.362260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.369150] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.375612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.437961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.550733] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.557203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.564073] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.570515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.626116] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.903249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.917891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.935822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.957223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.966653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.975814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.985361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.303278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.396409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.443223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.681631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.787760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.871637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.939240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.172748] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.191650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.241650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.311344] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.473806] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.570857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.678241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.806957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 96.984990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 96.992333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.005343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.036387] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.046406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.060130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.092101] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.102547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.109248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.121782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.346568] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.353104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.363987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.403757] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.414235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.426226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.553321] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.559667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.573947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.699559] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.705876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.718307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.835107] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.875183] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.883351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.896304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.931899] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.019583] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.194586] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.310402] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.352308] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.558437] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.657078] 8021q: adding VLAN 0 to HW filter on device team0 10:29:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000100)={0x2, 0x40000004e20, @loopback=0x7f000001}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x40000, 0x4) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000080)=@rc={0x1f}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1, &(0x7f0000000380)}}], 0x1, 0x40400d4) sendto$inet(r0, &(0x7f0000000040)='$', 0x1, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 10:29:25 executing program 3: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100), 0x4) getpgrp(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000040)) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) rt_sigprocmask(0x0, &(0x7f0000000200), &(0x7f0000000280), 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) rt_sigprocmask(0x3, &(0x7f0000000340)={0x80}, &(0x7f0000000380), 0x8) close(r0) 10:29:25 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100), &(0x7f0000000140)) 10:29:25 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) rt_sigaction(0x0, &(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000000080)) 10:29:25 executing program 7: accept4$ipx(0xffffffffffffff9c, &(0x7f0000001440), &(0x7f0000001480)=0x10, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000a1aff7)={@loopback={0x0, 0x1}}, 0xf4) 10:29:25 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x1c00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 10:29:25 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080), 0x4) 10:29:25 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) ioctl$sock_netrom_SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r0, r1) 10:29:25 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 10:29:25 executing program 7: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f0000002e80)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003840)=[{&(0x7f0000002f00)=""/141, 