[?25l[?1c7[ ok 8[?25h[?0c. [ 32.374551] random: sshd: uninitialized urandom read (32 bytes read) [ 32.584234] kauditd_printk_skb: 10 callbacks suppressed [ 32.584242] audit: type=1400 audit(1568778462.982:35): avc: denied { map } for pid=6988 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.639956] random: sshd: uninitialized urandom read (32 bytes read) [ 33.261723] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.22' (ECDSA) to the list of known hosts. syzkaller login: [ 38.750210] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/18 03:47:49 fuzzer started [ 38.949167] audit: type=1400 audit(1568778469.342:36): avc: denied { map } for pid=6998 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.583067] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/18 03:47:50 dialing manager at 10.128.0.105:44707 2019/09/18 03:47:51 syscalls: 2466 2019/09/18 03:47:51 code coverage: enabled 2019/09/18 03:47:51 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/18 03:47:51 extra coverage: extra coverage is not supported by the kernel 2019/09/18 03:47:51 setuid sandbox: enabled 2019/09/18 03:47:51 namespace sandbox: enabled 2019/09/18 03:47:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/18 03:47:51 fault injection: enabled 2019/09/18 03:47:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/18 03:47:51 net packet injection: enabled 2019/09/18 03:47:51 net device setup: enabled [ 41.722723] random: crng init done 03:49:04 executing program 5: 03:49:04 executing program 0: 03:49:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) syz_genetlink_get_family_id$tipc(0x0) write$FUSE_POLL(r1, &(0x7f0000000540)={0x18}, 0x18) 03:49:04 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x4103, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='/', 0x1}]) fadvise64(r1, 0x0, 0x0, 0x4) 03:49:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1ce, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00T']) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 114.553936] audit: type=1400 audit(1568778544.952:37): avc: denied { map } for pid=6998 comm="syz-fuzzer" path="/root/syzkaller-shm761650743" dev="sda1" ino=2233 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 114.583451] audit: type=1400 audit(1568778544.962:38): avc: denied { map } for pid=7015 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13770 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 114.701979] IPVS: ftp: loaded support on port[0] = 21 [ 115.238441] chnl_net:caif_netlink_parms(): no params data found [ 115.247600] IPVS: ftp: loaded support on port[0] = 21 [ 115.282383] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.289154] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.296586] device bridge_slave_0 entered promiscuous mode [ 115.303803] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.310402] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.317267] device bridge_slave_1 entered promiscuous mode [ 115.332502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 115.341190] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.356819] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.364049] team0: Port device team_slave_0 added [ 115.373998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.381142] team0: Port device team_slave_1 added [ 115.390117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 115.399414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 115.461849] device hsr_slave_0 entered promiscuous mode [ 115.510461] device hsr_slave_1 entered promiscuous mode [ 115.562821] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 115.569948] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 115.578035] IPVS: ftp: loaded support on port[0] = 21 [ 115.594039] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.600500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.607327] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.613705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.669778] chnl_net:caif_netlink_parms(): no params data found [ 115.707935] IPVS: ftp: loaded support on port[0] = 21 [ 115.743375] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.749805] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.757040] device bridge_slave_0 entered promiscuous mode [ 115.763797] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.770531] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.777466] device bridge_slave_1 entered promiscuous mode [ 115.808409] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 115.814588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.825638] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 115.848955] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 115.875562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 115.882667] team0: Port device team_slave_0 added [ 115.888341] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 115.894768] chnl_net:caif_netlink_parms(): no params data found [ 115.908942] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 115.916118] team0: Port device team_slave_1 added [ 115.924703] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 115.931418] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.943576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.951825] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.958831] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.968272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 115.976527] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 116.004740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.005733] IPVS: ftp: loaded support on port[0] = 21 [ 116.013891] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.023839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.093017] device hsr_slave_0 entered promiscuous mode [ 116.160354] device hsr_slave_1 entered promiscuous mode [ 116.200684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.208416] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.214804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.222381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.230129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.237808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.246245] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 116.253334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.260521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.275430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 116.283911] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 116.289939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.303567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 116.315086] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.325029] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.332830] device bridge_slave_0 entered promiscuous mode [ 116.339753] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.348161] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.355357] device bridge_slave_1 entered promiscuous mode [ 116.376430] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 116.405037] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 116.414093] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 116.427367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 116.492826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.503329] chnl_net:caif_netlink_parms(): no params data found [ 116.512906] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 116.521283] team0: Port device team_slave_0 added [ 116.526877] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 116.534462] team0: Port device team_slave_1 added [ 116.548572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.559457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 116.578042] IPVS: ftp: loaded support on port[0] = 21 [ 