[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   62.258964] audit: type=1800 audit(1543885649.315:25): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   62.278297] audit: type=1800 audit(1543885649.315:26): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   62.297794] audit: type=1800 audit(1543885649.345:27): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts.
2018/12/04 01:07:42 fuzzer started
2018/12/04 01:07:47 dialing manager at 10.128.0.26:44969
2018/12/04 01:07:47 syscalls: 1
2018/12/04 01:07:47 code coverage: enabled
2018/12/04 01:07:47 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/12/04 01:07:47 setuid sandbox: enabled
2018/12/04 01:07:47 namespace sandbox: enabled
2018/12/04 01:07:47 Android sandbox: /sys/fs/selinux/policy does not exist
2018/12/04 01:07:47 fault injection: enabled
2018/12/04 01:07:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/12/04 01:07:47 net packet injection: enabled
2018/12/04 01:07:47 net device setup: enabled
01:10:35 executing program 0:

syzkaller login: [  249.426860] IPVS: ftp: loaded support on port[0] = 21
[  251.729434] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.736035] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.744828] device bridge_slave_0 entered promiscuous mode
[  251.891579] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.898216] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.906778] device bridge_slave_1 entered promiscuous mode
[  252.036677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  252.169239] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  252.593330] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  252.738541] bond0: Enslaving bond_slave_1 as an active interface with an up link
01:10:40 executing program 1:

[  253.566096] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  253.574398] team0: Port device team_slave_0 added
[  253.694919] IPVS: ftp: loaded support on port[0] = 21
[  253.768812] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  253.777210] team0: Port device team_slave_1 added
[  254.076680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.227817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  254.235154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.244215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.469620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  254.477396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.486780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.700838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  254.708818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.718400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.905631] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.912268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.919236] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.925836] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.934744] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  257.411971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  257.534854] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.541310] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.550002] device bridge_slave_0 entered promiscuous mode
[  257.690316] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.696938] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.706196] device bridge_slave_1 entered promiscuous mode
[  257.932281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  258.133962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  258.925663] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  259.108927] bond0: Enslaving bond_slave_1 as an active interface with an up link
01:10:46 executing program 2:

[  259.335187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  259.345061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.641806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  259.648864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  260.129427] IPVS: ftp: loaded support on port[0] = 21
[  260.328019] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  260.336503] team0: Port device team_slave_0 added
[  260.566322] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  260.574599] team0: Port device team_slave_1 added
[  260.880702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  260.887975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  260.897127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  261.193002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  261.200044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  261.209192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  261.420074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  261.427836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  261.437069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  261.785153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  261.792847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  261.801915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  264.369490] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.376155] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.384834] device bridge_slave_0 entered promiscuous mode
[  264.649371] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.655956] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.664667] device bridge_slave_1 entered promiscuous mode
[  264.875097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  264.883124] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.889607] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.896659] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.903221] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.912268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  265.042302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  265.163473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  266.044175] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  266.397929] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  266.730967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  266.738180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  266.972013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  266.979048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  267.672033] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  267.680197] team0: Port device team_slave_0 added
[  267.745735] 8021q: adding VLAN 0 to HW filter on device bond0
01:10:55 executing program 3:

[  268.079736] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  268.088164] team0: Port device team_slave_1 added
[  268.434658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  268.441991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  268.450771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  268.770373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  268.777584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  268.786635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  268.813081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  269.145654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  269.155392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  269.164315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  269.179928] IPVS: ftp: loaded support on port[0] = 21
[  269.531881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  269.539484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  269.548556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  270.057441] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  270.064015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.072286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.348181] 8021q: adding VLAN 0 to HW filter on device team0
[  273.238646] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.245254] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.252328] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.258875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.268066] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  274.163286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  274.821158] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.827960] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.836677] device bridge_slave_0 entered promiscuous mode
[  275.175766] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.182404] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.191033] device bridge_slave_1 entered promiscuous mode
[  275.531061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  275.797383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  276.752745] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  277.093592] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  277.404565] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  277.411619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  277.670711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  277.677920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.320407] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.604023] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  278.612619] team0: Port device team_slave_0 added
01:11:05 executing program 4:

[  279.006715] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  279.014998] team0: Port device team_slave_1 added
[  279.408982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  279.416192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  279.425108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
01:11:06 executing program 0:

