[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 80.294477] audit: type=1800 audit(1550486226.358:25): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 80.313749] audit: type=1800 audit(1550486226.358:26): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 80.333199] audit: type=1800 audit(1550486226.358:27): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts. 2019/02/18 10:37:19 fuzzer started 2019/02/18 10:37:24 dialing manager at 10.128.0.26:41979 2019/02/18 10:37:24 syscalls: 1 2019/02/18 10:37:24 code coverage: enabled 2019/02/18 10:37:24 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/18 10:37:24 extra coverage: extra coverage is not supported by the kernel 2019/02/18 10:37:24 setuid sandbox: enabled 2019/02/18 10:37:24 namespace sandbox: enabled 2019/02/18 10:37:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/18 10:37:24 fault injection: enabled 2019/02/18 10:37:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/18 10:37:24 net packet injection: enabled 2019/02/18 10:37:24 net device setup: enabled 10:39:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) syzkaller login: [ 226.279107] IPVS: ftp: loaded support on port[0] = 21 [ 226.456656] chnl_net:caif_netlink_parms(): no params data found [ 226.516800] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.523454] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.531604] device bridge_slave_0 entered promiscuous mode [ 226.540916] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.547466] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.555573] device bridge_slave_1 entered promiscuous mode [ 226.586387] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 226.597158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 226.626495] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.634842] team0: Port device team_slave_0 added [ 226.641126] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.649457] team0: Port device team_slave_1 added [ 226.656695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.665062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.746268] device hsr_slave_0 entered promiscuous mode [ 226.802207] device hsr_slave_1 entered promiscuous mode [ 226.973490] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 226.980980] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 227.007281] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.013804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.020843] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.027638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.105365] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 227.111495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.124663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 227.137113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.147140] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.156345] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.166954] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 227.184490] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 227.190588] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.206519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.214693] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.221187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.264233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.272525] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.278965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.288357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.297286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.308087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.326064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.349105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.361005] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 227.367124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.376111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.400732] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 227.419793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.592141] protocol 88fb is buggy, dev hsr_slave_0 [ 227.597578] protocol 88fb is buggy, dev hsr_slave_1 10:39:33 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x40000000000b, 0x0, &(0x7f0000000280)={0x0, r0+30000000}, &(0x7f0000000040)) r1 = gettid() tkill(r1, 0x1000000000016) 10:39:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="f9"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 229.248386] IPVS: ftp: loaded support on port[0] = 21 [ 229.390111] chnl_net:caif_netlink_parms(): no params data found [ 229.458847] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.465554] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.473635] device bridge_slave_0 entered promiscuous mode [ 229.483963] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.490440] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.498586] device bridge_slave_1 entered promiscuous mode [ 