Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. 2018/11/09 08:20:17 fuzzer started 2018/11/09 08:20:22 dialing manager at 10.128.0.26:38493 2018/11/09 08:20:22 syscalls: 1 2018/11/09 08:20:22 code coverage: enabled 2018/11/09 08:20:22 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/09 08:20:22 setuid sandbox: enabled 2018/11/09 08:20:22 namespace sandbox: enabled 2018/11/09 08:20:22 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/09 08:20:22 fault injection: enabled 2018/11/09 08:20:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/09 08:20:22 net packed injection: enabled 2018/11/09 08:20:22 net device setup: enabled 08:23:00 executing program 0: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigpending(&(0x7f0000000040), 0x238) syzkaller login: [ 230.724811] IPVS: ftp: loaded support on port[0] = 21 [ 232.496225] ip (6291) used greatest stack depth: 53696 bytes left [ 232.759751] ip (6295) used greatest stack depth: 53688 bytes left [ 232.880065] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.886686] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.895248] device bridge_slave_0 entered promiscuous mode [ 233.022593] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.029319] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.037890] device bridge_slave_1 entered promiscuous mode [ 233.163982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.288735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.559454] ip (6307) used greatest stack depth: 53552 bytes left [ 233.682664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 233.812410] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:23:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) close(r1) [ 234.576504] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 234.585807] team0: Port device team_slave_0 added [ 234.693647] IPVS: ftp: loaded support on port[0] = 21 [ 234.814223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 234.822357] team0: Port device team_slave_1 added [ 234.982640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.991626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.000517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.130380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.343147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.350750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.360022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.492891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.500506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.509850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.072066] ip (6374) used greatest stack depth: 53504 bytes left [ 237.861194] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.867861] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.876418] device bridge_slave_0 entered promiscuous mode [ 237.891506] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.898077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.905086] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.911555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.920282] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 238.023319] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.029785] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.038516] device bridge_slave_1 entered promiscuous mode [ 238.062248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.273068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.514500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.195644] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.418854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.695888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 239.703539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 08:23:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 240.006576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.013799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.597487] IPVS: ftp: loaded support on port[0] = 21 [ 240.907164] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.915386] team0: Port device team_slave_0 added [ 241.201623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.209787] team0: Port device team_slave_1 added [ 241.504332] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.511440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.520407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.833754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.840846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.849715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.052686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.060321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.069418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.294026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.301645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.310769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.904518] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.911010] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.919593] device bridge_slave_0 entered promiscuous mode [ 245.149881] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.156480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.163516] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.169985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.178564] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 245.234508] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.240986] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.249570] device bridge_slave_1 entered promiscuous mode [ 245.542601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.584434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 245.883700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.662572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.919871] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 247.168410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 247.175686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.464473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 247.471558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:23:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 247.879341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.153358] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.161316] team0: Port device team_slave_0 added [ 248.469107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.477360] team0: Port device team_slave_1 added [ 248.786175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 248.793375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.802235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.956824] IPVS: ftp: loaded support on