[ 51.068525] audit: type=1800 audit(1545316329.108:26): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 52.588720] kauditd_printk_skb: 2 callbacks suppressed [ 52.588748] audit: type=1800 audit(1545316330.638:29): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 52.613827] audit: type=1800 audit(1545316330.648:30): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.112' (ECDSA) to the list of known hosts. 2018/12/20 14:32:25 fuzzer started 2018/12/20 14:32:30 dialing manager at 10.128.0.26:46613 2018/12/20 14:32:30 syscalls: 1 2018/12/20 14:32:30 code coverage: enabled 2018/12/20 14:32:30 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 14:32:30 setuid sandbox: enabled 2018/12/20 14:32:30 namespace sandbox: enabled 2018/12/20 14:32:30 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 14:32:30 fault injection: enabled 2018/12/20 14:32:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 14:32:30 net packet injection: enabled 2018/12/20 14:32:30 net device setup: enabled 14:32:59 executing program 0: unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000100)=""/133, &(0x7f0000000000)=0x85) syzkaller login: [ 101.980857] IPVS: ftp: loaded support on port[0] = 21 [ 103.377603] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.384227] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.392680] device bridge_slave_0 entered promiscuous mode [ 103.490070] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.496747] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.505412] device bridge_slave_1 entered promiscuous mode [ 103.589616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 103.671389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 103.926172] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.018061] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.110861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 104.118011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.204258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 104.211292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.473936] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 104.482754] team0: Port device team_slave_0 added [ 104.568560] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 104.577379] team0: Port device team_slave_1 added [ 104.662870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.755431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.843003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.850749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.860121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.948743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.956446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.965786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:33:03 executing program 1: r0 = socket(0x800000002b, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008850) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 105.818145] IPVS: ftp: loaded support on port[0] = 21 [ 106.199698] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.206339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.213521] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.220080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.229388] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.236508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.967839] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.974582] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.982955] device bridge_slave_0 entered promiscuous mode [ 108.149295] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.155963] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.164361] device bridge_slave_1 entered promiscuous mode [ 108.245870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.328872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.633741] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.801504] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.931782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 108.939585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.509357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.518067] team0: Port device team_slave_0 added [ 109.607450] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.616095] team0: Port device team_slave_1 added [ 109.773672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.780746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.789843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.931140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 109.938270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.947464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.102362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.109996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.119191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.282594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.290359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.299936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:33:08 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) [ 111.208026] IPVS: ftp: loaded support on port[0] = 21 [ 112.129057] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.135697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.142896] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.149444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.158680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.165235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.184149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.759170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 113.568506] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 113.575000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.582930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.857448] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.864110] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.872450] device bridge_slave_0 entered promiscuous mode [ 113.981921] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.988524] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.996771] device bridge_slave_1 entered promiscuous mode [ 114.215403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 114.259917] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.408365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 