[  279.732769] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  279.810393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  279.817502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  279.826422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
01:11:07 executing program 0:
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)={0x0, @aes128, 0x0, "839fa1aee70c1af0"})
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
unshare(0x0)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r0, r0}, &(0x7f00000009c0)=""/240, 0x6a, 0x0)

[  280.237731] IPVS: ftp: loaded support on port[0] = 21
[  280.240718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  280.250761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  280.260006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
01:11:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x1}}, 0x21)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f00005b1ffc), 0x4)

[  280.733877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  280.741539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  280.750784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
01:11:08 executing program 0:
syz_emit_ethernet(0x140, &(0x7f0000000000)={@local, @random="8a37962a294f", [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2, @dev}}}}}}}, 0x0)
chroot(&(0x7f0000000080)='./file0\x00')

[  281.164191] dccp_v6_rcv: dropped packet with invalid checksum
[  281.212256] dccp_v6_rcv: dropped packet with invalid checksum
[  281.296667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  281.303144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  281.310786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
01:11:08 executing program 0:
r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x80000000000004, 0xffffffffffffffff, 0x4, {0x0, 0x3, 0x80000001, 0x4}})
r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xfffffffffffffffe, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000380)={0x1, 0x1, 0x200, 0xa2, &(0x7f0000000580)=""/162, 0x1000, &(0x7f0000000640)=""/4096, 0x1000, &(0x7f0000001640)=""/4096})
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x642000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ff012dbd7000fbdbdf251100000014000300080008000004000008000800ff000000bc466621e37f347220460e3ccf4f"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=<r3=>0x0)
fcntl$setstatus(r0, 0x4, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000002640))
capset(&(0x7f0000000200)={0x20071026, r3}, &(0x7f0000000240)={0x81, 0x400, 0x7fffffff, 0x1, 0x8001, 0x5})
write$cgroup_type(r1, &(0x7f0000000440)='threaded\x00', 0x9)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200, 0x0)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000004c0))
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000280)={0x2, 0x1, 0x7, {0x5, 0x8, 0x4, 0x3}})
ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000140)={0x5, 0x1ff, 0x1f, [], &(0x7f0000000040)=0xca8})
ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000180)={0x7, 0xffffffffffffffff, 0x5})

[  281.691453] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure
01:11:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  282.144585] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
01:11:09 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

[  282.936588] 8021q: adding VLAN 0 to HW filter on device team0
01:11:10 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x83, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x5c, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
accept(r1, &(0x7f00000001c0)=@nl=@proc, 0x0)

[  285.101797] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.108289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.115367] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.121900] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.130588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  286.162078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  286.803980] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.810454] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.819217] device bridge_slave_0 entered promiscuous mode
[  287.142910] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.149381] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.158254] device bridge_slave_1 entered promiscuous mode
[  287.514963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  287.976611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  288.636127] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.981696] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  289.292077] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  289.550251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  289.557542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  289.913714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  289.920797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  290.120265] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  290.691398] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  290.699640] team0: Port device team_slave_0 added
01:11:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000040)='gretap0\x00', 0x0)
socket$inet6(0xa, 0x100800000000002, 0x88)
r0 = socket$inet(0x2b, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
recvmmsg(r0, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400})

[  290.987549] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  290.995916] team0: Port device team_slave_1 added
[  291.145083] hrtimer: interrupt took 58287 ns
[  291.307457] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  291.318381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  291.327360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  291.373118] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  291.379503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  291.387601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  291.637005] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  291.644367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  291.653416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  291.884285] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  291.892082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  291.901063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  292.094962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  292.102584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  292.111470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  292.258259] 8021q: adding VLAN 0 to HW filter on device team0
[  294.343063] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.349554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.358472] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.365020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.373638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  294.380222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  296.157459] 8021q: adding VLAN 0 to HW filter on device bond0
01:11:23 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='vmnet0+)eth1keyring#lo#\x00'}, 0x10)
getpid()
perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xffffffffffffffbc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x1, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x8)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x70, 0x5, 0x81, 0x100, 0x20, 0x0, 0x6, 0x0, 0x2, 0x81, 0x40, 0x0, 0x2668, 0x0, 0xe74, 0x6d4, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8001, 0x0, 0x8001, 0x6, 0xff, 0x8d, 0x80000001, 0x0, 0x4, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x6aca5fcaa22fed38}, 0x0, 0x4800000, 0x0, 0x0, 0x9, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffff9c, 0x5)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffff)
write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d)
close(r1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x7)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)