116.585857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.603435] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 03:49:07 executing program 5: lseek(0xffffffffffffffff, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 116.653111] device hsr_slave_0 entered promiscuous mode 03:49:07 executing program 5: lseek(0xffffffffffffffff, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 116.700553] device hsr_slave_1 entered promiscuous mode 03:49:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") creat(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000033001901000000540000000004"], 0x1}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20c82, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0xfffffffffffffd4c}, 0x38c) dup3(r1, r2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 116.745538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.781952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.788944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.800802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 116.856694] chnl_net:caif_netlink_parms(): no params data found [ 116.876863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 116.899627] bridge0: port 1(bridge_slave_0) entered blocking state 03:49:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") creat(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000033001901000000540000000004"], 0x1}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20c82, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0xfffffffffffffd4c}, 0x38c) dup3(r1, r2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 116.911007] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.918041] device bridge_slave_0 entered promiscuous mode [ 116.926135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 116.932670] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.941074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 116.973988] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.981201] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.988075] device bridge_slave_1 entered promiscuous mode [ 117.003054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.011208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.020719] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.027098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.034208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:49:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) [ 117.068121] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 117.087909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 117.100358] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 117.110526] bond0: Enslaving bond_slave_1 as an active interface with an up link 03:49:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f014bb3"], 0x0, 0x10}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "fdef6bc9ea9f666a5e01800000d0e2e9c0f2a5fa3a048e12da6061f63df10d77d0b8467d94c13617a9b140358caacd1e0a17a170190768cdd5c0bd630bdfbea71ee31b654c3d8d12c955ebf26f0956462e1578188c060806b526db95bd1f72f3fe49ad257eef556017283f45c259823cdbd900"}) [ 117.137846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.145652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.153417] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.159876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.204170] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 117.212315] team0: Port device team_slave_0 added [ 117.217334] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.223007] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.227654] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.252707] device bridge_slave_0 entered promiscuous mode [ 117.265204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 117.291908] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 117.298961] team0: Port device team_slave_1 added [ 117.310043] hrtimer: interrupt took 37506 ns [ 117.314378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.325714] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.336025] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.343384] device bridge_slave_1 entered promiscuous mode 03:49:07 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) pipe(0x0) [ 117.354424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 117.369536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 117.383130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 117.394897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.415026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 117.435804] chnl_net:caif_netlink_parms(): no params data found [ 117.448688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.456949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.465571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.492760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 117.499813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.507946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.517228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 117.526929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 117.572187] device hsr_slave_0 entered promiscuous mode [ 117.620471] device hsr_slave_1 entered promiscuous mode [ 117.672370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 117.703557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.711212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.718950] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 117.727607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 117.739857] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.746667] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.753702] device bridge_slave_0 entered promiscuous mode [ 117.767824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.779455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 117.788955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.796481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.805935] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 117.814705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.821956] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.828402] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.835749] device bridge_slave_1 entered promiscuous mode [ 117.853182] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 117.863531] team0: Port device team_slave_0 added [ 117.871070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 117.878134] team0: Port device team_slave_1 added [ 117.883904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 117.893313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 117.904187] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 117.914723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 117.928054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 117.945927] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 117.972181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 117.979832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 117.987931] team0: Port device team_slave_0 added [ 117.995188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.002217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.052202] device hsr_slave_0 entered promiscuous mode [ 118.110325] device hsr_slave_1 entered promiscuous mode [ 118.151017] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 118.158240] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 118.167091] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 118.176624] team0: Port device team_slave_1 added [ 118.183081] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 118.190721] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 118.196903] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.204840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 