229.530759] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.541960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.571180] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.579556] team0: Port device team_slave_0 added [ 229.586735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.595059] team0: Port device team_slave_1 added [ 229.601072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.612671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.856434] device hsr_slave_0 entered promiscuous mode [ 230.003225] device hsr_slave_1 entered promiscuous mode [ 230.143504] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 230.151036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 230.177850] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.184458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.191480] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.198517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.272355] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 230.278475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.290164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.302419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.311762] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.319665] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.329636] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.348187] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 230.354400] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.372539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.380883] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.387429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.404259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.417324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.430791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.439104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.447640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.455902] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.462396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.470894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.480036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.501924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.509750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.518649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.538549] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.551261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 230.559034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.567363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.576240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.585844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.594295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.609171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 230.618464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.629995] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.636174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.645242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.654115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.676900] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 230.697600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.813367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 10:39:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000280)=""/208, &(0x7f0000000140)=0xd0) r1 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x4, &(0x7f00000001c0)) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000440)) accept$alg(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x200000008000000, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) write$sndseq(r2, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) 10:39:37 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:var_lock_t:s0\x00', 0x20, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa) close(r3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)) clone(0x10002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x0) getpeername$netlink(r3, &(0x7f0000000140), 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(0x0, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c12") statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000300)={0xe4, 0x29, 0x2, {0x0, [{{0x70, 0x3, 0x2}, 0x9, 0x1, 0x5, './bus'}, {{0x8, 0x3, 0x6}, 0x1, 0x101, 0x7, './file0'}, {{0x83, 0x4}, 0x5, 0x97, 0x5, './bus'}, {{0x7, 0x0, 0x2}, 0x8, 0x10000, 0xd, './file0/file0'}, {{0x1, 0x1}, 0x1000, 0x7ff, 0x5, './bus'}, {{0x2, 0x2, 0x4}, 0x0, 0x1, 0x7, './file0'}, {{0x4, 0x3, 0x7}, 0xffffffffffffffe1, 0x0, 0x7, './file0'}]}}, 0xe4) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000010000000000002300000000000000000000000000000000"]) 10:39:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x806, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:39:37 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xffffffffffffffd, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$NBD_CLEAR_QUE(r0, 0xab05) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x2972, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000000)) [ 