[  296.973580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  297.702355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  297.708737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  297.716837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  298.203808] 8021q: adding VLAN 0 to HW filter on device team0
[  300.658361] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.179979] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
01:11:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x100800000000002, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r0 = socket$inet(0x2b, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
recvmmsg(r0, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400})

[  301.642738] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  301.648979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  301.656922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.982524] 8021q: adding VLAN 0 to HW filter on device team0
01:11:30 executing program 4:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)

01:11:30 executing program 0:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={<r3=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8001, 0x0, 0x7f45, 0x1, 0x80}, &(0x7f0000000040)=0x98)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x1f, 0x8bd, 0x8, 0x1000000000000008, 0x6, 0xc1390000, 0x5, 0x0, r3}, 0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$setperm(0x5, r0, 0x808010002)
keyctl$get_security(0x11, r0, 0x0, 0x0)

01:11:30 executing program 5:
socketpair$inet6(0xa, 0x4, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fstatfs(r0, &(0x7f0000000040)=""/227)
r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x54)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc)
ioctl$KVM_NMI(r2, 0xae9a)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x422002, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000300)={<r4=>0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x101, 0x8e, 0x2, 0xf1, 0x3d}, &(0x7f00000003c0)=0x98)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=<r5=>r4, &(0x7f0000000440)=0x4)
ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000480))
getxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@random={'os2.', 'ppp0lo\x00'}, &(0x7f0000000540)=""/103, 0x67)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000003, 0x100010, r3, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000005c0)={[{0x70c, 0x6, 0x5, 0x4, 0x5, 0x5fbc, 0x7, 0x7, 0x2000400000000000, 0xfffffffffffffffd, 0x3f, 0x80, 0x8}, {0x5, 0x210000000000, 0x3, 0x6, 0x2000, 0x8, 0xe62c, 0x5, 0x2, 0x19, 0x831f, 0x9, 0x3}, {0x1, 0x20, 0x4, 0x9, 0xd26f, 0x9, 0x3f, 0x1, 0x7ff, 0x100000000, 0x9, 0x3, 0x2}], 0xfffffffffffffffe})
ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000640)={0xff, 0xfffffffffffffffa, [], {0x0, @bt={0x4, 0x1, 0x1, 0x2, 0x400, 0x579, 0x2, 0x6, 0x8001, 0x0, 0xe4, 0x7f, 0x101, 0x4, 0x14}}})
lsetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'osx.', 'ppp0lo\x00'}, &(0x7f0000000780)='ppp0lo\x00', 0x7, 0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000007c0)={0x7fff, 0x4, [0x6]})
ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000800)={r5, 0x8, 0x8, [0x488, 0x10001, 0x3, 0x1, 0x9a, 0x6, 0x8, 0x5]}, 0x18)
ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000840)={0x2, 0x6, 0x9b5})
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f00000008c0)={0x6, &(0x7f0000000880)=[{}, {<r6=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000a00)={r6, 0x8, &(0x7f0000000900)=[0x4, 0x91, 0x40, 0x4, 0x131, 0x9, 0x0, 0x1ff], &(0x7f0000000940)=[0x4], 0x77, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=[0x40, 0x100, 0x80, 0x0, 0x4, 0x8, 0x7, 0x6, 0xfff]})
pread64(r3, &(0x7f0000000a40)=""/131, 0x83, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000b00)="69be7f8e8238beac6099f41bfd3aa3194c388e357e2ec7aecdf798e31fb94b05a412f00f6c44ced7a7823f3b170a823b5cb4bc4ff443f6181a34f41d70491016206b8c77322a6d1f2862b6ab0487ed73dff59cff2339c9a79f1bb5a5e1bf51d7141e4afd9fbad290da8e6118cc9f104096a238", 0x73)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000b80)={r4, @in={{0x2, 0x4e22, @rand_addr=0x3}}}, 0x84)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000c40)='trusted.overlay.redirect\x00', &(0x7f0000000c80)='./file0\x00', 0x8, 0x2)
r7 = syz_open_dev$admmidi(&(0x7f0000000cc0)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x6000)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000d00)={r5, @in6={{0xa, 0x4e24, 0x4, @remote, 0x10001}}, 0x2, 0x800, 0x8, 0x145, 0x10}, 0x98)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000dc0)={0x0, 0x2710}, 0x10)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/dlm-monitor\x00', 0x10000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000e40)={0x80000000, 0x800, 0x2, 0x8, 0x8}, 0x14)