118.220804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.235110] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 118.243402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.253709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.261673] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.268020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.277057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.291993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 118.301523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.325664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.334107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.342093] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.348467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.357014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.366098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.412292] device hsr_slave_0 entered promiscuous mode [ 118.440566] device hsr_slave_1 entered promiscuous mode [ 118.481359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.489308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 118.498581] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 118.506417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 118.526543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.552293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.560574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 118.569318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 118.579709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.587658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.596383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.604074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.617664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 118.626001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.633092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.641116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.650209] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.662213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 118.671004] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 118.678135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.687542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 03:49:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x4c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 118.697522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.710662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.718933] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 118.730753] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.739923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.756910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.770582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 118.778856] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 118.793019] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 118.799074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.812045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.819096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.826306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.833720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.841681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.849152] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.855526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.864439] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 118.870782] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.881018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 118.889325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.896365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.904402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.912192] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.918517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.925667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.939256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.947251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 118.957754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 118.966854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.975064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.983005] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.989350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.996518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.005767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.013444] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.019771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.026754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.036829] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 119.046117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 119.055551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.067237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.075553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.085177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.093803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.104990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.115902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.130426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.138169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.146404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.154705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.164435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.173387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.181461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.188946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.196899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.205152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.217561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 119.228918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 119.237863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.244977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.253457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.261191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.268554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.276065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.283851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.294534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.308829] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 119.317165] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 119.326925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 119.335658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.343512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.351615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.359168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.368665] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 119.375072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.386550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 119.395680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.408460] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 119.431568] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 119.441624] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 119.447734] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.463475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.471134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.481639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.491640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 