114.761829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 114.908863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.702398] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.711014] team0: Port device team_slave_0 added [ 115.837835] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.846646] team0: Port device team_slave_1 added [ 116.006342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.166021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.351442] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.359208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.368528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.501818] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 116.509742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.518973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:33:16 executing program 0: unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000100)=""/133, &(0x7f0000000000)=0x85) 14:33:16 executing program 0: unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000100)=""/133, &(0x7f0000000000)=0x85) [ 118.365816] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.372461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.379719] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.386372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.395380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 118.402850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 14:33:16 executing program 0: unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000100)=""/133, &(0x7f0000000000)=0x85) 14:33:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 14:33:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @scatter, &(0x7f00000002c0), &(0x7f0000000300)=""/99, 0xfffffffffffffffa, 0x0, 0x0, &(0x7f0000000380)}) 14:33:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 14:33:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 14:33:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 14:33:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 14:33:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) [ 119.828477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.835582] IPVS: ftp: loaded support on port[0] = 21 [ 120.573247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 121.337704] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 121.344084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.352308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.033523] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.672638] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.679186] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.687449] device bridge_slave_0 entered promiscuous mode [ 122.872772] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.879321] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.887634] device bridge_slave_1 entered promiscuous mode [ 123.070054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 123.294381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 123.845488] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 124.012166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 124.655648] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 124.664311] team0: Port device team_slave_0 added [ 124.762218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 124.770823] team0: Port device team_slave_1 added [ 124.873050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.041764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.224144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.231717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.240733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.440511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.448326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 125.455973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.465212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.024833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 14:33:24 executing program 1: r0 = socket(0x800000002b, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008850) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 126.718564] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 126.725030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.732990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.235145] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.350661] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.357241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.364480] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.371000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.380017] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.732409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 14:33:28 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 14:33:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 14:33:28 executing program 1: r0 = socket(0x800000002b, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008850) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 14:33:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 14:33:28 executing program 1: r0 = socket(0x800000002b, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20008850) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 131.318706] IPVS: ftp: loaded support on port[0] = 21 [ 132.599917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.797092] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.803708] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.812634] device bridge_slave_0 entered promiscuous mode [ 132.895302] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.901948] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.910069] device bridge_slave_1 entered promiscuous mode [ 132.926399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.989363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.068450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 133.242440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 133.251037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.259080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.309788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 133.393566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 