0x8d}, {&(0x7f0000002fc0)=""/191, 0xbf}], 0x2, &(0x7f00000033c0)=""/68, 0x44}}], 0x1, 0x0, &(0x7f0000004d40)) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0x40}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) 10:29:25 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000140)) 10:29:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2}, 0x10) 10:29:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x87) r1 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 10:29:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) 10:29:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) connect$inet(r0, &(0x7f0000000100)={0x2, 0x40000004e20, @loopback=0x7f000001}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000200)=0x40000, 0x4) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000080)=@rc={0x1f}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1, &(0x7f0000000380)}}], 0x1, 0x40400d4) sendto$inet(r0, &(0x7f0000000040)='$', 0x1, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) 10:29:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) sync() 10:29:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x87) r1 = accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280), &(0x7f00000002c0)=0x10) 10:29:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, &(0x7f00005a4000)=@rc, &(0x7f0000000040)=0xd) sync() 10:29:26 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x4) socket(0x2, 0x3, 0x3) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1}, 0x0) 10:29:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0xd4cf, 0x4) 10:29:26 executing program 1: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "dbd495", 0x44, 0x11, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000040)) 10:29:26 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0x1000a00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:29:26 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="1e", 0x1}], 0x1, &(0x7f0000000680)}}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='s'], 0x1) close(r2) 10:29:26 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='clear_refs\x00') getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffffffffffffff, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x3, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@loopback=0x7f000001, 0x4e22, 0x3, 0x4e22, 0xffffffffffffb4cb, 0xa, 0x20, 0xa0, 0x6, r3, r4}, {0x7, 0x3, 0x6171, 0x1ff, 0x5, 0x7, 0x400, 0x8}, {0x9d7c, 0x8, 0x4, 0xfffffffffffffffd}, 0x3, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff]}, 0x4d4, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x0, 0x1, 0x3, 0x7, 0x2, 0x0, 0x6}}, 0xe8) 10:29:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10001}, 0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1020010}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) 10:29:26 executing program 7: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x0, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c) 10:29:26 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:27 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"626373685c41000f00000038c500", 0x2}) 10:29:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='clear_refs\x00') getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffffffffffffff, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x3, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@loopback=0x7f000001, 0x4e22, 0x3, 0x4e22, 0xffffffffffffb4cb, 0xa, 0x20, 0xa0, 0x6, r3, r4}, {0x7, 0x3, 0x6171, 0x1ff, 0x5, 0x7, 0x400, 0x8}, {0x9d7c, 0x8, 0x4, 0xfffffffffffffffd}, 0x3, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff]}, 0x4d4, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x0, 0x1, 0x3, 0x7, 0x2, 0x0, 0x6}}, 0xe8) 10:29:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1220, 0x0, 0x0, 0x100000000, 0x7f, 0x1, 0xfffffffffffffff7, 0x0, 0x4045, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, r1, 0x8) 10:29:27 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, 0x800, 0x1}, 0x20) 10:29:27 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x200000000000008, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 10:29:27 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='clear_refs\x00') getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffffffffffffff, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x3, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@loopback=0x7f000001, 0x4e22, 0x3, 0x4e22, 0xffffffffffffb4cb, 0xa, 0x20, 0xa0, 0x6, r3, r4}, {0x7, 0x3, 0x6171, 0x1ff, 0x5, 0x7, 0x400, 0x8}, {0x9d7c, 0x8, 0x4, 0xfffffffffffffffd}, 0x3, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff]}, 0x4d4, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x0, 0x1, 0x3, 0x7, 0x2, 0x0, 0x6}}, 0xe8) 10:29:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 10:29:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000100)=""/23, 0x17) 10:29:27 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 10:29:27 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000788000)=0x1, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000002540)}, 0x0) 10:29:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x2bc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 10:29:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='clear_refs\x00') getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x1, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xffffffffffffffff, 0x0, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, 0x2, @in=@broadcast=0xffffffff, 0x3, 0x3, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@loopback=0x7f000001, 0x4e22, 0x3, 0x4e22, 0xffffffffffffb4cb, 0xa, 0x20, 0xa0, 