[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.105478] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 43.028661] random: sshd: uninitialized urandom read (32 bytes read) [ 43.589730] random: sshd: uninitialized urandom read (32 bytes read) [ 45.355686] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. [ 50.913900] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/10 13:43:52 fuzzer started [ 52.117396] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/10 13:43:54 dialing manager at 10.128.0.26:34019 2018/08/10 13:43:56 syscalls: 1 2018/08/10 13:43:56 code coverage: enabled 2018/08/10 13:43:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/10 13:43:56 setuid sandbox: enabled 2018/08/10 13:43:56 namespace sandbox: enabled 2018/08/10 13:43:56 fault injection: enabled 2018/08/10 13:43:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/10 13:43:56 net packed injection: enabled 2018/08/10 13:43:56 net device setup: enabled [ 56.636643] random: crng init done 13:45:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5435, &(0x7f0000000040)) 13:45:15 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c, 0x0) mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000014000/0x4000)=nil, 0x4000}, 0x1}) 13:45:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000000001b7bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005404000001ed00004704000000ffffffcd460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 13:45:15 executing program 7: unshare(0x8000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="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") ioctl$SG_GET_NUM_WAITING(r0, 0x80086601, &(0x7f0000000380)) 13:45:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 13:45:15 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x1e, "6a6ca7f0f90482d03d8c3ec64453d4a34011e5630455d1ff4a54e023914cd06a474ca8757df552fb82a4cc50e35063d21d58f87164877f063c6b750fe8fb31a132ac831e0e795394582d70e3850942b03c05ae46017de5ff13d99406f1f75eca445554a71083e2740ee7e55a27e0dca902e4b16a794aa28d24bc90cf0add"}, 0x80) 13:45:15 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="5500000018007f5300fe01b2a4a280930a06000000a84308910000fdff00080000000c0000dc1338de448daa7227c43ab82200000600000000000000bf85c942dd678a7d75da7475154be0933e9a78afc5a51b8727", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 13:45:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x64) [ 135.949324] IPVS: ftp: loaded support on port[0] = 21 [ 135.951405] IPVS: ftp: loaded support on port[0] = 21 [ 135.968802] IPVS: ftp: loaded support on port[0] = 21 [ 135.970763] IPVS: ftp: loaded support on port[0] = 21 [ 136.014150] IPVS: ftp: loaded support on port[0] = 21 [ 136.036928] IPVS: ftp: loaded support on port[0] = 21 [ 136.053973] IPVS: ftp: loaded support on port[0] = 21 [ 136.054415] IPVS: ftp: loaded support on port[0] = 21 [ 138.421665] ip (4709) used greatest stack depth: 53712 bytes left [ 140.440181] ip (4824) used greatest stack depth: 53432 bytes left [ 140.882502] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.889121] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.931189] device bridge_slave_0 entered promiscuous mode [ 141.043753] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.050273] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.095280] device bridge_slave_0 entered promiscuous mode [ 141.114612] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.121107] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.157401] device bridge_slave_0 entered promiscuous mode [ 141.185583] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.192107] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.203745] device bridge_slave_0 entered promiscuous mode [ 141.220348] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.226875] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.250700] device bridge_slave_0 entered promiscuous mode [ 141.276772] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.283437] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.314405] device bridge_slave_0 entered promiscuous mode [ 141.333110] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.339591] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.351448] device bridge_slave_0 entered promiscuous mode [ 141.360224] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.366661] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.379084] device bridge_slave_1 entered promiscuous mode [ 141.404667] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.411137] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.440389] device bridge_slave_1 entered promiscuous mode [ 141.457631] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.464182] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.483693] device bridge_slave_0 entered promiscuous mode [ 141.514227] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.520786] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.554370] device bridge_slave_1 entered promiscuous mode [ 141.569480] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.575977] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.587629] device bridge_slave_1 entered promiscuous mode [ 141.630323] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.636865] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.652579] device bridge_slave_1 entered promiscuous mode [ 141.660764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.669234] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.675698] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.721938] device bridge_slave_1 entered promiscuous mode [ 141.740392] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.746883] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.770359] device bridge_slave_1 entered promiscuous mode [ 141.781872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.789115] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.795550] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.829597] device bridge_slave_1 entered promiscuous mode [ 141.852299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.868860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.900296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 141.930733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 141.953758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.073260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.111193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.127223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 142.155242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.179071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.226678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.240123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.414953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.459556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 