133.474114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.481111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.562231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.569368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.588814] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.811279] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.819130] team0: Port device team_slave_0 added [ 133.896682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.905114] team0: Port device team_slave_1 added [ 133.987675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.075688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.163143] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.171047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.180579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.259295] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.267058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.276188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.197363] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.204001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.211200] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.217827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.226873] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.422713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 14:33:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @scatter, &(0x7f00000002c0), &(0x7f0000000300)=""/99, 0xfffffffffffffffa, 0x0, 0x0, &(0x7f0000000380)}) 14:33:33 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 14:33:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 14:33:33 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000500)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000017ff0)={&(0x7f00000001c0)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000001400)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) tkill(r2, 0x14) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0x0, 0x0, 0x0, 0x0, "9e2bdeefaf92d92bd8f41d356221a9fe7f8a66fea837a21005db0dcd0630bf89dc773678e2876878856b76b55a7478c2e2d9c3f25b4678e6ab366fc67b080974"}, 0x48}}, 0x0) 14:33:33 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0x1b, "0277f3a660bbf8a9766427c091a987824f57050ea3f2b48fc32b11"}, &(0x7f0000000100)=0x23) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}]}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=@dstopts={0x3f, 0x11, [], [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0xfffffffffffffff9}, @enc_lim={0x4, 0x1, 0xffffffff00000000}, @enc_lim, @calipso={0x7, 0x18, {0x67, 0x4, 0x8001, 0x7, [0x3e5, 0x3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7, 0x7f02000000000, [0xfffffffffffffffb, 0x6, 0x1, 0x3, 0x10001, 0x4, 0xaa, 0x8, 0x5]}}]}, 0x98) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="3398dbe653532a1467728a8f31665d73501d845d932b4a0d644c305b171354018aa0170a7e86b083a0dfad27f0fcf9ad82d6e92471ca3ba1233d461b93604f8538842473022b96844af1eabf946372f0274a0f9d26c7c5fab2785b21d7e2efc45db52780f6282c0d6b2ca1ead43eb53c06a10290187fb71f95d4a0f5eda81722e740ec4d413873346ef6871488d20581aeb04b69916308a9734d76773b07d00af249cb0165e68aad4b85362716f4c3ee5d2ed0bddf1a696bfaf0878b46a1ae106ed9bd506f9eaa6c414d472806c6b114064d65", 0xd3, 0xfffffffffffffff8) keyctl$setperm(0x5, r2, 0x40000) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000400)={0x2b, 0x6, 0x0, {0x4, 0x6, 0x2, 0x0, '\"V'}}, 0x2b) openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x40, 0x0) r3 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000480)={[], 0xfff, 0x1, 0x581, 0x0, 0x8000, r3}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x4, 0xb6, [], 0x3, &(0x7f0000000500)=[{}, {}, {}], &(0x7f0000000540)=""/182}, &(0x7f0000000680)=0x78) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000006c0), 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000700)=""/180, &(0x7f00000007c0)=0xb4) keyctl$revoke(0x3, r2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000800), 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000840)="5268a514fc887fdcbd94df626211908a", 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000880)={r1, @in6={{0xa, 0x4e21, 0x80000001, @loopback, 0x10001}}, 0x0, 0x7fff, 0x3ff, 0x71, 0x4}, &(0x7f0000000940)=0x98) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000980)={0x5, [0x0, 0x7, 0x5, 0x8, 0xffff]}) r4 = geteuid() ioprio_get$uid(0x3, r4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b80)={r0, &(0x7f00000009c0)="de4bb6a8ef02431c8a5d1c3eb3d77957cfbcef721109f030252d35ded37b08ed593a21b15c4032eaeb5b0e1c844575679e3314e10d2329438c1596be698918c3f0fe1525223d63314e866e19c797dd35d763abac4ff68a7596d73fad2c6544f0482d2b7aa6f40fe537638a8c6b16cc9ab40988bba04fb49087899f3a869ce74aa648364dfdef6efc066482c0040131970bf8e75b8175132984aa430e5af467d98b2332763cfd3d9bbd8fbff62fb9f58f4c3381f5a903c51d9fee4bfc6b921a4794ae4aff1c7635eedbc2dea24f520064680e954f944ee6b00b487d20427cc9", &(0x7f0000000ac0)=""/165}, 0x18) fcntl$setstatus(r0, 0x4, 0x6000) rt_sigtimedwait(&(0x7f0000000bc0)={0x1}, &(0x7f0000000c00), &(0x7f0000000c80)={0x77359400}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000cc0)={r1, 0x9}, 0x8) r5 = request_key(&(0x7f0000000d00)='blacklist\x00', &(0x7f0000000d40)={'syz', 0x3}, &(0x7f0000000d80)='user\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000dc0)='id_resolver\x00', &(0x7f0000000e00)='broute\x00') clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)=""/189, 0xbd}, {&(0x7f0000000f00)=""/124, 0x7c}, {&(0x7f0000000f80)=""/205, 0xcd}], 0x3, &(0x7f00000010c0)=""/152, 0x98}, 0x4f1e}, {{&(0x7f0000001180)=@alg, 0x80, &(0x7f0000003300)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/254, 0xfe}], 0x3, &(0x7f0000003340)=""/4, 0x4}, 0xfffffffffffffff8}, {{&(0x7f0000003380)=@tipc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003400)}, {&(0x7f0000003440)=""/195, 0xc3}, {&(0x7f0000003540)=""/168, 0xa8}, {&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/30, 0x1e}, {&(0x7f00000036c0)=""/227, 0xe3}, {&(0x7f00000037c0)=""/63, 0x3f}], 0x7, &(0x7f0000003880)=""/113, 0x71}, 0x81}], 0x3, 0x123, &(0x7f0000003a00)={r6, r7+30000000}) 14:33:33 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 14:33:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @scatter, &(0x7f00000002c0), &(0x7f0000000300)=""/99, 0xfffffffffffffffa, 0x0, 0x0, &(0x7f0000000380)}) 14:33:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000), 0x336) 14:33:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001, 