0x6, r3, r4}, {0x7, 0x3, 0x6171, 0x1ff, 0x5, 0x7, 0x400, 0x8}, {0x9d7c, 0x8, 0x4, 0xfffffffffffffffd}, 0x3, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff]}, 0x4d4, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x0, 0x1, 0x3, 0x7, 0x2, 0x0, 0x6}}, 0xe8) 10:29:27 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:28 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="e4", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) listen(r0, 0xffffffffffffff7f) accept(r0, &(0x7f00000001c0)=@sco, &(0x7f0000000040)=0x108) 10:29:28 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)) 10:29:28 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) 10:29:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 10:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) dup3(r0, r1, 0x0) 10:29:28 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000080)=[0x6, 0x5]) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000623000), &(0x7f00002cfffc), &(0x7f0000907000), &(0x7f00000000c0)) ioprio_set$pid(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)=0x1, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pwritev(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)="1c", 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) [ 106.230012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:29:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') pread64(r0, &(0x7f0000000140)=""/162, 0x94, 0x0) 10:29:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1000000000000024, 0x81, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 10:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) [ 106.443846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:29:28 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80}, 0x0, r2}) 10:29:28 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x2000000000000003, &(0x7f0000000100)) open(&(0x7f0000000040)='./file0/bus\x00', 0x20040042, 0x0) 10:29:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x2bc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 10:29:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14}, 0x15, 0x0, 'sh\x00'}, 0x2c) 10:29:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x103}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) close(r0) 10:29:28 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000001580)="d09482c0984b0af9386b3a14aabe63170c1a04c9674c26a4839fe7a65f2a347986f57e2bcb20f7a74aec4244895e100eacd4f8130e5d976221c93a098c8359a6ae2e38ac3675d29c4860b2b171c98147b292ed910652cadcae90a648a1d6166a5f3ba17ebb80b204a5", 0x69) tkill(r0, 0x1000000000016) 10:29:28 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="e4", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) listen(r0, 0xffffffffffffff7f) accept(r0, &(0x7f00000001c0)=@sco, &(0x7f0000000040)=0x108) 10:29:28 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:28 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}], 0x1, 0x0) 10:29:28 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:29 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="736368656400a6e9b2ec53c0d0a2ef47") lseek(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001780)={{0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'none\x00'}, {@empty, 0x0, 0x0, 0x0, 0x5}}, 0x44) 10:29:29 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:29 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000001580)="d09482c0984b0af9386b3a14aabe63170c1a04c9674c26a4839fe7a65f2a347986f57e2bcb20f7a74aec4244895e100eacd4f8130e5d976221c93a098c8359a6ae2e38ac3675d29c4860b2b171c98147b292ed910652cadcae90a648a1d6166a5f3ba17ebb80b204a5", 0x69) tkill(r0, 0x1000000000016) [ 107.038157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.058437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:29:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) 10:29:29 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0xa01) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x5002}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 10:29:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) 10:29:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000e40)={0x53, 0x0, 0xe4, 0x3404, @buffer={0x0, 0xeb, &(0x7f0000000c00)=""/235}, &(0x7f0000000d00)="951d21ff82ab2ac67f98742699683f7c2f406d7014271f001e639cfcee5293442640c9ab65b125383a1b3d585ddd0d10c40543c52af686a981be6eaf00b32cd5b72ed920936ed0bbe3a2cfdc3b74d5207666a3d37061f7f39600e19ea8f3c642b11dba6bc6c5153babccf6ec3d945d7f25894964a6236a83fd519a9a73c692d8391b8ec4a4cc4c6a3d957a8e17041874207231a0797ecdb564b4d08367af6e0d6850cd7b6a342982f3bf4bd8ac59173999163b42f96d4ecebc292eec5c9396bbf7de2b71ccbac0bbea52f0d4f71c63691061fba9d83d0eab0e40e601fba493aeefcddb62", &(0x7f0000000ac0)=""/116, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000e00)}) [ 107.289380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.483589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:29:29 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bond0\x00', 0x400}) 10:29:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x103}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) close(r0) 10:29:29 executing program 4: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@multicast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'team0\x00'}) socketpair$inet(0x2, 0x7ffff, 0x400, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffc, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000003c0)={0xd7, 0x128}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000000}) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x2000000204000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[]) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/10, 0xa, 0x0, 0x0, 0x0) 