142.936731] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.989931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.128737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.188197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.228529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.240794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.252215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.278069] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.300665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.361193] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.466390] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.539987] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.555458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.569400] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.599330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.610727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.635935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.652851] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.665402] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.676759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.754451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.761554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.864599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.871592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.928212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.935243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.958472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 143.965536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.987114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.000637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.009871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.040156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.090443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.100626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.115629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.140002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.167612] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.178502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.194942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.201935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.223748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.230701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.307601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.314598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.394384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.401380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.475770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.482906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.898298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.944202] team0: Port device team_slave_0 added [ 145.036410] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.060521] team0: Port device team_slave_0 added [ 145.096904] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.109413] team0: Port device team_slave_0 added [ 145.115503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.142643] team0: Port device team_slave_0 added [ 145.225751] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.251319] team0: Port device team_slave_1 added [ 145.291514] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.326471] team0: Port device team_slave_0 added [ 145.344513] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.373221] team0: Port device team_slave_0 added [ 145.402959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.422243] team0: Port device team_slave_1 added [ 145.441531] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.456282] team0: Port device team_slave_1 added [ 145.466453] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.480422] team0: Port device team_slave_1 added [ 145.534804] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.552212] team0: Port device team_slave_0 added [ 145.576683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.584225] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 145.602859] team0: Port device team_slave_0 added [ 145.630351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.655187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.687391] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.695814] team0: Port device team_slave_1 added [ 145.733444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.745589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.762268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.789779] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.800274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.807916] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.817581] team0: Port device team_slave_1 added [ 145.825983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.868621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.899420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.923549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.965197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 145.985642] team0: Port device team_slave_1 added [ 146.016210] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.037683] team0: Port device team_slave_1 added [ 146.045749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.055333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.073717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.118118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.134678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.150898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.186798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.197543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.210936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.220644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.258239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.279407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.297769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.305508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.314768] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.325550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.362680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.393304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.412884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.440114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.449619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.473814] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.487168