port[0] = 21 [ 249.092577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 249.099738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.108699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.131144] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.380087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.387912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.396834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.731405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.739420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.748300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.423724] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.430405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.438506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.366217] ip (6704) used greatest stack depth: 53248 bytes left [ 251.688674] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.517347] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.524412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.531311] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.537954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.546643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 253.553178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.195347] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.201813] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.210525] device bridge_slave_0 entered promiscuous mode [ 254.555277] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.561760] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.570322] device bridge_slave_1 entered promiscuous mode [ 254.835448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 255.156598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 256.130273] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.421628] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.719525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 256.726808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.071705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.078965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.877436] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.885595] team0: Port device team_slave_0 added [ 257.900060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.244223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 258.252568] team0: Port device team_slave_1 added 08:23:28 executing program 4: [ 258.620667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.628111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.636862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.012278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.019350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.028021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.123144] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:23:29 executing program 0: [ 259.523440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 259.531066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.539997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 08:23:29 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x220000) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r0, r1, &(0x7f0000000080), 0x101) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000001300)=@ethtool_test={0x1a, 0x8, 0x7fffffff, 0x2, [0x1, 0x48f92383]}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x0, @win={{0x2, 0x3, 0x84c, 0x8}, 0x4, 0x3, &(0x7f0000000180)={{0x101, 0x4, 0x100, 0x3bde}, &(0x7f0000000140)={{0x80, 0x4, 0x9, 0x4000000000000000}, &(0x7f00000000c0)={{0x800, 0x40, 0x9, 0xffff}}}}, 0x1000, &(0x7f0000000300)="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", 0x7}}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x5) listen(r2, 0x5) [ 259.825823] IPVS: ftp: loaded support on port[0] = 21 [ 259.957611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 259.965435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.974611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:23:30 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000140)=[{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r1, &(0x7f00000001c0)=""/75}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x14, 0x3, &(0x7f0000000040)="0bbe01"}) sendmmsg(r3, &(0x7f0000003e40), 0x0, 0x0) 08:23:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x200000) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000100)={0x800, "a1452ee43f6ac9fc2bab3ae548746cc3bb963271a292a040d485d63b161ee849", 0x3, 0x1}) ioctl(r0, 0x932, &(0x7f0000000080)="153f6234488dd25d766070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x2, {0xa0, 0x4, 0x5}}, 0x14) ioctl$PPPOEIOCDFWD(r2, 0x80045113, 0x70e000) [ 260.720687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 260.727317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.735277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 08:23:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x1f000, 0x3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)=@random={'security.', 'keyring+eth0}$vboxnet1cpuset}procposix_acl_access@\x00'}, &(0x7f0000000300)='/dev/kvm\x00', 0x9, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 261.155176] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 08:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x93d, 0x4) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000040)=""/36, 0x24, 0x2000000}, 0x2000) 08:23:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000008c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xa00, 0x0) r2 = accept$alg(r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 262.406110] 8021q: adding VLAN 0 to HW filter on device team0 08:23:32 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x80000000, 0x5, 0x8dd, 0x7f, 0x20, 0x642f]}, &(0x7f0000000080)=0x10) write(r1, &(0x7f00000001c0), 0xfffffef3) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x66000) [ 264.279800] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.286423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.293575] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.300072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.308421] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 264.315339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.295884] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.302688] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.311144] device bridge_slave_0 entered promiscuous mode [ 266.698357] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.705069] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.713670] device bridge_slave_1 entered promiscuous mode [ 267.110322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.528817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 