119.498955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.507478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.515995] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.522385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.539051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.556128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 119.570681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.578549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.598090] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.604559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.620776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 03:49:10 executing program 3: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) 03:49:10 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x8}, 0x10) pipe(0x0) [ 119.636773] audit: type=1400 audit(1568778550.032:39): avc: denied { create } for pid=7115 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 119.677755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.686456] audit: type=1400 audit(1568778550.032:40): avc: denied { write } for pid=7115 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 119.694367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 119.722181] audit: type=1400 audit(1568778550.042:41): avc: denied { read } for pid=7115 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 119.753883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 119.763405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.771709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.779297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.787637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.797254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 119.806278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.816817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.827426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 119.835468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.845068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.858384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 119.867152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.878169] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 119.884487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.892731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.901022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.914077] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 119.926014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.417664] kvm: emulating exchange as write 03:49:11 executing program 1: mbind(&(0x7f000040a000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x6, 0x1ff, 0x0) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 03:49:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000000000/0x2000)=nil, 0x4000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:49:11 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:49:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:11 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000b153850c5de22bc84594ac6fe0cadff10bb8b71e007a64be2f8491fbe297373cee3e0f61c598a22f773861077093d30f21d0122631c015e9578f704d23421322b1ae0a1a44fd2054f36a1ad13a67aa88f857e68e0abbf005ba8ea0e479893d0f05c3be5158eef8c7a8a0dbc247d6e3780be429869c61fc86e27637a7c192d5c4e8f52995742d5f71a3e"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 03:49:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e0000001e000503ed0080647e6394f23200d2000500120111407f480f000100270000", 0x23}], 0x1}, 0x4000000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xffffffffffffff9c) openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x2000, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = syz_open_dev$admmidi(0x0, 0x3, 0x20602) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4000, 0x0) write$P9_RREMOVE(r7, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xfffffd43) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, r8}}, 0xffffff7b) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @multicast2}}}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f00000004c0)=""/52, 0x34}, {0x0}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f0000000b40)=""/151, 0x97}], 0x6, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000f80)='/dev/usbmon#\x00', 0x100000000, 0x400) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000004c0)=0xcd813fbc3a29beb6) fchown(0xffffffffffffffff, r4, r1) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r13 = syz_open_dev$amidi(&(0x7f0000000a00)='/dev/amidi#\x00', 0x7fff, 0x70000) ioctl$DRM_IOCTL_SET_UNIQUE(r13, 0x40106410, &(0x7f0000000b80)={0x7, &(0x7f0000000a40)="576e6b78a617eb"}) fstat(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3fffffffffffffea, &(0x7f0000000640)) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r4}, {0x2, 0x1}, {0x2, 0x2, r11}], {}, [{0x8, 0x0, r12}, {0x8, 0x0, r14}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x1) 03:49:11 executing program 1: syz_mount_image$hfsplus(&(0x7f00000002c0)='hfsplus\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB='type=q']) 03:49:11 executing program 4: 03:49:11 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r2, r1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 121.264181] hfsplus: type requires a 4 character value [ 121.280006] hfsplus: unable to parse mount options 03:49:11 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000b153850c5de22bc84594ac6fe0cadff10bb8b71e007a64be2f8491fbe297373cee3e0f61c598a22f773861077093d30f21d0122631c015e9578f704d23421322b1ae0a1a44fd2054f36a1ad13a67aa88f857e68e0abbf005ba8ea0e479893d0f05c3be5158eef8c7a8a0dbc247d6e3780be429869c61fc86e27637a7c192d5c4e8f52995742d5f71a3e"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1}) sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 03:49:11 executing program 0: r0 = creat(&(0x7f0000000200)='./file1\x00', 0x200010a) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 03:49:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e0000001e000503ed0080647e6394f23200d2000500120111407f480f000100270000", 0x23}], 0x1}, 0x4000000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xffffffffffffff9c) openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x2000, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = syz_open_dev$admmidi(0x0, 0x3, 0x20602) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4000, 0x0) write$P9_RREMOVE(r7, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xfffffd43) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, r8}}, 0xffffff7b) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @multicast2}}}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f00000004c0)=""/52, 0x34}, {0x0}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f0000000b40)=""/151, 0x97}], 0x6, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000f80)='/dev/usbmon#\x00', 0x100000000, 0x400) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000004c0)=0xcd813fbc3a29beb6) fchown(0xffffffffffffffff, r4, r1) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r13 = syz_open_dev$amidi(&(0x7f0000000a00)='/dev/amidi#\x00', 0x7fff, 0x70000) ioctl$DRM_IOCTL_SET_UNIQUE(r13, 0x40106410, &(0x7f0000000b80)={0x7, &(0x7f0000000a40)="576e6b78a617eb"}) fstat(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3fffffffffffffea, &(0x7f0000000640)) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r4}, {0x2, 0x1}, {0x2, 0x2, r11}], {}, [{0x8, 0x0, r12}, {0x8, 0x0, r14}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x1) [ 121.358955] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 03:49:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 121.398714] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 [ 121.436600] hfsplus: type requires a 4 character value 03:49:11 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r2, r1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e0000001e000503ed0080647e6394f23200d2000500120111407f480f000100270000", 