0x5}) 14:33:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @scatter, &(0x7f00000002c0), &(0x7f0000000300)=""/99, 0xfffffffffffffffa, 0x0, 0x0, &(0x7f0000000380)}) [ 136.493747] IPVS: ftp: loaded support on port[0] = 21 [ 137.805125] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.811729] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.820014] device bridge_slave_0 entered promiscuous mode [ 137.899381] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.905932] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.913922] device bridge_slave_1 entered promiscuous mode [ 137.993538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.075162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.327443] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 138.411769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 138.492503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.499515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.581027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.588368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.832187] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.840049] team0: Port device team_slave_0 added [ 138.920793] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.928584] team0: Port device team_slave_1 added [ 139.011153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.097732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.182938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.190694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.200104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.212669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.275494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.283282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.294308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.532698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.838470] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.844927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.853122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.148342] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.233902] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.240545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.247874] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.254422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.264168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 140.432239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 14:33:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 14:33:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001, 0x5}) 14:33:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000), 0x336) 14:33:40 executing program 3: r0 = socket$inet6(0xa, 0x4000000000803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x20000000005, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4) [ 142.153744] input: syz0 as /devices/virtual/input/input5 [ 142.198689] input: syz0 as /devices/virtual/input/input6 14:33:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001, 0x5}) [ 143.255496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.418417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 143.579360] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 143.585636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.593528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.753617] 8021q: adding VLAN 0 to HW filter on device team0 14:33:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:43 executing program 3: r0 = socket$inet6(0xa, 0x4000000000803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x20000000005, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4) 14:33:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000100)={'T!ROXY\x00'}, &(0x7f0000000140)=0x1e) 14:33:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000), 0x336) 14:33:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x8100000001, 0x5}) [ 145.721520] input: syz0 as /devices/virtual/input/input7 [ 145.778771] input: syz0 as /devices/virtual/input/input8 14:33:43 executing program 3: r0 = socket$inet6(0xa, 0x4000000000803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x20000000005, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4) 14:33:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x24020400) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000000), 0x336) 14:33:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:44 executing program 4: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) [ 146.185976] input: syz0 as /devices/virtual/input/input9 14:33:44 executing program 3: r0 = socket$inet6(0xa, 0x4000000000803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x20000000005, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0xf4) [ 146.264929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.271677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.320775] input: syz0 as /devices/virtual/input/input10 [ 146.395903] input: syz0 as /devices/virtual/input/input11 14:33:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xcf, &(0x7f00000002c0)=""/203, &(0x7f0000000000)=0x27b) 14:33:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xcf, &(0x7f00000002c0)=""/203, &(0x7f0000000000)=0x27b) [ 146.768064] input: syz0 as /devices/virtual/input/input12 [ 146.776677] input: syz0 as /devices/virtual/input/input13 [ 146.794840] input: syz0 as /devices/virtual/input/input14 14:33:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xcf, &(0x7f00000002c0)=""/203, &(0x7f0000000000)=0x27b) 14:33:45 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x0, 0xcf, &(0x7f00000002c0)=""/203, &(0x7f0000000000)=0x27b) 14:33:45 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 14:33:45 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) [ 147.302641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:33:45 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 14:33:45 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 14:33:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001200)={'syz0\x00\x00\x00\x00\x00\n\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x3, 0x8]}, 0x45c) 14:33:45 executing program 4: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 14:33:45 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 14:33:45 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) 