268.188424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.551550] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 268.878794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 269.149022] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 269.156339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.491551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 269.498821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.565250] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 270.258057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 270.266356] team0: Port device team_slave_0 added 08:23:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x7, 0xfffffffffffffe00]) ioctl$sock_ifreq(r0, 0x8995, &(0x7f00000000c0)={'veth1\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00', 0x2000}) [ 270.842980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 270.851005] team0: Port device team_slave_1 added [ 271.169426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 271.177097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.186006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.205116] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 271.211530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.219611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.444436] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 271.451539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.460412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.611665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 271.619535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.628588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.774754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 271.783149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.792017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.052181] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.548183] ip (7263) used greatest stack depth: 53216 bytes left [ 273.978423] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.985024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.992157] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.998616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.006838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 274.013624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.409445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.180093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:23:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 276.890111] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.896730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.904637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.397699] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.168966] 8021q: adding VLAN 0 to HW filter on device bond0 08:23:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @local}, 'bond0\x00'}) [ 280.664706] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 280.943579] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 280.949967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.958008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.235145] 8021q: adding VLAN 0 to HW filter on device team0 08:23:53 executing program 4: 08:23:53 executing program 1: 08:23:53 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x501000) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/43, 0x2b}], 0x6) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001400)={r0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001440)='/dev/vsock\x00', 0x100, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001480)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/autofs\x00', 0x200000, 0x0) getsockname$inet6(r2, &(0x7f0000001500)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001540)=0x1c) ioctl(r2, 0x9, &(0x7f0000001580)="11ff22c39b9e070ba1df2e2d622d43f2b079c947bb5d715d3fa7a5bcd18c1f") bind(r3, &(0x7f00000015c0)=@sco={0x1f, {0x0, 0x2, 0x80, 0x20, 0x6, 0x401}}, 0x80) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000001680)={0x2, &(0x7f0000001640)=[{0x4, 0x2}, {0x5, 0x4}]}) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000016c0)={0x5, 0x8b}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001740)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001780)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000001880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001980)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000001a80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001ac0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000001bc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005040)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000005140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000051c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000052c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005380)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000053c0)={@local, 0x0}, &(0x7f0000005400)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000005740)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x12800800}, 0xc, &(0x7f0000005700)={&(0x7f0000005440)={0x290, r4, 0x410, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x1b0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x80, 0x6, 0x20, 0x5}, {0x5, 0x7fffffff, 0x9, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff22f7}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x4, 0xfffffffffffffffb, 0x400, 0xffff}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xc5e}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000005780)={0x0, 0x9eb8, [], @raw_data=[0x23936890, 0x14, 0x8, 0xc6, 0x5, 0x0, 0x100, 0x4, 0xbb2, 0x81, 0x100000001, 0x8, 0x7ff, 0x7, 0x100000000, 0xfffffffffffffffe, 0x9, 0x81, 0x101, 0x914, 0xfffffffffffffff9, 0x4, 0x0, 0x7, 0x9, 0x8000, 0xffff, 0x240000000, 0x2, 0x6, 0x7, 0x1]}) r13 = request_key(&(0x7f0000005840)='id_resolver\x00', &(0x7f0000005880)={'syz', 0x2}, &(0x7f00000058c0)='vmnet0-$-\x00', 0x0) r14 = add_key$keyring(&(0x7f0000005980)='keyring\x00', &(0x7f00000059c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r13, &(0x7f0000005900)='keyring\x00', &(0x7f0000005940)={'syz', 0x1}, r14) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000005a00)={r0, 0x0, 0xfffffffffffff800, 0x8, 0x5}) 08:23:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:23:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282347d61ac55"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x248, &(0x7f000000cf3d)=""/195}, 0x48) 08:23:53 executing program 3: 08:23:53 executing program 1: 08:23:53 executing program 4: 08:23:53 executing program 0: 08:23:53 executing program 3: 08:23:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:23:53 