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.494353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.526058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.543720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.561478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.586816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.604435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.615075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.631720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.638787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.651204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.667192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.677724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.687554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.701604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.715558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.725557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.763004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.788243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.815052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.847494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.882665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.912371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.930336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.940552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.961011] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.969803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.982817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.005865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.031754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.051382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.074502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.102445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.121267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.128537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.136146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.151926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.180297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.204860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.220927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.238005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.253222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.260702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.270513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.281461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.289919] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.306881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.320838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.354763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.377090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.400432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.422719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.439917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.462326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 147.479541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.522851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.565058] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.572674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.587769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.784770] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 147.792340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.807376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.689614] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.696131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.703053] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.709500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.749703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.756454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.776702] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.783186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.790083] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.796541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.811209] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.818336] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.824793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.831662] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.838124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.857867] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.871482] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.877949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.884802] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.891270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.913769] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.936475] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.942947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.949793] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.956271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.005006] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.013731] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.020192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.027112] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.033572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.078156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.156914] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.163418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.170364] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.176808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.243705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.360949] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.367440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.374307] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.380744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.451300] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 151.777925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.800238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.832875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.851511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.873510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.897418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.906295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.276277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.484319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.531605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.718866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.882193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.944480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.966928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.277810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.536687] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.608307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.666833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.904942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.976229] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.050520] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.184806] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.481270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.755391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.761671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.772116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.838654] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.856165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.885793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.923789] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.930456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.943702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.080302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.086612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.101934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.214220] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.223128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.237917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.302622] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.311123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.334167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.429264] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.435598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.446827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.802177] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.845831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 166.852242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.865103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.068675] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.145565] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.425620] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.482298] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.517710] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.564817] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.146638] 8021q: adding VLAN 0 to HW filter on device team0 13:45:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000000001b7bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005404000001ed00004704000000ffffffcd460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 13:45:55 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) close(r0) getsockname(r0, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) 13:45:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000000001b7bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005404000001ed00004704000000ffffffcd460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 13:45:55 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/204}, 0x18) 13:45:56 executing program 2: r0 = getpgid(0x0) r1 = getpgid(0x0) tgkill(r0, r1, 0x41) 13:45:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") get_mempolicy(&(0x7f00000000c0), &(0x7f00000001c0), 0x6, &(0x7f0000ff9000/0x4000)=nil, 0x0) 13:45:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x0, &(0x7f00000000c0), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth0_to_bridge\x00', 'ip6gretap0\x00', 'syz_tun\x00', @broadcast, [], @remote, [], 0xb0, 0xb0, 0x100, [@quota={'quota\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz1\x00', 0xfa60}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', 'veth0_to_team\x00', 'ip6gre0\x00', @empty, [], @local, [], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0x2a8) 13:45:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mlockall(0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) 13:45:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7000000000001b7bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005404000001ed00004704000000ffffffcd460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 13:45:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081f8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) sendfile(r1, r2, 0x0, 0x8000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 13:45:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000900000005000600000000000a000000000000000000000000000000000000000000000402000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ad8b85c8278fb8d5aa7fe171ac34721f755b06ec2a08594e3d1798e4fc2959ba9b5a7b0739336a57525a30d463ea43084dc1840039649673b733890eb3dcc22d9e747a71a86cc8c8dda870000000002000100000000000000050080ffffff05000500000000000a00000000000000fe8000000800000010000000000000ff0000000000000000"], 0xd8}}, 0x0) 13:45:56 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 13:45:56 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000040)) 13:45:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mlockall(0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) [ 175.864654] netlink: 57 bytes leftover after parsing attributes in process `syz-executor6'. [ 175.907162] IPv6: Can't replace route, no match found 13:45:57 executing program 6: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x800000031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f000031aff8)) 13:45:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x0, 0x0, 0x20}, 0x4) 13:45:57 executing program 3: setrlimit(0x7, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f0000000ff8), 0x8, 0x0) 13:45:57 executing program 0: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0xc0045103, &(0x7f0000000000)) 13:45:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mlockall(0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) 13:45:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x40016b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffffffffff8, 0x3b2, &(0x7f00000001c0)=""/251, 0x0, 0x1}, 0x48) 13:45:57 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x400002e07) ioctl(r0, 0x6, &(0x7f0000000280)="075cc80700145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1de72acd215630aa, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x7, 0x7b, 0x5, 0x0, 0x4f48, 0x8, 0x5}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @loopback, 0x1}, 0x10) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000140)="4023c2eee15d4e87f71d5a521bc33b0aa7195a30a563bfb069c041f8af76d0fb97aabb60c7d83a29028ca2fa1ed2cd8777e27fc2bd2dd9a7b1c8044e2ed4f9610c5b880286a6987369339e", 