0x23}], 0x1}, 0x4000000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xffffffffffffff9c) openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x2000, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = syz_open_dev$admmidi(0x0, 0x3, 0x20602) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4000, 0x0) write$P9_RREMOVE(r7, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xfffffd43) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, r8}}, 0xffffff7b) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @multicast2}}}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f00000004c0)=""/52, 0x34}, {0x0}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f0000000b40)=""/151, 0x97}], 0x6, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000f80)='/dev/usbmon#\x00', 0x100000000, 0x400) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000004c0)=0xcd813fbc3a29beb6) fchown(0xffffffffffffffff, r4, r1) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r13 = syz_open_dev$amidi(&(0x7f0000000a00)='/dev/amidi#\x00', 0x7fff, 0x70000) ioctl$DRM_IOCTL_SET_UNIQUE(r13, 0x40106410, &(0x7f0000000b80)={0x7, &(0x7f0000000a40)="576e6b78a617eb"}) fstat(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3fffffffffffffea, &(0x7f0000000640)) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r4}, {0x2, 0x1}, {0x2, 0x2, r11}], {}, [{0x8, 0x0, r12}, {0x8, 0x0, r14}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x1) [ 121.460829] hfsplus: unable to parse mount options 03:49:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="2e0000001e000503ed0080647e6394f23200d2000500120111407f480f000100270000", 0x23}], 0x1}, 0x4000000) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xffffffffffffff9c) openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0\x00', 0x2000, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = syz_open_dev$admmidi(0x0, 0x3, 0x20602) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4000, 0x0) write$P9_RREMOVE(r7, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xfffffd43) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, r8}}, 0xffffff7b) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e22, @multicast2}}}, 0x90) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000300)=""/13, 0xd}, {&(0x7f00000004c0)=""/52, 0x34}, {0x0}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f0000000b40)=""/151, 0x97}], 0x6, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000f80)='/dev/usbmon#\x00', 0x100000000, 0x400) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000004c0)=0xcd813fbc3a29beb6) fchown(0xffffffffffffffff, r4, r1) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r13 = syz_open_dev$amidi(&(0x7f0000000a00)='/dev/amidi#\x00', 0x7fff, 0x70000) ioctl$DRM_IOCTL_SET_UNIQUE(r13, 0x40106410, &(0x7f0000000b80)={0x7, &(0x7f0000000a40)="576e6b78a617eb"}) fstat(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3fffffffffffffea, &(0x7f0000000640)) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x1}, [{0x2, 0x5, r4}, {0x2, 0x1}, {0x2, 0x2, r11}], {}, [{0x8, 0x0, r12}, {0x8, 0x0, r14}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x1) 03:49:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSSERIAL(r1, 0x541f, 0x0) [ 121.557082] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r2, r1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) fcntl$getflags(0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r2, r1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r2, r1) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 03:49:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) fchdir(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, &(0x7f0000000480)) socket$inet6(0xa, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)) [ 121.723746] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 [ 121.748378] tty_warn_deprecated_flags: 'syz-executor.3' is using deprecated serial flags (with no effect): 00000100 03:49:12 executing program 1: perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f0000000480)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0, 0x0) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = dup2(r2, r1) fcntl$dupfd(r3, 0x0, r4) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 121.784661] tty_warn_deprecated_flags: 'syz-executor.3' is using deprecated serial flags (with no effect): 00000100 03:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:12 executing program 3: 03:49:12 executing program 5: 03:49:12 executing program 3: [ 121.897559] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 03:49:12 executing program 5: 03:49:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 03:49:12 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="fc000000480085c489c32500090007000aab080503000000000be293", 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f008061fffffff00004000630677fbac141414e934a0a6", 0x0}, 0x28) 03:49:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 122.055747] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:12 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x82040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:49:12 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:12 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) 03:49:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:12 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:12 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 122.451123] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 [ 122.525642] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 03:49:13 executing program 3: r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000), 0x4) 03:49:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:13 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:13 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:13 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 03:49:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") inotify_rm_watch(0xffffffffffffffff, 0x0) 03:49:13 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:13 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x0, 0xfffffffffffffdab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:49:13 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:13 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f008061fffffff00004000630677fbac141414e934a0a6", 0x0, 0x100}, 0x28) 03:49:13 executing program 0: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 03:49:13 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 03:49:13 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:13 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:13 executing program 0: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 03:49:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:13 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty}, @tcp={{0x0, 0x0, 0x42424242, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:49:14 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 0: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 03:49:14 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) 03:49:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 5: write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 03:49:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 0: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 03:49:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) 03:49:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 4: creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffb6, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0xfffffff0, 0x0, @mcast1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) 03:49:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 124.345898] Bearer rejected, not supported in standalone mode 03:49:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) 