01:11:30 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='vmnet0+)eth1keyring#lo#\x00'}, 0x10)
getpid()
perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xffffffffffffffbc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x1, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x8)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x70, 0x5, 0x81, 0x100, 0x20, 0x0, 0x6, 0x0, 0x2, 0x81, 0x40, 0x0, 0x2668, 0x0, 0xe74, 0x6d4, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8001, 0x0, 0x8001, 0x6, 0xff, 0x8d, 0x80000001, 0x0, 0x4, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x6aca5fcaa22fed38}, 0x0, 0x4800000, 0x0, 0x0, 0x9, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffff9c, 0x5)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffff)
write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d)
close(r1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x7)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)

01:11:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000040)='gretap0\x00', 0x0)
socket$inet6(0xa, 0x100800000000002, 0x88)
r0 = socket$inet(0x2b, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
recvmmsg(r0, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400})

01:11:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x100800000000002, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r0 = socket$inet(0x2b, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
recvmmsg(r0, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400})

[  304.066254] netlink: 'syz-executor4': attribute type 1 has an invalid length.
[  304.073927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'.
[  304.082680] netlink: 'syz-executor4': attribute type 1 has an invalid length.
[  304.090025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'.
01:11:31 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x800000000000a)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0}, 0x78)

01:11:31 executing program 0:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0)

01:11:31 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'bpq0\x00'})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f00000002c0)='security.SMACK64IPOUT\x00', &(0x7f0000000700)='security-\x00', 0xa, 0x0)

01:11:31 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000540)='tasks\x00', 0x2, 0x0)
sendfile(r1, r1, &(0x7f0000000080)=0x2000ffd, 0xb)

[  304.763306] kernel msg: ebtables bug: please report to author: Entries_size never zero
[  304.852065] kernel msg: ebtables bug: please report to author: Entries_size never zero
01:11:31 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='vmnet0+)eth1keyring#lo#\x00'}, 0x10)
getpid()
perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xffffffffffffffbc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x1, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x8)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x70, 0x5, 0x81, 0x100, 0x20, 0x0, 0x6, 0x0, 0x2, 0x81, 0x40, 0x0, 0x2668, 0x0, 0xe74, 0x6d4, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8001, 0x0, 0x8001, 0x6, 0xff, 0x8d, 0x80000001, 0x0, 0x4, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x6aca5fcaa22fed38}, 0x0, 0x4800000, 0x0, 0x0, 0x9, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffff9c, 0x5)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffff)
write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d)
close(r1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x7)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)

01:11:32 executing program 0:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="5500000018007f5800fe01b2a4a280930a06000000a84599910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1}, 0x0)

01:11:32 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:32 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = semget$private(0x0, 0x40000000001005, 0x0)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000340))

[  305.702813] IPVS: ftp: loaded support on port[0] = 21
[  306.987230] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.993744] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.001290] device bridge_slave_0 entered promiscuous mode
[  307.072669] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.079051] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.087206] device bridge_slave_1 entered promiscuous mode
[  307.156476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  307.228815] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  307.442900] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  307.517436] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  307.655676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  307.662811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.876294] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  307.883878] team0: Port device team_slave_0 added
[  307.959663] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  307.967427] team0: Port device team_slave_1 added
[  308.042535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  308.122531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  308.197718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  308.205190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  308.214299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  308.287448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  308.294818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  308.304052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  309.090168] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.096664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.103635] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.110057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.118230] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  309.672106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  312.055222] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.463691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  312.756421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  312.762789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.770601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  313.062904] 8021q: adding VLAN 0 to HW filter on device team0
01:11:41 executing program 5:
syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f")
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000080)='./file0\x00')

01:11:41 executing program 1:
pipe(&(0x7f0000000040))
r0 = getpgrp(0x0)
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
rt_sigtimedwait(&(0x7f0000000140), 0x0, 0x0, 0x8)
write(0xffffffffffffffff, 0x0, 0x0)
clock_settime(0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

01:11:41 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000000)=@in6={0xa, 0x1, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0)