0x4b) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000080)="9b92b38671f98328efc7f70bb9030f6aab3d8fd1ad9b88594e8cf963791f351f306f47d5e4e36bc1dcc43f5e5254a92508ac51c49cd00a42e797c69a"}, 0x10) 13:45:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mlockall(0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) 13:45:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x0, 0x0, 0x20}, 0x4) 13:45:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000400)='./file0\x00', &(0x7f00000009c0)=[&(0x7f0000000440)='team0\x00', &(0x7f00000004c0)='veth0\x00', &(0x7f0000000500)='team0\x00', &(0x7f00000008c0)='(md5summime_type)trusted,vboxnet1\x00', &(0x7f0000000900)='team0\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='\x00'], &(0x7f0000000b00)=[&(0x7f0000000a00)='team0\x00', &(0x7f0000000a40)='veth0\x00', &(0x7f0000000a80)='team0\x00', &(0x7f0000000ac0)='(bdev\x00'], 0x1000) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x898}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000780)={r3, 0x0, 0x3ff, 0x100}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r4}) r6 = socket$inet6(0xa, 0x6, 0x800) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', r5}) listen(r6, 0x1000007ffe) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000480)) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x1, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)={0x2, 0x1, [0x800000cbf, 0x200, 0x10c2e, 0x99]}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000380)=0x9, 0x1) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002940)={&(0x7f0000002900)='team0\x00'}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e20, 0x9, @local, 0xfffffffffffffae5}, {0xa, 0x4e20, 0x101, @local, 0x9}, 0xfffffffffffffbff, [0x4, 0x5, 0x8, 0x1f, 0x9, 0xfffffffffffffff9, 0x1, 0x2]}, 0x5c) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000000700)=0x3ff, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000800)=ANY=[@ANYBLOB="401cd138a82dae42f9c106d9000001f6a32122ab67206ac342cc8ad4902950dd4245f5a3fb7cb4a5b24509573129639c012591f8e7521be65a738ea9dac41fc29dafa473adba5afe8f65dada649dca9f1af7803aa41bd1e0ccb8dc1bd6fad54c50f7f796bce1d580c76587dec1be7e00718ae11fb56e864b49d28c3bdafb7a11b0d3eac1db7ad1a646b6ce4e3425678da16ef1f7df61de"]) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x0, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) 13:45:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:57 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 13:45:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x40016b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffffffffff8, 0x3b2, &(0x7f00000001c0)=""/251, 0x0, 0x1}, 0x48) 13:45:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x0, 0x0, 0x20}, 0x4) 13:45:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200), &(0x7f0000000000)=0x6) 13:45:57 executing program 6: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000001200), &(0x7f0000001240)="ca", 0x1, 0xfffffffffffffffd) getgroups(0x2, &(0x7f0000002240)=[0xee00, 0xffffffffffffffff]) keyctl$chown(0x4, r0, 0x0, r1) 13:45:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:57 executing program 7: socketpair$unix(0x1, 0x4000000000003, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) r1 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000100)=""/188) 13:45:57 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) 13:45:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x40016b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffffffffff8, 0x3b2, &(0x7f00000001c0)=""/251, 0x0, 0x1}, 0x48) 13:45:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f00000000c0)=0xf4) 13:45:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000004c0)={0x0, 0x0, 0x20}, 0x4) 13:45:58 executing program 6: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0x0, 0x0, 0x0, @random="f32e2c3615c9", 'sit0\x00'}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="025cc80700145f8f764070") syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 13:45:58 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 177.254951] dccp_invalid_packet: pskb_may_pull failed 13:45:58 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000440)=""/186, 0x6da) getdents64(r0, &(0x7f00000001c0)=""/87, 0x57) [ 177.318752] dccp_invalid_packet: pskb_may_pull failed 13:45:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x40016b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffffffffff8, 0x3b2, &(0x7f00000001c0)=""/251, 0x0, 0x1}, 0x48) 13:45:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x87, 0x7c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x80000001, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000040)) 13:45:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) unlink(&(0x7f0000000340)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000008000000000000008b00000000006676656d310000000000f7ffffff0000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367000000000000006700000000000000000000000000000000"], 0x90) 13:45:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025c3f0a00145f8f764070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = epoll_create1(0x0) flock(r2, 0x2) r3 = epoll_create1(0x0) flock(r3, 0x100000000000001) dup2(r1, r2) 13:45:58 executing program 6: mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000005000/0x3000)=nil) 13:45:58 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 13:45:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000002a00)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000001940)=""/4096, 0x1000) 13:45:58 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'dh\x00', 0x0, 0x1, 0x7e}, 0x2c) 13:45:58 executing program 7: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) 13:45:58 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x2000000000008040, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 13:45:58 executing program 6: syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00') r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x4000000000080}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) 13:45:59 executing program 2: io_setup(0x1, &(0x7f0000000040)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000540), 0x2d8}]) [ 178.023825] rpcbind: RPC call returned error 22 [ 178.040826] rpcbind: RPC call returned error 22 13:45:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1}, 0x10) 13:45:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0xd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000100), &(0x7f0000000080), 0x1}, 0x20) 13:45:59 executing program 7: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) 13:45:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) dup2(r2, r1) 13:45:59 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x2000000000008040, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 