14:33:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 147.956322] input: syz0 as /devices/virtual/input/input15 [ 147.960953] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 14:33:46 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) [ 148.081200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:33:46 executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x20000081) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 14:33:46 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) 14:33:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 14:33:46 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000013"}], 0x28}, 0x0) 14:33:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:46 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) 14:33:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:47 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000013"}], 0x28}, 0x0) 14:33:47 executing program 4: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 14:33:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 14:33:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:47 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) 14:33:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:47 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x6, 0x188, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f00], 0x0, 0x0, &(0x7f0000001f00)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ip6tnl0\x00', 'syz_tun\x00', 'ip6tnl0\x00', @local, [], @link_local, [], 0x70, 0xa8, 0xf8}, [@common=@dnat={'dnat\x00', 0x10, {{@local}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x200) [ 149.279667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:33:47 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000013"}], 0x28}, 0x0) 14:33:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 14:33:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 149.442728] kernel msg: ebtables bug: please report to author: entries_size too small 14:33:47 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote={0xfe, 0x11c4}}, 0x80, &(0x7f0000000d80), 0x0, &(0x7f0000000100)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000013"}], 0x28}, 0x0) [ 149.617041] kernel msg: ebtables bug: please report to author: entries_size too small 14:33:48 executing program 4: writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) 14:33:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 14:33:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 14:33:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x91, 0x0, &(0x7f0000000340)=0xea) 14:33:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:33:48 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x6, 0x188, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f00], 0x0, 0x0, &(0x7f0000001f00)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ip6tnl0\x00', 'syz_tun\x00', 'ip6tnl0\x00', @local, [], @link_local, [], 0x70, 0xa8, 0xf8}, [@common=@dnat={'dnat\x00', 0x10, {{@local}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x200) 14:33:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) [ 150.248574] kernel msg: ebtables bug: please report to author: entries_size too small [ 150.318896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:33:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x91, 0x0, &(0x7f0000000340)=0xea) 14:33:48 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x6, 0x188, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f00], 0x0, 0x0, &(0x7f0000001f00)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ip6tnl0\x00', 'syz_tun\x00', 'ip6tnl0\x00', @local, [], @link_local, [], 0x70, 0xa8, 0xf8}, [@common=@dnat={'dnat\x00', 0x10, {{@local}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x200) 14:33:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x10001}, 0xffffff43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 14:33:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 14:33:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) [ 150.604167] kernel msg: ebtables bug: please report to author: entries_size too small 14:33:49 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x91, 0x0, &(0x7f0000000340)=0xea) 14:33:49 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x6, 0x188, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001f00], 0x0, 0x0, &(0x7f0000001f00)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'ip6gretap0\x00', 'ip6tnl0\x00', 'syz_tun\x00', 'ip6tnl0\x00', @local, [], @link_local, [], 0x70, 0xa8, 0xf8}, [@common=@dnat={'dnat\x00', 0x10, {{@local}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x200) 14:33:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x10001}, 0xffffff43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 14:33:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:33:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) [ 151.248844] kernel msg: ebtables bug: please report to author: entries_size too small 14:33:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x10001}, 0xffffff43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 14:33:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x91, 0x0, &(0x7f0000000340)=0xea) 14:33:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1}}], 0x2, 0x0, 0x0) 14:33:49 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 14:33:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x10001}, 0xffffff43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 14:33:49 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 14:33:49 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:33:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 14:33:50 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1}}], 0x2, 0x0, 0x0) 14:33:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:33:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000003000)=""/174) 14:33:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 0: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) 14:33:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1}}], 0x2, 0x0, 0x0) 14:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000003000)=""/174) 14:33:51 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 0: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) 14:33:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000003000)=""/174) 14:33:51 executing program 