231.291003] input: syz1 as /devices/virtual/input/input5 [ 231.398868] input: syz1 as /devices/virtual/input/input6 [ 231.404537] input: failed to attach handler leds to device input6, error: -6 10:39:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_dccp(0xa, 0x6, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x1}, 0x28, 0x2) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f4812fe01b2a4a280930a06030000a84306910000000b00140035000c00060000001900154004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x602000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000001c0)=0x9, 0x4) 10:39:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40000000101001, 0x0) [ 231.563064] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 231.570587] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 231.578368] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.587047] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.593678] IPv6: NLM_F_CREATE should be set when creating new route [ 231.600219] IPv6: NLM_F_CREATE should be set when creating new route [ 231.606859] IPv6: NLM_F_CREATE should be set when creating new route 10:39:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fdatasync(r0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4924924924922c9, 0x10000000000040) dup3(r2, r2, 0x88000) 10:39:37 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x81, 0x400080) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=0x81) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 10:39:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) unshare(0x20400) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/29) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) r3 = dup2(r2, r2) bind$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) 10:39:37 executing program 1: r0 = userfaultfd(0x7fe) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x58}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000520000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000609000/0x4000)=nil) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xa8000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000000c0)=0x4) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x202000}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00006f7000/0x4000)=nil) 10:39:38 executing program 1: unshare(0x20400) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0xb) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x8000) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000180)={{0x0, @name="7ce8672f610dc41579bd93ad923c47e3237e62c2977c888d42c96a172f98bfcb"}, 0x8, 0x5, 0x401}) 10:39:38 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) close(r0) 10:39:38 executing program 1: unshare(0x20400) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0xb) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x8000) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000180)={{0x0, @name="7ce8672f610dc41579bd93ad923c47e3237e62c2977c888d42c96a172f98bfcb"}, 0x8, 0x5, 0x401}) 10:39:38 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200007, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x1, 0x6, "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", 0x41, 0x100, 0x3ff, 0x6, 0x3, 0x9, 0x1, 0x1}, r1}}, 0x128) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1c) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x8001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x8000, 0x7ff, 0x8, 0x1, 0x1}, &(0x7f00000002c0)=0x14) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) [ 232.412749] hrtimer: interrupt took 41980 ns 10:39:38 executing program 1: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {0x0, 0x21}}}}}}, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='\x00', 0x1, 0x0) 10:39:38 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r0, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) close(r0) 10:39:38 executing program 1: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x100000000004c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x4}, 0x8) 10:39:38 executing program 1: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x100000000004c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x4}, 0x8) 10:39:38 executing program 1: r0 = socket$inet(0x2, 0x2, 0x2200000088) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) close(r0) 10:39:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42004) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) ioctl$int_out(r1, 0x2, &(0x7f00000000c0)) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) 10:39:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 10:39:39 executing program 1: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) readlinkat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/122, 0x7a) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="778af23579b5177af38170ed36bdc974a4dc55e5fca9ab76be367db3200095feaac34bf5f98a30719880b9f6fcc0737046803aee249b7ea2611b16174e13ea8def6556f743739e000000000000"], &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mknod$loop(&(0x7f00000001c0)='./file0/file0\x00', 