10:29:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "19537d6e2467a831f65dd2850c9e923edb9d3c5cce1d71c8989d8c1f9de0d757e37416889d7151f8e31af60f8104b78dcd3e8ed573914ea742e322e57f89be"}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000300)="5833a22691", 0x5}], 0x1, &(0x7f0000000680)={0x10}, 0x10}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 10:29:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0x8001}) 10:29:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0xa01) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x5002}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 10:29:29 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:29 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) [ 107.844766] sg_write: data in/out 109/204 bytes for SCSI command 0x0-- guessing data in; [ 107.844766] program syz-executor2 not setting count and/or reply_len properly [ 107.914606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:29:29 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) write(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:29 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000e40)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f0000000c00)=""/235}, &(0x7f0000000d00)="951d21ff82ab", &(0x7f0000000ac0)=""/116, 0x0, 0x0, 0x0, &(0x7f0000000e00)}) [ 107.965261] sg_write: data in/out 109/204 bytes for SCSI command 0x0-- guessing data in; [ 107.965261] program syz-executor2 not setting count and/or reply_len properly [ 108.010710] print_req_error: I/O error, dev loop0, sector 0 [ 108.016670] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 108.024516] print_req_error: I/O error, dev loop0, sector 8 [ 108.030346] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 108.038162] print_req_error: I/O error, dev loop0, sector 16 [ 108.044090] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 108.051878] print_req_error: I/O error, dev loop0, sector 24 [ 108.057851] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 108.065989] print_req_error: I/O error, dev loop0, sector 32 [ 108.071894] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 108.079755] print_req_error: I/O error, dev loop0, sector 40 [ 108.085660] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 108.093468] print_req_error: I/O error, dev loop0, sector 48 [ 108.099365] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 108.107186] print_req_error: I/O error, dev loop0, sector 56 [ 108.113084] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 108.121230] print_req_error: I/O error, dev loop0, sector 64 [ 108.127584] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 108.135396] print_req_error: I/O error, dev loop0, sector 72 [ 108.141651] Buffer I/O error on dev loop0, logical block 9, lost async page write 10:29:30 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bond0\x00', 0x400}) 10:29:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 10:29:30 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000e40)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f0000000c00)=""/235}, &(0x7f0000000d00)="951d21ff82ab", &(0x7f0000000ac0)=""/116, 0x0, 0x0, 0x0, &(0x7f0000000e00)}) 10:29:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) write(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:30 executing program 3: write(0xffffffffffffffff, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:30 executing program 4: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@multicast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'team0\x00'}) socketpair$inet(0x2, 0x7ffff, 0x400, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffc, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000003c0)={0xd7, 0x128}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000000}) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x2000000204000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[]) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/10, 0xa, 0x0, 0x0, 0x0) 10:29:30 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snapshot\x00', 0x4000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x8000000000000001, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppoe, &(0x7f0000000040)=0x80) 10:29:30 executing program 1: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@multicast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'team0\x00'}) socketpair$inet(0x2, 0x7ffff, 0x400, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffc, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000003c0)={0xd7, 0x128}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000000}) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x2000000204000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[]) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/10, 0xa, 0x0, 0x0, 0x0) 10:29:30 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 10:29:30 executing program 3: r0 = socket(0x0, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x1, 0x0, 0x0, 'P'}) 10:29:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}], 0xa, "1f6fa95e7f46505032a00fe6a0d9f2c9d34b23435fa1235ef317c1"}, 0x30) 10:29:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) write(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xfffffffffffffbff) 10:29:30 executing program 4: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@multicast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'team0\x00'}) socketpair$inet(0x2, 0x7ffff, 0x400, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffc, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000003c0)={0xd7, 