executing program 4: 08:23:53 executing program 0: 08:23:53 executing program 1: [ 284.298318] IPVS: ftp: loaded support on port[0] = 21 [ 285.534002] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.540402] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.548477] device bridge_slave_0 entered promiscuous mode [ 285.624113] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.630516] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.638579] device bridge_slave_1 entered promiscuous mode [ 285.714899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.790123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 286.016491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.094222] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.240482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 286.247646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.473590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 286.481127] team0: Port device team_slave_0 added [ 286.556223] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 286.563890] team0: Port device team_slave_1 added [ 286.639882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.717984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.796307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 286.803716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.812499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.889225] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 286.896608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.905673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.759842] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.766322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.773382] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.779819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.788173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 288.182223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.859306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.153789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.438234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.444770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.452612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.737783] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.518056] Unknown ioctl 21531 [ 293.522500] Unknown ioctl 9 [ 293.526145] Unknown ioctl 19301 [ 293.532660] Unknown ioctl 35123 [ 293.544033] Unknown ioctl 21531 [ 293.547777] Unknown ioctl 9 [ 293.551253] Unknown ioctl 19301 [ 293.556120] Unknown ioctl 35123 08:24:03 executing program 5: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000000)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xf1f1) openat$tun(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) 08:24:03 executing program 3: 08:24:03 executing program 0: 08:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:24:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x25}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x0, 0xffffffc0}]}, &(0x7f0000000140)="47504cc000", 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 08:24:03 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000005880)={&(0x7f00000055c0)=@hci, 0x80, &(0x7f0000005840)}, 0x0) 08:24:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, @random="4fffabf1f2f2"}, 0x10) 08:24:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:04 executing program 1: 08:24:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x3a73) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, &(0x7f0000000040), 0x1c) 08:24:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:24:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x7a2a, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='A', 0x1, 0xfffffffffffffffd, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 08:24:04 executing program 5: 08:24:04 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) 08:24:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:24:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="24000000260007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 08:24:04 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x10, 0x0, 0x7}], 0x10}, 0x0) 08:24:05 executing program 0: 08:24:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:05 executing program 4: 08:24:05 executing program 5: 08:24:05 executing program 1: 08:24:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:05 executing program 0: 08:24:05 executing program 4: 08:24:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:05 executing program 5: 08:24:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:05 executing program 0: 08:24:05 executing program 1: 08:24:05 executing program 5: 08:24:05 executing program 4: 08:24:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:06 executing program 0: 08:24:06 executing program 5: 08:24:06 executing program 1: 08:24:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:06 executing program 0: 08:24:06 executing program 4: 08:24:06 executing program 3: socket$inet6(0xa, 0x803, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:06 executing program 1: 08:24:06 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x0) 08:24:06 executing program 4: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5, 0x10, 0x6, 0x5}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x2}, 0x8) sendto$inet(r0, &(0x7f00000000c0), 0x275, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000008c0)=0x7fe, 0x370) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) clock_gettime(0x4000000000, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/210, 0xd2}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000000bc0)=""/246, 0xf6}, {&(0x7f0000000740)=""/26, 0x1a}], 0x7, &(0x7f0000000800)=""/77, 0x4d, 0x8}, 0x9}, {{&(0x7f0000000900)=@nl=@unspec, 0x80, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/65, 0x41}], 0x1, &(0x7f0000000a00)=""/132, 0xfff4, 0x1eb}, 0xdd2}], 0x2, 