0xc000, 0xffffffffffffffff) 10:39:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 10:39:39 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xc, {0x3be, 0xfffffffffffffff7, 0x1ff, 0x1}}) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xd7c7, 0x180) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000140)={0xf0}) 10:39:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1}, 0x1c}}, 0x0) 10:39:39 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000200)={@local, @remote, 0x0}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) accept(0xffffffffffffffff, &(0x7f00000002c0)=@can={0x1d, 0x0}, &(0x7f0000000600)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xfffffffffffffdc4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @remote, @initdev}, &(0x7f0000000500)=0xc) accept(0xffffffffffffffff, &(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000005c0)=0x80) accept4$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000c40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000c80)={@dev, 0x0}, &(0x7f0000000cc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0x655af4bb48b7eed4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000001080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) clock_gettime(0x3, &(0x7f0000000780)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000001340)=@hci, 0x80, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/246, 0xf6}], 0x1, &(0x7f0000001500)=""/92, 0x5c}, 0x401}, {{&(0x7f0000001580)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/239, 0xef}], 0x1, &(0x7f0000001740)=""/28, 0x1c}, 0x1}, {{&(0x7f0000001780)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001800)=""/31, 0x1f}, {&(0x7f0000001840)=""/47, 0x2f}, {&(0x7f0000001880)=""/31, 0x1f}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)=""/228, 0xe4}, {&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/60, 0x3c}, {&(0x7f0000001c40)=""/155, 0x9b}], 0x9}, 0x20}, {{&(0x7f0000001dc0)=@l2, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)=""/102, 0x66}, 0x7}, {{&(0x7f0000001f00)=@pppol2tp, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f80)=""/137, 0x89}, {&(0x7f0000002040)=""/228, 0xe4}, {&(0x7f0000002140)=""/91, 0x5b}], 0x3, &(0x7f0000002200)=""/111, 0x6f}, 0x800}, {{&(0x7f0000002280)=@nfc, 0x80, &(0x7f0000002500)=[{&(0x7f0000002300)=""/32, 0x20}, {&(0x7f0000002340)=""/248, 0xf8}, {&(0x7f0000002440)=""/123, 0x7b}, {&(0x7f00000024c0)=""/9, 0x9}], 0x4}, 0x80}, {{&(0x7f0000002540)=@ll, 0x80, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/153, 0x99}, {&(0x7f0000002680)=""/50, 0x32}, {&(0x7f00000026c0)=""/182, 0xb6}, {&(0x7f0000002780)=""/5, 0x5}, {&(0x7f0000002980)=""/210, 0xd2}], 0x5, &(0x7f0000002a80)=""/127, 0x7f}, 0xffffffff}, {{&(0x7f0000002b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002840)=""/17, 0x11}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/183, 0xb7}, {&(0x7f0000003c40)=""/253, 0xfd}, {&(0x7f0000003d40)=""/71, 0x47}, {&(0x7f0000003dc0)=""/255, 0xff}, {&(0x7f0000003ec0)=""/37, 0x25}, {&(0x7f0000003f00)=""/54, 0x36}], 0x8, &(0x7f0000003fc0)=""/72, 0x48}, 0xffffffffffffffd1}, {{&(0x7f0000004040)=@isdn, 0x80, &(0x7f00000044c0)=[{&(0x7f00000040c0)=""/83, 0x53}, {&(0x7f0000004140)=""/160, 0xa0}, {&(0x7f0000004200)=""/47, 0x2f}, {&(0x7f0000004240)=""/177, 0xb1}, {&(0x7f0000004300)=""/215, 0xd7}, {&(0x7f0000004400)=""/22, 0x16}, {&(0x7f0000004440)=""/82, 0x52}], 0x7, &(0x7f0000004540)=""/236, 0xec}}, {{&(0x7f0000004640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000004800)=[{&(0x7f00000046c0)=""/58, 0x3a}, {&(0x7f0000004700)=""/201, 0xc9}], 0x2, &(0x7f0000004840)=""/45, 0x2d}}], 0xa, 0x40000002, &(0x7f0000004b40)={r17, r18+10000000}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f00000062c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006300)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000006340)={@local, @remote, 0x0}, &(0x7f0000006380)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000063c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006400)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000006500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006540)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000006b00)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000006c00)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000006c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006cc0)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000075c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007580)={&(0x7f0000006d00)=ANY=[@ANYBLOB="80080000", @ANYRES16=r1, @ANYBLOB="01092bbd7000ffdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="7c0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400fdffffff080007000000000008000100", @ANYRES32=r7, @ANYBLOB="44000200400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ffffffff08000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3001020038000100240001006e6f746966795f70656572735f696e74651576616c00000000000000000000000800030003000000080