0x128}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000000}) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x2000000204000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[]) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/10, 0xa, 0x0, 0x0, 0x0) 10:29:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x1, 0x0, 0x0, 'P'}) 10:29:30 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) 10:29:30 executing program 1: getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) sysinfo(&(0x7f0000000680)=""/21) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="80c93d342421ae91162a1fdc20ba4e03", 0x10) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000002c0)) sendfile(r1, 0xffffffffffffffff, &(0x7f00000006c0), 0x6) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 10:29:30 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"626373685c41000f00000038c500", 0x2}) dup2(r0, r1) 10:29:30 executing program 3: r0 = socket(0x400000000010, 0x0, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:30 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:30 executing program 0: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2}, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2}, 0x0, 0x1, 0x3, 0x0, 0x0, &(0x7f00000005c0)='ip6_vti0\x00', 0xc}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r0, r1) 10:29:31 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x5002}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) 10:29:31 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)=0x0) getpgrp(r0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200), 0x8) sysinfo(&(0x7f0000000680)=""/21) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r3 = syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="80c93d342421ae91162a1fdc20ba4e03", 0x10) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f00000008c0)={0x0, &(0x7f0000000800)=""/155}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a40)={0x3, &(0x7f0000000540)=[{0xffffffff, 0x7fff, 0x7, 0x4}, {0x800, 0x100000000, 0x6}, {0x28f, 0x59e3, 0x2, 0x5}]}, 0x10) sendfile(r4, r1, &(0x7f00000006c0), 0x6) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f00000003c0)) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) 10:29:31 executing program 4: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@multicast2}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'team0\x00'}) socketpair$inet(0x2, 0x7ffff, 0x400, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffc, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000003c0)={0xd7, 0x128}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000400)={0x80000000}) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rfkill\x00', 0x2000000204000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[]) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/10, 0xa, 0x0, 0x0, 0x0) 10:29:31 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee1000c0800060000000000", 0x24) 10:29:31 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x5002}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0), 0x0) 10:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:31 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "19537d6e2467a831f65dd2850c9e923edb9d3c5cce1d71c8989d8c1f9de0d757e37416889d7151f8e31af60f8104b78dcd3e8ed573914ea742e322e57f89be"}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000300)="5833a22691", 0x5}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000680)={0x10}, 0x10}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 10:29:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) 10:29:31 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340), 0x0) 10:29:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvfrom(r0, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) 10:29:31 executing program 1: getpgrp(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) sysinfo(&(0x7f0000000680)=""/21) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="80c93d342421ae91162a1fdc20ba4e03", 0x10) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000002c0)) sendfile(r1, 0xffffffffffffffff, &(0x7f00000006c0), 0x6) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 10:29:31 executing program 6: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 10:29:31 executing program 7: r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040), 0x4) 10:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) [ 109.631214] sg_write: data in/out 109/204 bytes for SCSI command 0x0-- guessing data in; [ 109.631214] program syz-executor0 not setting count and/or reply_len properly 10:29:31 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340), 0x0) 10:29:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvfrom(r0, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) 10:29:31 executing program 6: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) 10:29:31 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)) getpgrp(0x0) get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000200), 0x8) sysinfo(&(0x7f0000000680)=""/21) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000640)=0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000380)="80c93d342421ae91162a1fdc20ba4e03", 0x10) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000008c0)={0x0, &(0x7f0000000800)=""/155}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000a40)={0x2, &(0x7f0000000540)=[{0x800, 0x100000000, 0x6}, {0x28f, 0x59e3, 0x2, 0x5}]}, 0x10) sendfile(r2, r0, &(0x7f00000006c0), 0x6) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)) sendfile(r1, r1, &(0x7f0000000080), 0x102000004) [ 109.743463] sg_write: data in/out 109/204 bytes for SCSI command 0x0-- guessing data in; [ 109.743463] program syz-executor0 not setting count and/or reply_len properly 10:29:31 