01:11:41 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:41 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:41 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='vmnet0+)eth1keyring#lo#\x00'}, 0x10)
getpid()
perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0xffffffffffffffbc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x1, 0x0, 0x7, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffff9c, 0x8)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x70, 0x5, 0x81, 0x100, 0x20, 0x0, 0x6, 0x0, 0x2, 0x81, 0x40, 0x0, 0x2668, 0x0, 0xe74, 0x6d4, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8001, 0x0, 0x8001, 0x6, 0xff, 0x8d, 0x80000001, 0x0, 0x4, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x6aca5fcaa22fed38}, 0x0, 0x4800000, 0x0, 0x0, 0x9, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffff9c, 0x5)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffff)
write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d)
close(r1)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x7)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00)

01:11:42 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:42 executing program 3:
clone(0x20040200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827")
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00')
execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f00000004c0)='md5sum&,&\x00'])
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
sendfile(r1, r2, 0x0, 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

01:11:42 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000367ffffff000d00000002000000010000003f0006c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0)

01:11:42 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0xfffffffffffffe65, 0x0})

01:11:42 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:42 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000367ffffff000d00000002000000010000003f0006c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0)

01:11:43 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
listen(r1, 0x85)

01:11:43 executing program 1:

01:11:43 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

01:11:43 executing program 5:
clone(0x60000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

01:11:43 executing program 2:

[  316.436910] IPVS: ftp: loaded support on port[0] = 21
01:11:43 executing program 1:

01:11:43 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
listen(r1, 0x85)

[  316.699998] IPVS: ftp: loaded support on port[0] = 21
01:11:43 executing program 3:
clone(0x20040200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
execve(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827")
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00')
execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f00000004c0)='md5sum&,&\x00'])
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0)
sendfile(r1, r2, 0x0, 0x1)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x1000000000014)

01:11:43 executing program 0:

01:11:43 executing program 2:

01:11:43 executing program 4:
socket$unix(0x1, 0x1, 0x0)
r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
listen(r1, 0x85)

01:11:44 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0})

[  317.114510] binder: 8555:8556 unknown command 536871040
[  317.120025] binder: 8555:8556 ioctl c0306201 20000440 returned -22
01:11:44 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$unix(0x1, 0x1, 0x0)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:44 executing program 0:

01:11:44 executing program 2:

[  317.239770] binder: 8555:8560 BC_INCREFS_DONE u0000000000000000 no match
[  317.285395] binder: 8555:8556 unknown command 536871040
[  317.290854] binder: 8555:8556 ioctl c0306201 20000440 returned -22
01:11:44 executing program 5:

01:11:44 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$unix(0x1, 0x1, 0x0)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:44 executing program 1:

01:11:44 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$unix(0x1, 0x1, 0x0)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000fff000/0x1000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00')
preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0)
ptrace$peek(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

01:11:45 executing program 0:

01:11:45 executing program 5:

01:11:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="f36c640f01ca26ae0f09c4e21d0094b7090000000f03b700280000c4e16573dd51b8020000000f23d00f21f835200000010f23f80f20c035000000800f22c066baf80cb8c8bde087ef66bafc0c66ed", 0x4f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c)

01:11:45 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8014000000000088)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0)
dup2(r0, r1)

01:11:45 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:45 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006)

01:11:45 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000007c0)="606e4e59be899542e7d36ac17957d7150942a440b9b3a513dfe4b8e2676415672c4bbc76e920ca0d6507559f955a547af09380d022d074350ff402415ab7f1ab8655197f0e9537ac63a6a8afa63c007d7ceac2a955d2f1d18148294e58061549442a31fb25c7c45c1e47ec41a7fe7a63f293cc152d6642464b89e5d8dd9c17f9469062925118236d72494f4df79acc65f1f865e95ec68fc47cc4ebfb1bdf52482b7f9cdeb934081f50c4067287571752050fb387967f81138337ed11c3a8b86405f4ce1e41e58bf4d4", 0xc9}], 0x1}}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
shutdown(r0, 0x1)
socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000003a00), 0x3a1, 0x0, 0x0)

01:11:45 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r1}}, 0xc)

01:11:45 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8014000000000088)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0)
dup2(r0, r1)

01:11:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="f36c640f01ca26ae0f09c4e21d0094b7090000000f03b700280000c4e16573dd51b8020000000f23d00f21f835200000010f23f80f20c035000000800f22c066baf80cb8c8bde087ef66bafc0c66ed", 0x4f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c)