004000100000040000100240001006c625f706f72745f7374617473000000080003000b0000000800040006000000080006002fa86695c14d54f9091531a6", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="30020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r15, @ANYBLOB="84000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000540004000100090507000000ffff0802020000000008220901000000090003090600000002000609080000000400ffac740800000300070702000000b009060300800000030000ff0900000001f800060400000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040009000000080007000000000008000100", @ANYRES32=r20, @ANYBLOB="3c02020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r21, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d610000000067000000000000080003000300000008000400", @ANYRES32=r24, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="080007000000000008000100", @ANYRES32=r26, @ANYBLOB="e00002005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000000068aff070000020009a1ffffff7ffa0000ff3c6d83550200000001000080020005300180000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000600", @ANYRES32=r27, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r28], 0x880}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000006110500000000000950005fa00000000"], 0x0, 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 10:39:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x6, @empty, 0x4e23, 0x0, 'rr\x00', 0x38, 0xed7, 0x39}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x10000, 0x2, 0x1ac, 0x81}}, 0x44) 10:39:39 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x200, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000200)=""/4096, &(0x7f0000000080)=0x1000) write$sndseq(r0, &(0x7f0000001200)=[{0x2, 0x7, 0xdbb, 0x1ff, @tick=0x2, {0x0, 0x1}, {0x81, 0x3}, @quote={{0x1d320000000, 0xcb}, 0x1ff, &(0x7f00000000c0)={0x9, 0x0, 0x5, 0x9, @tick=0x180000000, {0x4, 0x200}, {0x0, 0xffffffffffff9fa0}, @raw8={"37cd675c985dba1eb0619ea3"}}}}, {0x5, 0xfffffffffffffffe, 0xfffffffffffffffa, 0xfffffffffffff46a, @time={0x77359400}, {0x10001, 0xfffffffffffffffd}, {0x6, 0x1f}, @quote={{0xff, 0x8}, 0x86d, &(0x7f0000000100)={0xfff, 0x2, 0xfffffffffffffff8, 0xfffffffffffffb70, @tick=0x10001, {0x8, 0x8}, {0x7f, 0x33d0}, @queue={0xfff, {0x2, 0x6}}}}}, {0x608, 0xb7, 0x3, 0x8, @time={0x0, 0x1c9c380}, {0x2, 0x2}, {0x0, 0x7}, @note={0x4, 0x1, 0x7af, 0x4, 0xc5}}, {0x5, 0x25fb, 0xfff, 0x16, @time={0x77359400}, {0x10000}, {0x80000000, 0x8}, @result={0x2}}], 0xc0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000180)=[{0x3ff, 0x0, 0x0, 0x0, @time, {0x0, 0xfffffffffffffe00}, {0x1, 0xfffffffffffffffe}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x100000001}, {}, @result}], 0x60) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001380)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000001300)={[{0xfffffffffffffffc, 0x2, 0x9, 0x0, 0x60fa, 0x0, 0x4, 0x10001, 0x7, 0x7fffffff, 0x8, 0x9, 0x7}, {0x8, 0xd7, 0x9, 0x100, 0x5, 0x1, 0x10001, 0x2, 0x0, 0x3, 0x2, 0x3, 0x4}, {0xffffffffffffffc0, 0xfffffffffffffff7, 0xffff, 0xbc, 0x5, 0xba9, 0x1, 0x0, 0x8, 0x401, 0x950c, 0x72, 0x9}], 0x1}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x30010, 0x4) ioctl$RTC_WIE_ON(r2, 0x700f) 10:39:39 executing program 0: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1, 0x0) lseek(r1, 0x55, 0x0) 10:39:39 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xc800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x1, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x67, 0x0, 0x0, 0x7766}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) 10:39:39 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffff9c, 0x10, &(0x7f00000010c0)={&(0x7f0000001080)=""/27, 0x1b, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r0, 0x10, &(0x7f0000001140)={&(0x7f0000000080)=""/4096, 0x1000, r1}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net////\x00', 0x400610002, 0x0) 10:39:39 executing program 1: timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, 0x0, 0xe2f21880) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9205, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x15) 10:39:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x848000000015, 0x805, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000280)) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x631, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x2, 0x9, 0x3, {0x5, @sdr={0x34327b53, 0x1}}}) sendto$inet6(r0, &(0x7f0000000080), 0xffffffa0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x15) 10:39:40 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1a, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x4, @ipv4={[], [], @empty}, 0x3}}, {{0xa, 0x4e22, 0x5013, @mcast2, 0x4}}, {{0xa, 0x4e23, 0x10000, @loopback, 0x6}}]}, 0x210) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000080)) 10:39:40 executing program 1: mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)={0x80000000}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xffffffffab885c8b) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x15f60b4, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 