13:45:59 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000480), &(0x7f0000001480)}}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) r1 = getpgid(0x0) tkill(r1, 0x15) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="9000000000000000020000000000000001000008000000000000008b00000000106676656d310000000000f7ffffff0000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370755366d969631141260b1fab10ccd4dccea33f0c7fe336cb602e746367726f757024636700"], 0x90) [ 178.463253] rpcbind: RPC call returned error 22 13:45:59 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:45:59 executing program 7: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) 13:45:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000280), 0xc) 13:45:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8}]}, 0x30}}, 0x0) 13:45:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1}, 0x10) 13:45:59 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x7fffffff, &(0x7f0000000100), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 13:45:59 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x2000000000008040, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 178.765817] netlink: 'syz-executor4': attribute type 39 has an invalid length. [ 178.799583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:45:59 executing program 7: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) 13:45:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x136e, 0x0) ppoll(&(0x7f0000000040)=[{r2}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) [ 178.878585] rpcbind: RPC call returned error 22 13:45:59 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:46:00 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x0, 0xffffffffffffffff, 0x30, 0xffffffffffffffff, @ib={0x1b, 0x0, 0x0, {"66c75700422e2b830aaf76dadd390cfd"}}}}, 0xa0) 13:46:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x381480, 0x0) recvmmsg(r0, &(0x7f0000002f00), 0x0, 0x0, &(0x7f0000003040)) 13:46:00 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x2000000000008040, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0xa00000400, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 13:46:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1}, 0x10) 13:46:00 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x42) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)=0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0xfffffffffffffffe) [ 179.294559] rpcbind: RPC call returned error 22 13:46:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000480), &(0x7f0000001480)}}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) r1 = getpgid(0x0) tkill(r1, 0x15) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="9000000000000000020000000000000001000008000000000000008b00000000106676656d310000000000f7ffffff0000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370755366d969631141260b1fab10ccd4dccea33f0c7fe336cb602e746367726f757024636700"], 0x90) 13:46:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000040)={'rose0\x00', @ifru_ivalue}) 13:46:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:46:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = epoll_create(0x9) r2 = epoll_create(0x4) r3 = socket$rds(0x15, 0x5, 0x0) r4 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000001800)) 13:46:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$unix(r0, &(0x7f0000000140)=""/222, 0xde, 0x0, 0x0, 0x217) shutdown(r1, 0x2) 13:46:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:46:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1}, 0x10) 13:46:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:46:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000040)={'rose0\x00', @ifru_ivalue}) 13:46:00 executing program 6: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r0) connect$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 13:46:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$unix(r0, &(0x7f0000000140)=""/222, 0xde, 0x0, 0x0, 0x217) shutdown(r1, 0x2) 13:46:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 13:46:01 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:46:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000040)={'rose0\x00', @ifru_ivalue}) 13:46:01 executing program 7: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$unix(r0, &(0x7f0000000140)=""/222, 0xde, 0x0, 0x0, 0x217) shutdown(r1, 0x2) [ 180.310746] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:46:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000480), &(0x7f0000001480)}}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) r1 = getpgid(0x0) tkill(r1, 0x15) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="9000000000000000020000000000000001000008000000000000008b00000000106676656d310000000000f7ffffff0000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370755366d969631141260b1fab10ccd4dccea33f0c7fe336cb602e746367726f757024636700"], 0x90) 13:46:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x2, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) dup3(r1, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/240}, 0x18) 13:46:01 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) unshare(0x20400) ioctl$int_in(r0, 0x8000008004500b, &(0x7f0000000080)) 13:46:01 executing program 6: unshare(0x20400) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 13:46:01 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:46:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000040)={'rose0\x00', @ifru_ivalue}) 13:46:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$unix(r0, &(0x7f0000000140)=""/222, 0xde, 0x0, 0x0, 0x217) shutdown(r1, 0x2) 13:46:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0xffffffff80000001]) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) 13:46:01 executing program 2: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"760400000000000000000000eaeabb3f", 0x4201}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 13:46:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 13:46:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") semctl$IPC_RMID(0x0, 0x0, 0x10) 13:46:01 executing program 6: unshare(0x20400) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 13:46:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x2, 0x28021) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x11, 0x8000005d}, {}], 0x30) 13:46:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000480), &(0x7f0000001480)}}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) r1 = getpgid(0x0) tkill(r1, 0x15) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="9000000000000000020000000000000001000008000000000000008b00000000106676656d310000000000f7ffffff0000000000002c000000000000619f053823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370755366d969631141260b1fab10ccd4dccea33f0c7fe336cb602e746367726f757024636700"], 