0x40000000, &(0x7f0000000b80)={r2, r3+10000000}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") write(r0, &(0x7f0000000ec0)="89f9d765312b4001000000b0967bdae72ee5094371136a6477ba0a51a2969dbc2d4028ac7b5af67f178f9314ea2bb3ac1c442eaf749c21ae2af8e39a40c3dc032e6f8eb738786a79df71302ff3b5d42731597d995bed6103ff63b9a908bcc05e0400000092bdf4d3282f62d6928117f82c2dae48742dac857de846096e82c1a02e1edcadda721a3f8dc9a54da05d467ed35b6f931d8686986960e756048c61c2a2c374c318d21d7a7ef550779190066e82ea3f6724a9f61ff028ec7e8d7a04352e7a78f777a68b823abb646bdc55dbde285ce15bf45820f0ae20e4023f57c71f8b41e08eff14c3441485c6f54a30750c780852dad879d6d4be7243bd07f841f89009000000c23d6b4f70fe48b54577449cfcbc4d5dbefb8b465d45bc2d11afbe7bfbe6ca76ac259e634eebf8db694ff02fe2b4c80783b443ef68287e9cf7cbcc2ee196f10c4ffb3f59e4921e0f9f08cba9a2c56c49fa7465b4836da5b2d9b142763889caa718d8a4fcb2f3ef6dc6185708fb1e0f9081d29fb3defae8c525f07437c7835b4eac8f86e2a22a81eff4120340e4a379446aac45dbff791d147805cd2748d74b8996c9b51ec03b410ef8fe126117fbf106795bc1b25d8dd786b6496bd743b7c75c638b516214ff56ec99a9c0f2919fa781cd8b4f2f2e425a6780c630a05c8e60011bc8e10055a6b6b652e5a13c73fd96f79038a65d6991ac38899ab98486d92bbcffdcf39a08a248ae1045ff8c6123de2f15d9ac360a3497c07001a3a1936ff1c03194ace131d380f515629ff016bd890ff822704c0db8bc68efad2eace5466628e7d6c2f2b3043698c46fdd62588fc54b72a786af0d026353879892c58007f7988a3f2240a43303218cc1df27807bfbde117c505f060396850a82459830a89a6a8601ea2e47f2e41379d110b96576f8f7705bba7ec63d6b44ccf84073cf9bdcf1aee48cb60c2f6dd3e89f3626a5e23339ea99c918d76a43fecf7401f7550e8eaefa4d84f1143320599daf7699858b2bf408e9093aa91d6dd9ae39d8decf3f7a199b0c1918d47be3b7aeff9a8c10efabe787b43141e7abaa4317158864b0361568140ab79cade1223c3ef81da4c4eefdd5b21fcc1b87872fc3b346737105589b84ba9814679b7510ed9b4f290083ee634ae12243ccc63413d7bc35eee0d1a4bc9dd33c37f5130303edddfc2636ffbf1ee0febb953436710c2ed9bd001d2ebe878788ddf7f7ad55b7a8cbcb348e82cd65b59315858086606115d04a3cda0e4af2a703afe09e4afedf00d5fbb2284df9af1d1ec9f15356c58fdcde45fff250568347f3b0b49e11e44c0a4d98a1e3393ce5d76614990f23b2e146842b166fb070894c128f957b0cc7d80a16275efd15659e0f81990062ebfdf9454d12e63d1ce1dad7848fcbab642a0d62ebb17abc824883e4c6e1e81992f28f5bbd7b26e2645c7941b03dd2f27c29baa2412976a05fa13d8fc4d6bd152a8668d986a9cf605b8b4a61600481e01bdd74c96d73390518add968100ac742aaf5dd7eb4ccf0868ee3ef7f12c32298737dea65bd5d7161dd679b4dd6799aa086bf3b8c889780ac102b7b1ebcf2569dd77f201d74d94a61400ced9c613414012b451628a96e6cc8fe738e964940f7b753065677776f3b5398975aeac974fced560667cead03a8976eb4229ff4e1bca5588d5d544cbca8588215a2f5ef7a5fc1a07438d3a3e05d21eb30d46f1688543d4327d36e07635396eaab4e9bc862ee9c7fa24de38c5cbf8fa5afd024116bc84854d01072145ecc4bb415d94a333e0d91e9cf6fda5a2c244a585e3a32c95398f44800c578faf4a2ccc5979664db7a55aa5cc02789f84321ccaeed4f37dd48c8d1484ade0588fc4255ec8780534a693e2bfe88b622034552084492c6757429239bbe8dad8b904e58007639ca773344040a441dc0027a46c22198f3d0b0588e164881a9fc7a85a63c459b0d002e3d890edd250742d363e85250badb91a734759baf773c32b177d36eefb662be70", 0x595) 08:24:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000010004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1001, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8ccc8a43a4b71b48f122aad26a207ba5f73a433ce6863368a09708f37997559ae0b7fca4dab3fe6d9c62e4231f79b174bba913ffdf9be26a0a531abe129fa660", "6016f05f03f8e0d27d1243d186df978c570826b17b518fe294926e8ffb73e0e2"}) 08:24:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:07 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/93, 0x5d) 08:24:07 executing program 5: io_setup(0x1, &(0x7f0000000000)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000000340)=[{}], 0x0) io_destroy(r0) 08:24:07 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:07 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:07 executing program 0: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f00000002c0)=""/226) 08:24:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="03000000"], 0x1}}, 0x0) 08:24:07 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:07 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:24:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) sendto$inet6(r2, &(0x7f0000000040), 0x24, 0x0, &(0x7f0000000080)={0xa, 0x8906, 0x3, @dev}, 0x1c) 08:24:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000100)="0a5c2d0240316285717070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x40000000]}) 08:24:08 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000500)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 08:24:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r0, &(0x7f0000000140), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 08:24:08 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0xe, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 08:24:08 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x3}, 0x118) 08:24:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x0, @dev}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[{0x10}], 0x10, 0x4000000}}], 0x1, 0x0) [ 298.512936] sock: process `syz-executor0' is using obsolete getsockopt SO_BSDCOMPAT 08:24:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r0, &(0x7f0000000140), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 08:24:08 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0xc}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000740)}, 0x20004040) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000740)}, 0x0) recvmsg$kcm(r1, &(0x7f000000b740)={&(0x7f000000b3c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000b600)=[{&(0x7f000000b580)=""/93, 0x5d}], 0x1, &(0x7f000000b640)=""/236, 0xec}, 0x10102) sendmsg$kcm(r1, &(0x7f000000bf40)={&(0x7f000000b780)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f000000bd80)=[{&(0x7f000000bc00)}], 0x1, &(0x7f000000be00)=[{0x10, 0x11f, 0x1}], 0x10}, 0x8040) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "e5f7839f4e7f"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000740)=ANY=[]}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 08:24:08 executing program 0: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file1/file0\x00') rename(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000180)='./file0\x00') 08:24:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) dup3(r1, r0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000001500), 0x0) 08:24:09 executing program 3: 08:24:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:09 executing program 5: 08:24:09 executing program 3: 08:24:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:09 executing program 1: 08:24:10 executing program 4: 08:24:10 executing program 5: 08:24:10 executing program 3: 08:24:10 executing program 0: 08:24:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:10 executing program 1: 08:24:10 executing program 4: 08:24:10 executing program 3: 08:24:10 executing program 5: 08:24:10 executing program 5: 08:24:10 executing program 3: 08:24:10 executing program 4: 08:24:11 executing program 0: 08:24:11 executing program 1: 08:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:11 executing program 3: 08:24:11 executing program 4: 08:24:11 executing program 5: 08:24:11 executing program 1: 08:24:11 executing program 0: 08:24:11 executing program 4: 08:24:11 executing program 5: 08:24:11 executing program 3: 08:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:11 executing program 4: 08:24:12 executing program 5: 08:24:12 executing program 1: 08:24:12 executing program 3: 08:24:12 executing program 0: 08:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 08:24:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@nl, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="5500000018007fbdb72d23b2a4a280930a0600fec0a8431491000000040008001a000500fec000001900a30700000000000000dc1338d54400009b84136e115afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) 08:24:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@rc, &(0x7f0000000000)=0x80) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/95, 0x5f}], 0x1) close(r1) 08:24:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000480)}], 0x1, 0x0) 08:24:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0xe681f134) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1) close(0xffffffffffffffff) 08:24:12 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {0x2}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) [ 302.507101] netlink: 25 bytes leftover after parsing attributes in process `syz-executor4'. 08:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) dup(r1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:24:12 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c3d023c126285798070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x401771}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x8, 0xfb, &(0x7f0000000000)=""/251}, 0x48) [ 302.784324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 08:24:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newaddr={0x28, 0x14, 0x41b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x28}}, 0x0) 08:24:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) dup(r1) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:24:13 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 08:24:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) [ 303.395317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 08:24:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000022c0), &(0x7f0000002300)=0xc) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) recvfrom$unix(r2, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x0, 0x0) 08:24:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f01000000450001070000005419001a00040002000000000000000000000000000000000000", 0x39}], 0x1) 08:24:13 executing program 2: r0 = socket$inet6(0xa, 0x800000803, 0x40000000000001) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x711, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}]}, 0x34}}, 0x0) 08:24:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/119, 0x77}], 0x1) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\\'}], 0xa, "040216f515822915f0ab005b758beeb25041b57e0ea86aaeef391110b82e947f18e3b673f3002a2a43f95d23b98f4bb461fac1836d44e3e74668a7a0951933b13fac517fba77f2ec8fdfaba7a9b6eeeef285d136f72f1010a5884bcf4f6a21ca71939c98fde1e39f750841"}, 0x78) 08:24:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:13 executing program 5: r0 = socket$inet6(0xa, 0x800000803, 0x40000000000001) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") socket$inet(0x2, 0xa, 0x0) 08:24:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'veth1_to_bridge\x00', &(0x7f00000004c0)=@ethtool_cmd={0x2c}}) 08:24:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket(0x80000000010, 0x80802, 0x0) write(r1, &(0x7f0000000000)="2400000058001f02ff07f4f9002304000a04f51108000100020100020800028001000000", 0x24) 08:24:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x27}, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) [ 304.097377] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 08:24:14 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000010001200080008bd6772650004000200"], 0x1}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:24:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000000060100010000000000000000000000"], 0x14}}, 0x0) 08:24:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:14 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) [ 304.722647] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:14 executing program 2: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) 08:24:14 executing program 1: r0 = socket$inet6(0xa, 0x10000000000001, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) 08:24:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 08:24:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900010002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 305.233437] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) 08:24:15 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}]}, 0x30}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:24:15 executing program 1: sendto$packet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000500), 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x30}], 0x1, 0x0) 08:24:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) [ 305.508016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 08:24:15 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(0xffffffffffffffff, 0x1) [ 305.734274] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:15 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x37}]}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)) sendto$inet6(r2, &(0x7f0000000100), 0xfffffffffffffffa, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x4000000002) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") 08:24:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 08:24:16 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x803, 0x7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) [ 306.248098] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:16 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) 08:24:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r0, 0x1) 08:24:16 executing program 1: 08:24:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x803, 0x7) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) [ 306.572010] hrtimer: interrupt took 202107 ns 08:24:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r0, 0x1) 08:24:16 executing program 4: 08:24:16 executing program 1: [ 306.888410] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:17 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x37}]}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)) sendto$inet6(r2, &(0x7f0000000100), 0xfffffffffffffffa, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x4000000002) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") 08:24:17 executing program 4: 08:24:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r0, 0x1) 08:24:17 executing program 1: 08:24:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) [ 307.533607] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:17 executing program 4: 08:24:17 executing program 1: 08:24:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x0, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:17 