01:11:46 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:46 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @remote}, 0x10)

01:11:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
dup(r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
r2 = dup3(r1, r0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001180)={0x8, "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", 0x1000}, 0xec9)

[  319.355066] device syz_tun entered promiscuous mode
01:11:46 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

[  319.463266] device syz_tun left promiscuous mode
01:11:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="f36c640f01ca26ae0f09c4e21d0094b7090000000f03b700280000c4e16573dd51b8020000000f23d00f21f835200000010f23f80f20c035000000800f22c066baf80cb8c8bde087ef66bafc0c66ed", 0x4f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c)

01:11:46 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8014000000000088)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0)
dup2(r0, r1)

01:11:46 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x1, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700))

01:11:46 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:46 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r0, r1, 0x0, 0xe6)

01:11:47 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCNXCL(r1, 0x540d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

01:11:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="f36c640f01ca26ae0f09c4e21d0094b7090000000f03b700280000c4e16573dd51b8020000000f23d00f21f835200000010f23f80f20c035000000800f22c066baf80cb8c8bde087ef66bafc0c66ed", 0x4f}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000540)={0xd0003})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c)

01:11:47 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000700)=""/246)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0)
fchdir(r2)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440))
ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040))

01:11:47 executing program 5:

01:11:47 executing program 3:

01:11:47 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:47 executing program 0:

01:11:48 executing program 5:

01:11:48 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:48 executing program 2:

01:11:48 executing program 3:

01:11:48 executing program 1:

01:11:48 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:48 executing program 0:

01:11:48 executing program 5:

01:11:48 executing program 2:

01:11:48 executing program 3:

01:11:48 executing program 1:

01:11:48 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/4096)

01:11:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fcntl$lock(r0, 0x25, &(0x7f0000000140))

01:11:49 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:49 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

01:11:49 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, <r1=>0xffffffffffffffff])
setgid(r1)

01:11:49 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue1\x00'})

01:11:49 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r3 = socket$unix(0x1, 0x1, 0x0)
connect(r3, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:49 executing program 0:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0)
clone(0x70024000, 0x0, 0x0, 0x0, 0x0)

01:11:49 executing program 2:
set_mempolicy(0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18}, 0x18)

01:11:49 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:49 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="006d656d6f727920e1492ffcd3c83a1ce66a5cd7d8d95d5b61f10b8017323bf42bde301d3b3a83fea7037ebe7f7c2f1e0b516dadf9095ef18c5568256f30ae40c9eafbd6d3977746a54f2c7f3d14e9d6af3e732d9f3c83dd3af061005f312e0d5b"], 0x61)

01:11:49 executing program 5:
socketpair$unix(0x1, 0x100000000002, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200001a4b0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001030000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="7a64f6bfff9c6ca28be45c3904ff", 0x0, 0x101}, 0x28)

01:11:50 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x3}})

01:11:50 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
r1 = gettid()
timer_create(0x0, &(0x7f0000001280)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
sendfile(r0, r2, 0x0, 0x80040006)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r3, r0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x1004000000016)

01:11:50 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000380))

01:11:50 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x2a8, 0x0, 0x0, 0x0, 0x4})
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, 0xab052ebbe6fbd72e})

01:11:50 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000300)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f868000089dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad44fa1144c7448d640aa88a66a71b77d73a924ea027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e85c93cdfa08e")
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x6, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
write$P9_RWRITE(r1, &(0x7f00000002c0)={0xb}, 0xb)

01:11:50 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1b4, 0x40a)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x4, 0x4)
recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=""/18, 0x12}}], 0x80001fc, 0x12000, &(0x7f00000009c0)={0x77359400})