0x90) 13:46:02 executing program 7: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x3, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000bc0], 0x0, &(0x7f0000007ec0), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x11, 0xf8, 'irlan0\x00', 'bridge_slave_0\x00', 'ip6gre0\x00', 'veth0_to_team\x00', @random="178c82b7078b", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xe8}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x1000000000000000, 0x5, 0x0, 0x0, "7afe63e36edbcddcda65d7bbc41ff0d68cbbcff76512d04494e7857bcc70b7ed9379da33dfda02914f6c84c1f71b3b54c5212f731040533e521a8de810c86f3d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'ip_vti0\x00', 'bridge_slave_1\x00', 'ip6_vti0\x00', @local, [], @link_local, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x298) 13:46:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x9, 0x4}, 0x8) close(r2) close(r0) 13:46:02 executing program 6: unshare(0x20400) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 13:46:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x0, 0x4}, 0xc) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xfffffffffffffe14) r2 = accept4(r1, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) shutdown(r2, 0x0) write$binfmt_misc(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1bd) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="196c86e6adee2f1fbf72832a7698ce917a2d9aab7fcf07dc3b0de7a10d9ee8ecb1592582bd093c21858704534672fb0562c322c15fdfc299801d9a"], 0x3b) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 13:46:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") lsetxattr(&(0x7f0000fc0000)='./file0\x00', &(0x7f0000000040)=@random={'user.', "2f2f73656c696e757800000101"}, &(0x7f0000fc0000)="2f2f73656c696e757800000101", 0x73, 0x0) 13:46:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 181.323108] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 13:46:02 executing program 6: unshare(0x20400) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 13:46:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 13:46:02 executing program 5: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x9, 0x4}, 0x8) close(r2) close(r0) 13:46:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 181.326353] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 181.747601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:46:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x3) 13:46:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x9, 0x4}, 0x8) close(r2) close(r0) 13:46:03 executing program 1: rt_sigaction(0x5, &(0x7f00000000c0)={0x1}, &(0x7f0000000100), 0x8, &(0x7f0000000180)) 13:46:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 13:46:03 executing program 7: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:03 executing program 6: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) dup3(r0, r1, 0x0) 13:46:03 executing program 1: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x200000000001, r2}) dup2(r0, r2) close(r1) 13:46:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 13:46:03 executing program 0: r0 = memfd_create(&(0x7f0000000200)="00eb000000000000", 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xad, &(0x7f0000000080), &(0x7f0000000000)) 13:46:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x9, 0x4}, 0x8) close(r2) close(r0) 13:46:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0}) dup3(r0, r1, 0x0) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 13:46:03 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x5) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="b65cc80700315f85714070") 13:46:03 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@routing, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:46:03 executing program 5: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x11, &(0x7f0000000240), 0x2ab) 13:46:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/220, 0xdc}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/15, 0xf}, {&(0x7f0000001400)=""/101, 0x65}, {&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000001480)=""/100, 0x64}], 0x7}}], 0x1, 0x0, &(0x7f00000001c0)) recvmmsg(r0, &(0x7f000000d040)=[{{&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000004040), 0x0, &(0x7f00000040c0)=""/108, 0x6c}}], 0x1, 0x0, &(0x7f000000d280)={0x77359400}) 13:46:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @reserved}, 0x10) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ntfs\x00', 0x0, 0x0) 13:46:04 executing program 3: r0 = socket$inet6(0xa, 0x80806, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") listen(r1, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}, {r0, 0x5001}, {r0, 0x404}, {r1, 0x10}, {r2, 0x8000}, {r2}], 0x6, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x4}, 0x8) 13:46:04 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@routing, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:46:04 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="00000600000000000000", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='#! ./file \n'], 0xc) execveat(r0, &(0x7f0000000280)='\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x1000) 13:46:04 executing program 7: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0x2c}}, 0x0) 13:46:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x1000000000013) listen(r2, 0x5) 13:46:04 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x5) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="b65cc80700315f85714070") 13:46:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f00000007c0)}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x88}, {&(0x7f0000000480)=""/60, 0x3b0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 13:46:04 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@routing, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:46:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x85ffffff, 0x201a7fd7, 0xa, 0x61, 0xff00}]}, &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xffe3, &(0x7f00001a7f05)=""/251}, 0x48) 13:46:04 executing program 5: open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 13:46:04 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@routing, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 13:46:04 executing program 2: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 13:46:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f00000007c0)}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x88}, {&(0x7f0000000480)=""/60, 0x3b0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 13:46:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/89, 0x59}], 0x6, &(0x7f0000000680)=""/49, 0x31}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0x7, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/75, 0x37e}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 