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:18 executing program 4: 08:24:18 executing program 1: 08:24:18 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:18 executing program 2: 08:24:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x0, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:18 executing program 1: 08:24:18 executing program 4: 08:24:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x0, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) 08:24:18 executing program 4: 08:24:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:18 executing program 1: 08:24:18 executing program 2: 08:24:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)) shutdown(r1, 0x1) 08:24:19 executing program 2: 08:24:19 executing program 4: 08:24:19 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) 08:24:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)) shutdown(r1, 0x1) 08:24:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:19 executing program 1: 08:24:19 executing program 1: 08:24:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)) shutdown(r1, 0x1) 08:24:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:19 executing program 4: 08:24:19 executing program 2: 08:24:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(0xffffffffffffffff, 0x1) 08:24:20 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) 08:24:20 executing program 1: 08:24:20 executing program 2: 08:24:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x0, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:20 executing program 4: 08:24:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x0) 08:24:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'gre0\x00'}) 08:24:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x0, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 08:24:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x0) 08:24:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) r2 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00'}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00', 0xffb}) 08:24:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x0, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:21 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x0) 08:24:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:21 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x8}]}, 0x10) 08:24:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001740)={@remote}) [ 312.037020] bond0: Error: Device is in use and cannot be enslaved [ 312.043864] device bond0 entered promiscuous mode [ 312.048839] device bond_slave_0 entered promiscuous mode [ 312.054826] device bond_slave_1 entered promiscuous mode 08:24:22 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000000005ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 08:24:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:24:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 313.008019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.353829] netlink: 'syz-executor1': attribute type 4 has an invalid length. [ 313.361197] netlink: 17 bytes leftover after parsing attributes in process `syz-executor1'. [ 313.433348] device bond0 left promiscuous mode [ 313.438025] device bond_slave_0 left promiscuous mode [ 313.443748] device bond_slave_1 left promiscuous mode 08:24:23 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x1000000007) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@empty, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bcsh0\x00', r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp-reno\x00', 0xb) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="24000000220007031dfffd946f610500000000000500000000000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 08:24:23 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) 08:24:23 executing program 4: syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) 08:24:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 08:24:23 executing program 3: accept$unix(0xffffffffffffff9c, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) r0 = socket$netlink(0x10, 0x3, 0x40000000000010) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e105200028213ee20600d4ff5bffff00c7e5ed5e00000000c85500000000000000000000000000000000000000", 0x48}], 0x1) 08:24:23 executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000100)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="5500000018007f5800fe01b2a4a280930a06000000a84599910000002900090008000c00010000001900150006000000000067c01338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) [ 313.619713] netlink: 13 bytes leftover after parsing attributes in process `syz-executor1'. [ 313.667269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 313.718504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 313.733431] netlink: 13 bytes leftover after parsing attributes in process `syz-executor1'. 08:24:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000049c0)={&(0x7f0000000480)=@bridge_getlink={0x28, 0x12, 0x0, 0x0, 0x25dfdbfb, {}, [@IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) 08:24:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040), 0xfdfd) 08:24:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x829, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 08:24:24 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0xffffffffffffffd1, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0xab14, 0x0) 08:24:24 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x2000000000, 0x0, &(0x7f0000000040)='veth1_to_bond\x00'}) 08:24:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="9eb4", 0x2}], 0x1) 08:24:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f00006ed000), &(0x7f0000001440)=0x492) 08:24:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x3, 0x0) 08:24:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) 08:24:24 executing program 3: 08:24:24 executing program 4: 08:24:24 executing program 3: 08:24:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:24 executing program 4: 08:24:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="5b893526433f5aad0249944e90a7995d9a332fa9085d8a20c9c34a65b03999ae38f9ccfc621b1de8f37fe57b5133bd60cbc96d62b0b9ebb405f6d0ee75e688c72be062138ad02c05eca02781447007db30cbf5fb206b02d83c581c64eb0bca7be60db4edc01b0103ff987dc6f321923206d6437385fa4336bd75767d55e0da0862", 0x81) 08:24:25 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:25 executing program 1: 08:24:25 executing program 3: 08:24:25 executing program 4: 08:24:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:25 executing program 1: 08:24:25 executing program 3: 08:24:25 executing program 4: 08:24:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 08:24:25 executing program 3: 08:24:25 executing program 2: 08:24:25 executing program 1: [ 315.982507] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:26 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x3, 0x0) 08:24:26 executing program 4: 08:24:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 08:24:26 executing program 3: 08:24:26 executing program 2: [ 316.364459] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:26 executing program 1: 08:24:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 08:24:26 executing program 4: 08:24:26 executing program 2: 08:24:26 executing program 3: [ 316.834102] netlink: 'syz-executor5': attribute type 1 has an invalid length. 