[  323.636017] *** Guest State ***
[  323.639409] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7
[  323.648596] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871
[  323.657592] CR3 = 0x0000000000000000
[  323.661413] PDPTR0 = 0x0000000000000000  PDPTR1 = 0x0000000000000000
[  323.668059] PDPTR2 = 0x0000000000000000  PDPTR3 = 0x0000000000000000
[  323.674741] RSP = 0x0000000000000000  RIP = 0x000000000000fff0
[  323.680882] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  323.687118] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[  323.693947] CS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.702140] DS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.710224] SS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.718399] ES:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.726543] FS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.734741] GS:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.742918] GDTR:                           limit=0x00000000, base=0x0000000000000000
[  323.751015] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.759150] IDTR:                           limit=0x00000000, base=0x0000000000000000
[  323.767344] TR:   sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000
[  323.775536] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  323.782538] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  323.790083] Interruptibility = 00000000  ActivityState = 00000000
[  323.796502] *** Host State ***
[  323.799750] RIP = 0xffffffff812ce0a8  RSP = 0xffff88811373f368
[  323.805894] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  323.812503] FSBase=00007f65e2153700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000
[  323.820378] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000
[  323.826570] CR0=0000000080050033 CR3=0000000115b17000 CR4=00000000001426e0
[  323.833808] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b001260
[  323.840593] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  323.846843] *** Control State ***
[  323.850353] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2
[  323.857313] EntryControls=0000d1ff ExitControls=002fefff
[  323.862956] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  323.870013] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[  323.876905] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
01:11:50 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
uselib(0x0)
ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000140)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b})

01:11:51 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

[  323.883754]         reason=80000021 qualification=0000000000000000
[  323.890158] IDTVectoring: info=00000000 errcode=00000000
[  323.895890] TSC Offset = 0xffffff4ce84620fb
[  323.900298] EPT pointer = 0x000000017320701e
01:11:51 executing program 5:
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = getpid()
setpgid(r1, 0x0)
getpid()
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)

01:11:51 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r0, 0x0, 0x100000001)

01:11:51 executing program 4:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000280)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
r2 = socket$unix(0x1, 0x1, 0x0)
listen(r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$unix(0x1, 0x1, 0x0)
connect(r4, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc)
listen(r2, 0x85)

01:11:51 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x2a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6tnl0\x00', 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4)

01:11:51 executing program 3:
r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={"73697430000000000000000200", <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_elf64(r0, 0x0, 0x0)

01:11:51 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0)
lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', 0x0, 0x0)