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "19537d6e2467a831f65dd2850c9e923edb9d3c5cce1d71c8989d8c1f9de0d757e37416889d7151f8e31af60f8104b78dcd3e8ed573914ea742e322e57f89be"}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000300)="5833a22691efb207098ca22f9eb9dcff4e1512ec00ee2d08c816d0454ded9f0d4c3e7a5ecc", 0x25}], 0x1, &(0x7f0000000680)={0x10}, 0x10}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 10:29:31 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340), 0x0) [ 109.948128] sg_write: data in/out 129167213/200 bytes for SCSI command 0xcc-- guessing data in; [ 109.948128] program syz-executor7 not setting count and/or reply_len properly [ 110.031375] sg_write: data in/out 129167213/200 bytes for SCSI command 0xcc-- guessing data in; [ 110.031375] program syz-executor7 not setting count and/or reply_len properly 10:29:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvfrom(r0, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) 10:29:32 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000001e00)=[{&(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "19537d6e2467a831f65dd2850c9e923edb9d3c5cce1d71c8989d8c1f9de0d757e37416889d7151f8e31af60f8104b78dcd3e8ed573914ea742e322e57f89be"}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000300)="5833a22691", 0x5}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000680)={0x10}, 0x10}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 10:29:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x10001) 10:29:32 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) close(r0) 10:29:32 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@loopback={0x0, 0x1}, 0x0, r1}) 10:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:32 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200", 0x12) 10:29:32 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file1\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x4) [ 110.217354] sg_write: data in/out 109/204 bytes for SCSI command 0x0-- guessing data in; [ 110.217354] program syz-executor0 not setting count and/or reply_len properly 10:29:32 executing program 6: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x10020000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000000c0)) 10:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000080)=""/19, 0xffffff5c) 10:29:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvfrom(r0, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) 10:29:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @loopback=0x7f000001}}) 10:29:32 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/192, 0xc0}], 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) getpeername$llc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) 10:29:32 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200", 0x12) 10:29:32 executing program 6: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x40010, 0x0) readv(r1, &(0x7f0000002ac0)=[{&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000900)=""/68, 0x44}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/128, 0x80}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/169, 0xa9}], 0x8) unshare(0x400) setsockopt(r1, 0xfffffffffffffffe, 0x5, &(0x7f0000002b40)="25c160226a2bb59fc631e4041cffe8379c74cedcda8d71918968aef5088f0f94997033c6ea2d916b031070edf63eb9021a2ec7b3997cf5a6270ac5bcbf7904bcb5f5cb10c7cf37f28c17830eaa4ecd89b6287d7caada6fd9a5179b57692886209f9ff60b81a7231ef6291d2bf34a44659ff1b793c7e778af946a2ab0b114f206e9e52cf9de28e902a506f9ba9bec79460b09036f7833fc3d04d9fa6041f8bd071601e13d5ef70c3749cf68560d395700c71cf160c7c624ddb8696d692ef16bbfffac3d79be984b70d4e9f096826b5e73", 0xd0) r2 = getpgid(0xffffffffffffffff) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)=0x1, 0x4) accept4$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@mcast2={0xff, 0x2, [], 0x1}, 0x7d, r3}) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f00000000c0)={0x3, 0x8000, 0x7f, 0x1, 0x100000001, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000004c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x6a, r4}) bind$ax25(r1, &(0x7f0000000040)={0x3, {"75f4f8ea34f463"}, 0x400}, 0x10) mq_timedreceive(r0, &(0x7f0000000200)=""/68, 0xfffffffffffffe91, 0x0, &(0x7f0000000100)) 10:29:32 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200", 0x12) 10:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) r1 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"626373685c41000f00000038c500", 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 10:29:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) recvfrom(r0, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) [ 110.637668] capability: warning: `syz-executor6' uses 32-bit capabilities (legacy support in use) 10:29:32 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="1bd45006000000d1240970") r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x195) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xeffdffff00011000, 0x0, 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/244, 0xf4) close(r0) 10:29:32 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) r1 = memfd_create(&(0x7f00000000c0)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r1, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 10:29:32 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000002100255107000165ff00fc020200000900100f004ee100", 0x1b) 10:29:33 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file1\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 10:29:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvfrom(r0, &(0x7f0000000100)=""/98, 0x62, 0x2, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) 10:29:33 