4: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 14:33:51 executing program 0: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) 14:33:51 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r4, r3, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) dup2(r2, r6) 14:33:51 executing program 0: unshare(0x20400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) 14:33:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0xc008744c, &(0x7f0000003000)=""/174) 14:33:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1}}], 0x2, 0x0, 0x0) 14:33:52 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x3231564e}) 14:33:52 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(r1, r0, 0x3, 0x0) 14:33:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1}, 0xc) 14:33:52 executing program 2: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:52 executing program 2: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:56 executing program 4: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 14:33:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x3231564e}) 14:33:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1}, 0xc) 14:33:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(r1, r0, 0x3, 0x0) 14:33:56 executing program 2: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:56 executing program 5: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:56 executing program 5: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1}, 0xc) 14:33:56 executing program 2: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:56 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x3231564e}) 14:33:56 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(r1, r0, 0x3, 0x0) 14:33:56 executing program 5: clone(0x207ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) setpgid(r0, 0x0) 14:33:58 executing program 4: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 14:33:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:58 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x3231564e}) 14:33:58 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) tee(r1, r0, 0x3, 0x0) 14:33:58 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x100840000000002, 0x3, 0x1f) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x0) 14:33:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@rand_addr, @multicast1}, 0xc) 14:33:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x0) 14:33:59 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x100840000000002, 0x3, 0x1f) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x0) 14:33:59 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, 0x0}, 0x0) [ 161.126319] kvm: pic: level sensitive irq not supported 14:33:59 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) [ 161.127187] kvm: pic: single mode not supported [ 161.192118] kvm: pic: single mode not supported [ 161.196975] kvm: pic: level sensitive irq not supported [ 161.226151] kvm: pic: level sensitive irq not supported [ 161.254334] kvm: pic: single mode not supported 14:33:59 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, 0x0}, 0x0) 14:33:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x0) [ 161.259823] kvm: pic: level sensitive irq not supported [ 161.303869] kvm: pic: level sensitive irq not supported [ 161.355091] kvm: pic: level sensitive irq not supported 14:34:01 executing program 4: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 14:34:01 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x100840000000002, 0x3, 0x1f) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x0) 14:34:01 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, 0x0}, 0x0) 14:34:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x0) 14:34:01 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) 14:34:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:01 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x100840000000002, 0x3, 0x1f) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x0) 14:34:01 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, 0x0}, 0x0) 14:34:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x0) [ 161.446425] kvm: pic: level sensitive irq not supported [ 163.842758] kvm: pic: level sensitive irq not supported [ 163.857627] kvm: pic: single mode not supported [ 163.875542] kvm: pic: single mode not supported 14:34:02 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) [ 163.880342] kvm: pic: level sensitive irq not supported [ 164.004963] kvm: pic: level sensitive irq not supported 14:34:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 164.032845] kvm: pic: single mode not supported [ 164.326113] kvm: pic: single mode not supported [ 164.332027] kvm: pic: single mode not supported [ 164.382044] kvm: pic: single mode not supported 14:34:04 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) 14:34:04 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) 14:34:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) [ 164.417260] kvm: pic: single mode not supported [ 166.932681] pic_ioport_write: 18 callbacks suppressed [ 166.932706] kvm: pic: level sensitive irq not supported [ 166.933411] pic_ioport_write: 2 callbacks suppressed [ 166.933499] kvm: pic: single mode not supported [ 166.936916] kvm: pic: single mode not supported [ 166.942084] kvm: pic: level sensitive irq not supported [ 166.947093] kvm: pic: level sensitive irq not supported [ 166.971437] kvm: pic: level sensitive irq not supported [ 166.975628] kvm: pic: single mode not supported [ 166.980073] kvm: pic: single mode not supported [ 166.988383] kvm: pic: level sensitive irq not supported [ 166.988708] kvm: pic: level sensitive irq not supported [ 166.996087] kvm: pic: level sensitive irq not supported [ 166.999486] kvm: pic: single mode not supported [ 167.006567] kvm: pic: level sensitive irq not supported [ 167.011466] kvm: pic: single mode not supported 14:34:05 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) 14:34:05 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x3}}) [ 167.020090] kvm: pic: level sensitive irq not supported [ 167.032771] kvm: pic: single mode not supported [ 167.038264] kvm: pic: level sensitive irq not supported [ 167.110377] kvm: pic: single mode not supported 14:34:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:05 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x3}}) 14:34:05 executing program 0: unshare(0x8000400) r0 