[  324.606470] ==================================================================
[  324.613901] BUG: KMSAN: uninit-value in sit_tunnel_xmit+0x1b7e/0x3d40
[  324.620537] CPU: 0 PID: 8853 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #103
[  324.627828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  324.637203] Call Trace:
[  324.639816]  dump_stack+0x32d/0x480
[  324.643468]  ? sit_tunnel_xmit+0x1b7e/0x3d40
[  324.647923]  kmsan_report+0x12c/0x290
[  324.651796]  __msan_warning+0x76/0xc0
01:11:51 executing program 5:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  324.655641]  sit_tunnel_xmit+0x1b7e/0x3d40
[  324.659952]  ? __dev_queue_xmit+0x2d9e/0x3e00
[  324.664478]  ? ipip6_tunnel_uninit+0x800/0x800
[  324.669092]  dev_hard_start_xmit+0x6dc/0xde0
[  324.673582]  __dev_queue_xmit+0x2d9e/0x3e00
[  324.678000]  dev_queue_xmit+0x4b/0x60
[  324.681832]  ? __netdev_pick_tx+0x14d0/0x14d0
[  324.686368]  packet_sendmsg+0x797f/0x9180
[  324.690556]  ? kmsan_memcpy_memmove_metadata+0x1a9/0xf70
[  324.696071]  ? kmsan_memcpy_metadata+0xb/0x10
[  324.700621]  ? sock_write_iter+0x102/0x4f0
[  324.704895]  ? __se_sys_write+0x17a/0x370
[  324.709079]  ? do_syscall_64+0xcf/0x110
[  324.713104]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  324.718499]  ? drop_futex_key_refs+0x232/0x330
[  324.723122]  ? futex_wait+0x942/0xc50
[  324.726973]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  324.732407]  ? aa_sk_perm+0x7ab/0x9e0
[  324.736340]  ? compat_packet_setsockopt+0x360/0x360
[  324.741388]  sock_write_iter+0x3f4/0x4f0
[  324.745502]  ? sock_read_iter+0x4e0/0x4e0
[  324.749696]  __vfs_write+0x888/0xb80
[  324.753505]  vfs_write+0x4a3/0x8f0
[  324.757114]  __se_sys_write+0x17a/0x370
[  324.761158]  __x64_sys_write+0x4a/0x70
[  324.765093]  do_syscall_64+0xcf/0x110
[  324.768936]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  324.774173] RIP: 0033:0x457569
[  324.777418] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  324.796336] RSP: 002b:00007f5c31649c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  324.804075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
[  324.811371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  324.818661] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  324.824990] binder: BC_ATTEMPT_ACQUIRE not supported
[  324.825952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c3164a6d4
[  324.825970] R13: 00000000004c5cf1 R14: 00000000004da0a8 R15: 00000000ffffffff
[  324.826005] 
[  324.826015] Uninit was created at:
[  324.826044]  kmsan_internal_poison_shadow+0x6d/0x130
[  324.826070]  kmsan_kmalloc+0xa1/0x100
[  324.826124]  kmsan_slab_alloc+0xe/0x10
[  324.831261] binder: 8862:8863 ioctl c0306201 20000600 returned -22
[  324.838519]  __kmalloc_node_track_caller+0xf62/0x14e0
[  324.838541]  __alloc_skb+0x42b/0xeb0
[  324.838560]  alloc_skb_with_frags+0x1c9/0xa80
[  324.838579]  sock_alloc_send_pskb+0xeb3/0x14c0
[  324.838602]  packet_sendmsg+0x6719/0x9180
[  324.838628]  sock_write_iter+0x3f4/0x4f0
[  324.838645]  __vfs_write+0x888/0xb80
[  324.838662]  vfs_write+0x4a3/0x8f0
[  324.838695]  __se_sys_write+0x17a/0x370
01:11:52 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  324.850995] binder: BC_ATTEMPT_ACQUIRE not supported
[  324.851144]  __x64_sys_write+0x4a/0x70
[  324.851177]  do_syscall_64+0xcf/0x110
[  324.856477] binder: 8862:8864 ioctl c0306201 20000600 returned -22
[  324.860085]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  324.860107] Disabling lock debugging due to kernel taint
[  324.937439] Kernel panic - not syncing: panic_on_warn set ...
[  324.943362] CPU: 0 PID: 8853 Comm: syz-executor3 Tainted: G    B             4.20.0-rc3+ #103
[  324.952038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  324.961406] Call Trace:
[  324.964019]  dump_stack+0x32d/0x480
[  324.967696]  panic+0x624/0xc08
[  324.970974]  kmsan_report+0x28a/0x290
[  324.974817]  __msan_warning+0x76/0xc0
[  324.978659]  sit_tunnel_xmit+0x1b7e/0x3d40
[  324.982951]  ? __dev_queue_xmit+0x2d9e/0x3e00
[  324.987475]  ? ipip6_tunnel_uninit+0x800/0x800
[  324.992079]  dev_hard_start_xmit+0x6dc/0xde0
[  324.996546]  __dev_queue_xmit+0x2d9e/0x3e00
[  325.000988]  dev_queue_xmit+0x4b/0x60
[  325.004867]  ? __netdev_pick_tx+0x14d0/0x14d0
[  325.009419]  packet_sendmsg+0x797f/0x9180
[  325.013595]  ? kmsan_memcpy_memmove_metadata+0x1a9/0xf70
[  325.019078]  ? kmsan_memcpy_metadata+0xb/0x10
[  325.023600]  ? sock_write_iter+0x102/0x4f0
[  325.027876]  ? __se_sys_write+0x17a/0x370
[  325.032055]  ? do_syscall_64+0xcf/0x110
[  325.036101]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  325.041482]  ? drop_futex_key_refs+0x232/0x330
[  325.046136]  ? futex_wait+0x942/0xc50
[  325.049973]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  325.055359]  ? aa_sk_perm+0x7ab/0x9e0
[  325.059243]  ? compat_packet_setsockopt+0x360/0x360
[  325.064273]  sock_write_iter+0x3f4/0x4f0
[  325.068408]  ? sock_read_iter+0x4e0/0x4e0
[  325.072573]  __vfs_write+0x888/0xb80
[  325.076347]  vfs_write+0x4a3/0x8f0
[  325.079928]  __se_sys_write+0x17a/0x370
[  325.083960]  __x64_sys_write+0x4a/0x70
[  325.087902]  do_syscall_64+0xcf/0x110
[  325.091730]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  325.096944] RIP: 0033:0x457569
[  325.100158] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  325.119073] RSP: 002b:00007f5c31649c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  325.126807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569
[  325.134094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  325.141387] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  325.148695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c3164a6d4
[  325.155981] R13: 00000000004c5cf1 R14: 00000000004da0a8 R15: 00000000ffffffff
[  325.164171] Kernel Offset: disabled
[  325.167809] Rebooting in 86400 seconds..