03:49:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) [ 124.393961] Bearer rejected, not supported in standalone mode 03:49:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 03:49:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 03:49:14 executing program 4: creat(0x0, 0x0) r0 = dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:15 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x0) 03:49:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x0) 03:49:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 03:49:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) 03:49:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:15 executing program 4: creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 03:49:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:15 executing program 4: creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:15 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0), 0x14) 03:49:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3f, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f008061fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3993be17dd8da1924425", 0x0, 0x100}, 0x28) 03:49:15 executing program 4: creat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = dup(0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 03:49:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x161d9) write(r0, &(0x7f0000000000)="cb", 0xfc8e) 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3f, 0x0, &(0x7f0000000500)="b9ff0300000d698cb89e14f008061fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3993be17dd8da1924425", 0x0, 0x100}, 0x28) 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 03:49:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) ftruncate(r0, 0x0) 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0xab91ad8cf93204, 0x0) 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x7fe, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000200)={0x4, 0x0, {0x56, 0x32cc, 0xfffffffffffffffa, {0x6, 0x2}, {0x64, 0x6}, @cond=[{0x0, 0x3, 0x6, 0x6, 0x0, 0x2}, {0x0, 0x7, 0x2, 0xfffffffffffffffe, 0x800, 0x4}]}, {0x7b, 0xbab3, 0xb17, {0xb3, 0x10001}, {0x1f, 0x9d}, @ramp={0x3, 0x8001, {0x2, 0x9, 0x0, 0x7}}}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, {0x1, @broadcast}, 0x12, {0x2, 0x4e23, @multicast1}, 'caif0\x00'}) close(0xffffffffffffffff) [ 125.945748] ptrace attach of "/root/syz-executor.3"[7682] was attempted by "/root/syz-executor.3"[7684] 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:16 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000001500)=[{0x0}]) [ 126.000310] protocol 88fb is buggy, dev hsr_slave_0 [ 126.005612] protocol 88fb is buggy, dev hsr_slave_1 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x0, &(0x7f0000000180)={0x0, {0x8083}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 0: clone(0x80000, 0x0, 0x0, 0x0, 0x0) 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 3: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x120) socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f00000001c0)) socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x52) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x2, 0x0, 0x1a) 03:49:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:16 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 03:49:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @local}, {0x0, @local}, 0xc, {0x2, 0x0, @broadcast}, '\x83O\x00\xec\x00\x00\x00\x00a\xfe\x92\xbcY\x10#\xb0'}) 03:49:16 executing program 3: mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x3) 03:49:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 03:49:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f000000a880)=[{&(0x7f00000024c0)=@in6={0xa, 0x0, 0x0, @rand_addr="07fa1a831489eac25e11f34db362da76"}, 0x1c, 0x0, 0x0, &(0x7f0000002640)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x1}}], 0x20}], 0x1, 0x0) [ 126.565916] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 126.569334] tty_warn_deprecated_flags: 12 callbacks suppressed [ 126.569342] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 03:49:17 executing program 4: creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$TIOCSSERIAL(r3, 0x541f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:49:17 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0x0) 03:49:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffea6, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x4, 0xc8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigaction(0x11, &(0x7f0000000180)={0x0, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000001c0)) [ 126.751162] tty_warn_deprecated_flags: 'syz-executor.4' is using deprecated serial flags (with no effect): 00000100 [ 126.969784] kasan: CONFIG_KASAN_INLINE enabled [ 126.974881] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 126.985627] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 126.991896] Modules linked in: [ 126.995357] CPU: 1 PID: 7759 Comm: syz-executor.1 Not tainted 4.14.144 #0 [ 127.002536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 127.011891] task: ffff8880a134c6c0 task.stack: ffff88805bcb8000 [ 127.017959] RIP: 0010:tcp_push+0xe9/0x610 [ 127.022109] RSP: 0018:ffff88805bcbfa48 EFLAGS: 00010202 [ 127.027483] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000bc5c000 [ 127.034749] RDX: 0000000000000007 RSI: ffffffff85231b30 RDI: 0000000000000038 [ 127.041999] RBP: ffff88805bcbfa98 R08: ffff8880900e955c R09: ffff8880a134cf60 [ 127.049249] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880900e8cc0 [ 127.056513] R13: 0000000000000000 R14: ffff8880900e9554 R15: 0000000000000002 [ 127.063775] FS: 00007f2cc1e34700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 127.071981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.077840] CR2: 000000000075bfd4 CR3: 0000000099c91000 CR4: 00000000001406e0 [ 127.085106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.092367] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.099618] Call Trace: [ 127.102192] tcp_sendmsg_locked+0x2307/0x3200 [ 127.106671] ? tcp_sendpage+0x60/0x60 [ 127.110451] ? trace_hardirqs_on_caller+0x400/0x590 [ 127.115443] ? trace_hardirqs_on+0xd/0x10 [ 127.119566] tcp_sendmsg+0x30/0x50 [ 127.123084] inet_sendmsg+0x122/0x500 [ 127.126861] ? inet_recvmsg+0x500/0x500 [ 127.130827] sock_sendmsg+0xce/0x110 [ 127.134517] SYSC_sendto+0x206/0x310 [ 127.138293] ? SYSC_connect+0x2d0/0x2d0 [ 127.142249] ? kasan_check_read+0x11/0x20 [ 127.146374] ? _copy_to_user+0x87/0xd0 [ 127.150251] ? put_timespec64+0xb4/0x100 [ 127.154288] ? nsecs_to_jiffies+0x30/0x30 [ 127.158414] ? SyS_clock_gettime+0xf8/0x180 [ 127.162712] SyS_sendto+0x40/0x50 [ 127.166143] ? SyS_getpeername+0x30/0x30 [ 127.170183] do_syscall_64+0x1e8/0x640 [ 127.174063] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 127.178885] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 127.184054] RIP: 0033:0x4598e9 [ 127.187238] RSP: 002b:00007f2cc1e33c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 127.194946] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 127.202194] RDX: 00000000fffffdda RSI: 00000000200000c0 RDI: 0000000000000008 [ 127.209441] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 000000000000001a [ 127.216689] R10: 0000000000000002 R11: 0000000000000246 R12: 00007f2cc1e346d4 [ 127.223939] R13: 00000000004c7880 R14: 00000000004dd188 R15: 00000000ffffffff [ 127.231190] Code: 00 4d 8d 84 24 9c 08 00 00 4c 89 45 b8 e8 c0 c7 39 fc 48 8d 7b 38 4c 8b 45 b8 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 06 0f 8e 1e 04 00 00 48 b8 00 00 00 00 00 [ 127.250272] RIP: tcp_push+0xe9/0x610 RSP: ffff88805bcbfa48 [ 127.256900] ---[ end trace 675bc25d492be082 ]--- [ 127.261723] Kernel panic - not syncing: Fatal exception [ 127.268389] Kernel Offset: disabled [ 127.272008] Rebooting in 86400 seconds..