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r0, &(0x7f0000000100)=""/59, 0x3b) 14:34:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:05 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x3}}) 14:34:05 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:05 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x3}}) 14:34:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab\xd3\xa9\x15\xed\xee\x00'}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0xffffffff]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:34:06 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) [ 167.123282] kvm: pic: single mode not supported 14:34:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:06 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x600000, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000480)={{0x2, 0x4e22, @remote}, {0x7, @dev={[], 0xe}}, 0x10, {0x2, 0x4e22, @rand_addr=0x2}, 'ip6_vti0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x6344) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0x0, r2}, 0x10) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20400440, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000280)=0x4000, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") get_mempolicy(&(0x7f0000000140), &(0x7f00000001c0), 0xfffffffffffffffe, &(0x7f0000001000/0x4000)=nil, 0x6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x132, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r3}) sendto$inet(r5, &(0x7f0000000300)="767f2783512a15f104cb1d7db0d70495044b78432473e8db0fc60f811b47b59f135070e2820c5faaaa83957dcdc67477d73de462eaecd8cde1e47f841216658234f4f4f03f5b70d11fe2edaaa10a090a85258d935756f011364e16cc6dcdea78b4d123a773a2b1b9e2c26982345f43fbb0c9a4ac2b3406b83d9b14c6731b5c735aa34f63a812d32ef8267c79e0c546bcf0c62c5c1537f2ad96c23a75e3be0b93296dfb2f0ae475f775b24446d37d1bec320c7a9768b4b94b9e5b9ab5017341ac82d3a654ee52ec490eadb170d128ea9662f3aa35f3c285cc55b4f59c", 0xdc, 0x44840, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) 14:34:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x6, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2283, &(0x7f0000000700)) 14:34:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0xa) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) [ 168.065943] kvm: pic: single mode not supported [ 169.106960] ================================================================== [ 169.119146] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 169.125752] CPU: 1 PID: 8811 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #8 [ 169.132866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.142239] Call Trace: [ 169.144856] dump_stack+0x173/0x1d0 [ 169.148518] kmsan_report+0x120/0x290 [ 169.152374] kmsan_internal_check_memory+0x9a7/0xa20 [ 169.157532] __msan_instrument_asm_load+0x8a/0x90 [ 169.162404] __siphash_aligned+0x512/0xae0 [ 169.166702] secure_ipv6_port_ephemeral+0x110/0x220 [ 169.171778] inet6_hash_connect+0x11f/0x1a0 [ 169.176143] dccp_v6_connect+0x197e/0x1e20 [ 169.180438] ? __msan_poison_alloca+0x1e0/0x270 [ 169.185151] ? dccp_v6_exit_batch+0x40/0x40 [ 169.189512] __inet_stream_connect+0x2f9/0x1340 [ 169.194269] inet_stream_connect+0x101/0x180 [ 169.198725] __sys_connect+0x664/0x820 [ 169.202659] ? __inet_stream_connect+0x1340/0x1340 [ 169.207618] ? prepare_exit_to_usermode+0x114/0x420 [ 169.212657] ? syscall_return_slowpath+0x50/0x650 [ 169.217546] __se_sys_connect+0x8d/0xb0 [ 169.221552] __x64_sys_connect+0x4a/0x70 [ 169.225644] do_syscall_64+0xbc/0xf0 [ 169.229387] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 169.234598] RIP: 0033:0x457669 [ 169.237811] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.256899] RSP: 002b:00007fb8eea23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 169.264642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 169.271931] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000006 [ 169.279234] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 169.286525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8eea246d4 [ 169.293816] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 169.301129] [ 169.302774] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 169.310256] Variable was created at: [ 169.314009] secure_ipv6_port_ephemeral+0x6a/0x220 [ 169.318972] inet6_hash_connect+0x11f/0x1a0 [ 169.323313] [ 169.324968] Bytes 2-7 of 8 are uninitialized [ 169.329402] Memory access of size 8 starts at ffff8881ae27fa08 [ 169.335384] ================================================================== [ 169.342756] Disabling lock debugging due to kernel taint [ 169.348233] Kernel panic - not syncing: panic_on_warn set ... [ 169.354160] CPU: 1 PID: 8811 Comm: syz-executor2 Tainted: G B 4.20.0-rc7+ #8 [ 169.362664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.372030] Call Trace: [ 169.374694] dump_stack+0x173/0x1d0 [ 169.378899] panic+0x3ce/0x961 [ 169.382173] kmsan_report+0x285/0x290 [ 169.386068] kmsan_internal_check_memory+0x9a7/0xa20 [ 169.391272] __msan_instrument_asm_load+0x8a/0x90 [ 169.396182] __siphash_aligned+0x512/0xae0 [ 169.400494] secure_ipv6_port_ephemeral+0x110/0x220 [ 169.405557] inet6_hash_connect+0x11f/0x1a0 [ 169.409935] dccp_v6_connect+0x197e/0x1e20 [ 169.414254] ? __msan_poison_alloca+0x1e0/0x270 [ 169.419003] ? dccp_v6_exit_batch+0x40/0x40 [ 169.423357] __inet_stream_connect+0x2f9/0x1340 [ 169.428132] inet_stream_connect+0x101/0x180 [ 169.432594] __sys_connect+0x664/0x820 [ 169.436530] ? __inet_stream_connect+0x1340/0x1340 [ 169.441495] ? prepare_exit_to_usermode+0x114/0x420 [ 169.446536] ? syscall_return_slowpath+0x50/0x650 [ 169.451423] __se_sys_connect+0x8d/0xb0 [ 169.455434] __x64_sys_connect+0x4a/0x70 [ 169.459513] do_syscall_64+0xbc/0xf0 [ 169.463262] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 169.468468] RIP: 0033:0x457669 [ 169.471690] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 169.490619] RSP: 002b:00007fb8eea23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 169.498345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 169.505627] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000006 [ 169.512912] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 169.520207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8eea246d4 [ 169.527535] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 169.535920] Kernel Offset: disabled [ 169.539557] Rebooting in 86400 seconds..