13:46:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r2+10000000}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) tkill(r1, 0x1004000000016) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") 13:46:05 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x5) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="b65cc80700315f85714070") 13:46:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000003c0), 0x4) 13:46:05 executing program 1: modify_ldt$write2(0x11, &(0x7f0000c8cff7), 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/131, 0x755a856d1deebb76) 13:46:05 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) 13:46:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f00000007c0)}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x88}, {&(0x7f0000000480)=""/60, 0x3b0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 13:46:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) dup2(r0, r2) tkill(r1, 0x14) 13:46:05 executing program 1: unshare(0x20400) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 13:46:05 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x2b, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000001780)) 13:46:05 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x5) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="b65cc80700315f85714070") 13:46:05 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0xa, &(0x7f00000001c0)) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040), &(0x7f0000000080)='keyringeth0bdevmime_typeeth0+securitybdev+GPL\x00', 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="73be9fc4000c51c2822234e399cd88ff1ce2c726cee4a1cc6f21de51333e9bb32871cc24e6d55ae6b920bce6cdf44c1b9a42e1ef487c3430823291b20caae4f23b385b", 0x43, 0xfffffffffffffff9) 13:46:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) write(r0, &(0x7f0000000140), 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 13:46:06 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000013) 13:46:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}}], 0x18) 13:46:06 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f0000000105fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) 13:46:06 executing program 7: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffdaf}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000100)={0x0, 0x0, 0x1}) read(r2, &(0x7f0000481000)=""/128, 0x80) 13:46:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f00000002c0)=@generic, 0x80, &(0x7f00000007c0)}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x88}, {&(0x7f0000000480)=""/60, 0x3b0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 13:46:06 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getdents(0xffffffffffffffff, &(0x7f00000002c0)=""/217, 0xd9) accept(0xffffffffffffffff, &(0x7f0000000200)=@ipx, &(0x7f0000000080)=0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") waitid(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 13:46:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x0, 0x8, 0x4, 0x3, 0xffffffffffffff9c}, 0x2c) 13:46:06 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000080)) 13:46:06 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x10000000000025, &(0x7f0000000040)={0x1}) [ 185.477135] ================================================================== [ 185.484588] BUG: KMSAN: uninit-value in __se_sys_waitid+0x338/0xaa0 [ 185.491032] CPU: 1 PID: 7341 Comm: syz-executor6 Not tainted 4.18.0-rc8+ #33 [ 185.498240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.507611] Call Trace: [ 185.510244] dump_stack+0x17c/0x1c0 [ 185.513911] kmsan_report+0x188/0x2a0 [ 185.517757] kmsan_internal_check_memory+0x17e/0x1f0 [ 185.522898] ? kmsan_set_origin+0x93/0x150 [ 185.527172] kmsan_check_memory+0xb/0x10 [ 185.531272] __se_sys_waitid+0x338/0xaa0 [ 185.535379] ? kmsan_set_origin_inline+0x6b/0x120 [ 185.540255] ? __msan_poison_alloca+0x173/0x200 [ 185.544959] ? syscall_trace_enter+0x93/0xfb0 [ 185.549492] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 185.554921] __x64_sys_waitid+0x15d/0x1b0 [ 185.559115] ? __wake_up_parent+0xb0/0xb0 [ 185.563293] do_syscall_64+0x15b/0x220 [ 185.567213] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 185.572421] RIP: 0033:0x457089 [ 185.575620] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.595142] RSP: 002b:00007fc01174ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 185.602893] RAX: ffffffffffffffda RBX: 00007fc01174b6d4 RCX: 0000000000457089 [ 185.610183] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.617474] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.624771] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 185.632067] R13: 00000000004d6918 R14: 00000000004c9f80 R15: 0000000000000000 [ 185.639378] [ 185.641023] Local variable description: ----__pu_val131.i@__se_sys_waitid [ 185.647967] Variable was created at: [ 185.651716] __se_sys_waitid+0x15b/0xaa0 [ 185.655803] 0x2 [ 185.657796] [ 185.659436] Bytes 0-3 of 4 are uninitialized [ 185.663860] Memory access starts at ffff8801bbfefd70 [ 185.668972] ================================================================== [ 185.676338] Disabling lock debugging due to kernel taint [ 185.681800] Kernel panic - not syncing: panic_on_warn set ... [ 185.681800] [ 185.689202] CPU: 1 PID: 7341 Comm: syz-executor6 Tainted: G B 4.18.0-rc8+ #33 [ 185.697785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.707149] Call Trace: [ 185.709765] dump_stack+0x17c/0x1c0 [ 185.713424] panic+0x3c3/0x9a0 [ 185.716671] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 185.722152] kmsan_report+0x29e/0x2a0 [ 185.725981] kmsan_internal_check_memory+0x17e/0x1f0 [ 185.731111] ? kmsan_set_origin+0x93/0x150 [ 185.735380] kmsan_check_memory+0xb/0x10 [ 185.739468] __se_sys_waitid+0x338/0xaa0 [ 185.743552] ? kmsan_set_origin_inline+0x6b/0x120 [ 185.748417] ? __msan_poison_alloca+0x173/0x200 [ 185.753116] ? syscall_trace_enter+0x93/0xfb0 [ 185.757636] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 185.763040] __x64_sys_waitid+0x15d/0x1b0 [ 185.767235] ? __wake_up_parent+0xb0/0xb0 [ 185.771414] do_syscall_64+0x15b/0x220 [ 185.775341] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 185.780565] RIP: 0033:0x457089 [ 185.783764] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.803371] RSP: 002b:00007fc01174ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 185.811114] RAX: ffffffffffffffda RBX: 00007fc01174b6d4 RCX: 0000000000457089 [ 185.818406] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.825699] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.832983] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 185.840274] R13: 00000000004d6918 R14: 00000000004c9f80 R15: 0000000000000000 [ 185.847929] Dumping ftrace buffer: [ 185.851460] (ftrace buffer empty) [ 185.855156] Kernel Offset: disabled [ 185.858777] Rebooting in 86400 seconds..