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x80000000802) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c0f2a0b31f2484b2b3301f8ac31efd8b8db", @ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16], 0x22) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 111.519054] ================================================================== [ 111.526475] BUG: KMSAN: uninit-value in __queue_work+0x1b2/0x1f00 [ 111.532710] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.17.0-rc5+ #2 [ 111.539181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.548695] Call Trace: [ 111.551258] [ 111.553395] dump_stack+0x185/0x1d0 [ 111.557014] ? __queue_work+0x1b2/0x1f00 [ 111.561065] kmsan_report+0x149/0x260 [ 111.564894] __msan_warning_32+0x6e/0xc0 [ 111.568946] __queue_work+0x1b2/0x1f00 [ 111.572820] delayed_work_timer_fn+0xa1/0xd0 [ 111.577210] call_timer_fn+0x280/0x5d0 [ 111.581082] ? __queue_work+0x1f00/0x1f00 [ 111.585215] __run_timers+0xdec/0x11b0 [ 111.589102] ? __queue_work+0x1f00/0x1f00 [ 111.593241] ? irq_exit+0x202/0x240 [ 111.596859] ? run_timer_softirq+0x14/0x70 [ 111.601084] ? timers_dead_cpu+0x1010/0x1010 [ 111.605473] run_timer_softirq+0x43/0x70 [ 111.609519] __do_softirq+0x592/0x979 [ 111.613320] irq_exit+0x202/0x240 [ 111.616776] exiting_irq+0xe/0x10 [ 111.620214] smp_apic_timer_interrupt+0x64/0x90 [ 111.624865] apic_timer_interrupt+0xf/0x20 [ 111.629077] [ 111.631297] RIP: 0010:default_idle+0x20b/0x3e0 [ 111.635860] RSP: 0018:ffffffff8ac0fd90 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 111.643565] RAX: ffff8801fd432a78 RBX: 0000000000000000 RCX: ffff880000000000 [ 111.650834] RDX: ffff8801fd032a78 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 111.658173] RBP: ffffffff8ac0fdc8 R08: 0000000001080020 R09: 0000000000000002 [ 111.665424] R10: 0000000000000000 R11: ffffffff89fdb110 R12: ffffffff8ac0fe2f [ 111.672676] R13: ffffffff8ac372c0 R14: ffffffff8ac0fe2c R15: ffffffff8ac37b98 [ 111.679945] ? __cpuidle_text_start+0x8/0x8 [ 111.684252] ? __cpuidle_text_start+0x8/0x8 [ 111.688907] arch_cpu_idle+0x26/0x30 [ 111.692603] do_idle+0x36d/0x830 [ 111.695953] cpu_startup_entry+0x45/0x50 [ 111.700000] rest_init+0x1c1/0x1f0 [ 111.703530] ? hpet_time_init+0xd0/0xe0 [ 111.707503] start_kernel+0x1110/0x1120 [ 111.711464] x86_64_start_kernel+0xe4/0xf0 [ 111.715682] secondary_startup_64+0xa5/0xb0 [ 111.719989] [ 111.721603] Uninit was stored to memory at: [ 111.725913] kmsan_internal_chain_origin+0x12b/0x210 [ 111.731180] __msan_chain_origin+0x69/0xc0 [ 111.735414] __queue_delayed_work+0x3d1/0x450 [ 111.739910] queue_delayed_work_on+0x1e8/0x210 [ 111.744480] linkwatch_fire_event+0xa5d/0xbf0 [ 111.748971] netif_carrier_off+0x10b/0x150 [ 111.753197] __tun_detach+0x23c3/0x2790 [ 111.758805] tun_chr_close+0xda/0x1c0 [ 111.762590] __fput+0x458/0xa30 [ 111.765848] ____fput+0x37/0x40 [ 111.769116] task_work_run+0x22e/0x2b0 [ 111.773005] do_exit+0x110e/0x3930 [ 111.776564] do_group_exit+0x1a0/0x360 [ 111.780459] get_signal+0x1405/0x1ec0 [ 111.784262] do_signal+0xb8/0x1d20 [ 111.787799] prepare_exit_to_usermode+0x271/0x3a0 [ 111.792626] syscall_return_slowpath+0xe9/0x710 [ 111.797275] do_syscall_64+0x1ad/0x230 [ 111.801143] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 111.806307] Local variable description: ----tlb.i@ldt_arch_exit_mmap [ 111.812783] Variable was created at: [ 111.816491] ldt_arch_exit_mmap+0x46/0x160 [ 111.820710] exit_mmap+0x410/0x980 [ 111.824222] ================================================================== [ 111.831569] Disabling lock debugging due to kernel taint [ 111.837008] Kernel panic - not syncing: panic_on_warn set ... [ 111.837008] [ 111.844389] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 4.17.0-rc5+ #2 [ 111.852263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 111.861614] Call Trace: [ 111.864183] [ 111.866339] dump_stack+0x185/0x1d0 [ 111.870101] panic+0x39d/0x950 [ 111.873287] ? __queue_work+0x1b2/0x1f00 [ 111.877349] kmsan_report+0x260/0x260 [ 111.881144] __msan_warning_32+0x6e/0xc0 [ 111.885199] __queue_work+0x1b2/0x1f00 [ 111.889102] delayed_work_timer_fn+0xa1/0xd0 [ 111.893497] call_timer_fn+0x280/0x5d0 [ 111.897369] ? __queue_work+0x1f00/0x1f00 [ 111.901501] __run_timers+0xdec/0x11b0 [ 111.905372] ? __queue_work+0x1f00/0x1f00 [ 111.909506] ? irq_exit+0x202/0x240 [ 111.913117] ? run_timer_softirq+0x14/0x70 [ 111.917338] ? timers_dead_cpu+0x1010/0x1010 [ 111.921733] run_timer_softirq+0x43/0x70 [ 111.925802] __do_softirq+0x592/0x979 [ 111.929591] irq_exit+0x202/0x240 [ 111.933033] exiting_irq+0xe/0x10 [ 111.936474] smp_apic_timer_interrupt+0x64/0x90 [ 111.941132] apic_timer_interrupt+0xf/0x20 [ 111.945352] [ 111.947582] RIP: 0010:default_idle+0x20b/0x3e0 [ 111.952141] RSP: 0018:ffffffff8ac0fd90 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 111.959833] RAX: ffff8801fd432a78 RBX: 0000000000000000 RCX: ffff880000000000 [ 111.967087] RDX: ffff8801fd032a78 RSI: aaaaaaaaaaaab000 RDI: ffffea0000000000 [ 111.974339] RBP: ffffffff8ac0fdc8 R08: 0000000001080020 R09: 0000000000000002 [ 111.981604] R10: 0000000000000000 R11: ffffffff89fdb110 R12: ffffffff8ac0fe2f [ 111.988863] R13: ffffffff8ac372c0 R14: ffffffff8ac0fe2c R15: ffffffff8ac37b98 [ 111.996142] ? __cpuidle_text_start+0x8/0x8 [ 112.000449] ? __cpuidle_text_start+0x8/0x8 [ 112.004762] arch_cpu_idle+0x26/0x30 [ 112.008462] do_idle+0x36d/0x830 [ 112.011819] cpu_startup_entry+0x45/0x50 [ 112.015882] rest_init+0x1c1/0x1f0 [ 112.019405] ? hpet_time_init+0xd0/0xe0 [ 112.023361] start_kernel+0x1110/0x1120 [ 112.027340] x86_64_start_kernel+0xe4/0xf0 [ 112.031563] secondary_startup_64+0xa5/0xb0 [ 112.036466] Dumping ftrace buffer: [ 112.039986] (ftrace buffer empty) [ 112.043671] Kernel Offset: disabled [ 112.047274] Rebooting in 86400 seconds..