08:24:26 executing program 1: 08:24:27 executing program 2: 08:24:27 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) 08:24:27 executing program 4: 08:24:27 executing program 3: 08:24:27 executing program 5: 08:24:27 executing program 2: 08:24:27 executing program 1: 08:24:27 executing program 4: 08:24:27 executing program 1: 08:24:27 executing program 5: 08:24:27 executing program 2: 08:24:27 executing program 3: 08:24:27 executing program 4: 08:24:28 executing program 3: 08:24:28 executing program 1: 08:24:28 executing program 2: 08:24:28 executing program 5: 08:24:28 executing program 4: 08:24:28 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3, 0x0) 08:24:28 executing program 5: 08:24:28 executing program 4: 08:24:28 executing program 2: socket$inet6(0xa, 0x803, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) 08:24:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 08:24:28 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x1, [@typed={0x14, 0x0, @ipv6=@mcast2}]}]}, 0x2c}}, 0x0) 08:24:28 executing program 5 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xc8) shutdown(r1, 0x1) [ 318.900846] FAULT_INJECTION: forcing a failure. [ 318.900846] name failslab, interval 1, probability 0, space 0, times 1 [ 318.912369] CPU: 0 PID: 8755 Comm: syz-executor3 Not tainted 4.19.0+ #80 [ 318.919278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.928698] Call Trace: [ 318.931316] ================================================================== [ 318.938700] BUG: KMSAN: uninit-value in get_stack_info+0x720/0x9d0 [ 318.945040] CPU: 0 PID: 8755 Comm: syz-executor3 Not tainted 4.19.0+ #80 [ 318.951890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.961250] Call Trace: [ 318.963859] dump_stack+0x419/0x480 [ 318.967507] ? _raw_spin_lock_irqsave+0x237/0x340 [ 318.972367] ? get_stack_info+0x720/0x9d0 [ 318.976543] kmsan_report+0x19f/0x300 [ 318.980362] __msan_warning+0x76/0xd0 [ 318.984179] get_stack_info+0x720/0x9d0 [ 318.988188] __unwind_start+0x7d/0xe0 [ 318.992020] show_trace_log_lvl+0x20e/0x11e0 [ 318.996458] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 319.001857] show_stack+0x12e/0x170 [ 319.005506] dump_stack+0x32d/0x480 [ 319.009160] should_fail+0x11e5/0x13c0 [ 319.013077] __should_failslab+0x278/0x2a0 [ 319.017331] should_failslab+0x29/0x70 [ 319.021231] kmem_cache_alloc_node+0x164/0xec0 [ 319.025832] ? __alloc_skb+0x32e/0xeb0 [ 319.029750] __alloc_skb+0x32e/0xeb0 [ 319.033492] netlink_sendmsg+0xc9e/0x1440 [ 319.037683] ___sys_sendmsg+0xe68/0x1250 [ 319.041764] ? netlink_getsockopt+0x16b0/0x16b0 [ 319.046484] ? __fdget+0x329/0x440 [ 319.050044] __se_sys_sendmsg+0x305/0x460 [ 319.054226] __x64_sys_sendmsg+0x4a/0x70 [ 319.058304] do_syscall_64+0xcf/0x110 [ 319.062129] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.067339] RIP: 0033:0x457569 [ 319.070544] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.089463] RSP: 002b:00007fc5d7f7ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.097192] RAX: ffffffffffffffda RBX: 00007fc5d7f7ec90 RCX: 0000000000457569 [ 319.104471] RDX: 0000000000000000 RSI: 000000002001dfc8 RDI: 0000000000000003 [ 319.111749] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 319.119031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5d7f7f6d4 [ 319.126315] R13: 00000000004c3aee R14: 00000000004d5bd8 R15: 0000000000000004 [ 319.133607] [ 319.135239] Local variable description: ----state@show_trace_log_lvl [ 319.141727] Variable was created at: [ 319.145460] show_trace_log_lvl+0xb3/0x11e0 [ 319.149792] show_stack+0x12e/0x170 [ 319.153414] ================================================================== [ 319.160774] Disabling lock debugging due to kernel taint [ 319.166237] Kernel panic - not syncing: panic_on_warn set ... [ 319.166237] [ 319.173621] CPU: 0 PID: 8755 Comm: syz-executor3 Tainted: G B 4.19.0+ #80 [ 319.181864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.191222] Call Trace: [ 319.193830] dump_stack+0x419/0x480 [ 319.197482] panic+0x57e/0xb28 [ 319.200729] kmsan_report+0x300/0x300 [ 319.204556] __msan_warning+0x76/0xd0 [ 319.208375] get_stack_info+0x720/0x9d0 [ 319.212375] __unwind_start+0x7d/0xe0 [ 319.216188] show_trace_log_lvl+0x20e/0x11e0 [ 319.220620] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 319.226030] show_stack+0x12e/0x170 [ 319.229678] dump_stack+0x32d/0x480 [ 319.233332] should_fail+0x11e5/0x13c0 [ 319.237243] __should_failslab+0x278/0x2a0 [ 319.241498] should_failslab+0x29/0x70 [ 319.245398] kmem_cache_alloc_node+0x164/0xec0 [ 319.250005] ? __alloc_skb+0x32e/0xeb0 [ 319.253922] __alloc_skb+0x32e/0xeb0 [ 319.257665] netlink_sendmsg+0xc9e/0x1440 [ 319.261845] ___sys_sendmsg+0xe68/0x1250 [ 319.265921] ? netlink_getsockopt+0x16b0/0x16b0 [ 319.270630] ? __fdget+0x329/0x440 [ 319.274194] __se_sys_sendmsg+0x305/0x460 [ 319.278369] __x64_sys_sendmsg+0x4a/0x70 [ 319.282445] do_syscall_64+0xcf/0x110 [ 319.286262] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 319.291458] RIP: 0033:0x457569 [ 319.294665] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.313580] RSP: 002b:00007fc5d7f7ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.321306] RAX: ffffffffffffffda RBX: 00007fc5d7f7ec90 RCX: 0000000000457569 [ 319.328583] RDX: 0000000000000000 RSI: 000000002001dfc8 RDI: 0000000000000003 [ 319.335865] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 319.343145] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5d7f7f6d4 08:24:29 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) 08:24:29 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 08:24:29 executing program 5: r0 = getpid() ptrace$setopts(0x4206, r0, 0x4f4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$int_in(r1, 0x800000005452, &(0x7f0000000100)=0xc8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x7, 0x0, 0x2, 0x0, 0x800, 0x6, 0x2, 0x101, 0xe2, 0x9, 0x5, 0x0, 0x0, 0x5, 0x7, 0x400000000000, 0x7fff, 0x6, 0x6}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0), 0x4) shutdown(r2, 0x1) [ 319.350424] R13: 00000000004c3aee R14: 00000000004d5bd8 R15: 0000000000000004 [ 319.358790] Kernel Offset: disabled [ 319.362422] Rebooting in 86400 seconds..