10:39:40 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x800000000002) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'bond_slave_1\x00', 0x400}) 10:39:40 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0xa0, 0x2, 0x5}}, 0x14) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r3, 0x2}, &(0x7f0000000180)=0xc) ioctl$TIOCNOTTY(r0, 0x5422) pwritev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="53548c034050b4", 0x7}, {&(0x7f0000000200)="c78a9ac205bd32dfeb64bc854df4fbab2a807b77218429c15c3b78c89a59680483e6a540cbe4a1c91b1e1c4e4a42baf544ca7d926f4522c2f557ee5a9f07d822192c2a2a8216a6f630a15415063eb03b335a6e5b551ece4f0f9504501172df20e546f22250336ec7e772cd5f583191ef969acc007dd5fd3003111653bd366e6502df90c20e37e117f7aab376afb8a8051338b5912d628ae265c6c1739879c063aa398ec5239172c450294e8adef0f214f8af3004c4661e2295", 0xb9}, {&(0x7f00000002c0)="09ffdd7fe1665a0e1ccd046634e4310f63e40ecec6a7dc375fb3835d6362d2d12165119034e6a682989cbc7fa37daca92a477102b9430bd1", 0x38}], 0x3, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)={0x31, 0x4, 0x0, {0x0, 0x4, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) ptrace$setopts(0x4206, r2, 0xee0, 0x21) getgid() setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r4, 0x0, 0x1c, 0x9, 0x8, 0x3f0}, 0x14) sched_yield() ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000003c0)={0x82ff, 0x2}) r5 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x0, 0x2) write$UHID_INPUT2(r5, &(0x7f0000000440)={0xc, 0x85, "b46e90a762503783212719c7278109ea46f7dbd71e2109bdb6311fc56661de7f03d7e015a2929483ff3f1f45512d5c877f2a0fa9eb19b355766ed3754316876960a2590b4cfc7b9531db3fdb1af2a4bc47769dc107678f532c478030426799b0565419ae2d54a2e8a2380a7f46208d3c3f799239c2527c2e128679b9b3c9b1067449f4a5bc"}, 0x8b) write$binfmt_misc(r0, &(0x7f0000000500)={'syz1'}, 0x4) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000540)={0x71, 0x1, 0x8}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='tunl0\x00'}) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000600)={0x8}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000680)="92d2d8459aca14f446dc55c5d1162fd1a05422bef12ea7caee31fcd5a91df1a7b18bd80de52fe2c725ab2c6f56b140fe9909e8f84570c3683b30f75ddfb572b6d4a647a0d28bdff2a50b2cc8eba4ab376ca3cce09ee6357625fa2cd7e25b4a487d08d4afa52cf51ce143d0b6") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000700)=[@in6={0xa, 0x4e21, 0x3, @empty, 0x80000001}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x71, 0x0}}, @in6={0xa, 0x4e24, 0xbc3, @mcast1, 0x80}], 0x68) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000780)={{0xd6, 0x400, 0xffff, 0x3, 0x7}, 0x8, 0x0, 0xfffffffffffff659, 0x9, 0x80000001, "3018671567c8ddb990f209841ba55ba6dbcf20b3ec0788a74df110ed82a3b56e81efc8306641a89d650f4cfefb51a677ee09db7e2d96b8a1b001c29eefbcdb819c33d7f93d593e0834263cac059e91ba36b4ef66b93318af06844fa3419f89470d1e5ea49d2618067f35c35ac20c05a492e41028ad37f2e46ca851fa44fb38be"}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x60084000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r6, 0x401, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x804) prctl$PR_SET_UNALIGN(0x6, 0x1) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000980)) renameat(r0, &(0x7f00000009c0)='./file0\x00', r0, &(0x7f0000000a00)='./file0\x00') ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x370d) sendmsg(r5, &(0x7f0000002300)={&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000ac0)="0680412abfe270ac7544f8", 0xb}, {&(0x7f0000000b00)="5570c702754cb1281ed6921e0f1f63f7dc01285d82e8dd7fdd98b509c2ccf72b002f1aac6e77f0e6834fc9956fb8c0335c63aa054b15564c4c58a594d29ade5f25a08b9c0b4ac16c7814c8ca9a35f1ca3c642ebad5b2d0a7d10cb4d16f81c01abbacf2a8f1b67d338b65c11f5595", 0x6e}, {&(0x7f0000000b80)="c4b4c741c9116a841958cc45b1a187cfd9b4006f87690e6309696d1f5dcc46957fcd5e521223af80eb9935beb90ec87c6e8a69ddb59b73d44e9fe13fe554e9b81b13da974fbeb7cc0ee278dae337df34491530786d20d4b1af98c57b1734d5a779ee778270fc512e95c71e160629f24710cfc992ab9024e7976481dc3d0f18362fc46b987ff16c6bad2e30eb79a2a9175b97b42c8987bb0376de773644384b4fe146a0328eb4c690e6b34caf0228e712", 0xb0}, {&(0x7f0000000c40)="395209906ce5205d56b3dce4aea3e5892d5e3f204cc5f866fb7e04bf2fae0a21f355f1d47ae2114745d35d7c4ee27c0d393f21baa9d152d1fec0729ecfdbf6e8f189a13660052563d7f4d0645c5b353ab6101421d0b27ec79f8b58f17ebcca595a25da3918bc0b3d38ee029bcbcb1273e2e95973a965b8fbb2b22d8da76fb69af982be36387b78c0ab90f7b1e575ba13f1f560be653d4a86fd5f251df2e847ae8c4777de3c5e9731259c3b8c44e2e62ee122529ad3f2034d5369bdc2ce447374aab4b311f60d47a8eaa00a4fcc09", 0xce}, {&(0x7f0000000d40)="a99ae11ccdfc5c39194c80bb6ec0d9247e0fed6e0a3bfc28ec68b04af1366c567d8e137b7adf6a0fb80bff2a30f37bee6f32c3f562a2f8b66238b35eeaac4762073cde354003951d5aedba0ef39096d014597207fe6836c5b6c4faca352e4b4cb3376281ef27094b9e41b2ec16e5f259eb673f903cf061f062b84e9ff83878d1cf097fcf160ee730cf1fd1937607a4b1a6f697719947ed7f5fbfb45428c2166fb0722692be51ddd8174d283c57671ebda356d187722f5331a37c6af2d62a8b4dca2a9043ec4de7426cabb35ed81eacca6e28eb23", 0xd4}, {&(0x7f0000000e40)="1c931bd5e2a6b088779db1fbf7952adce2c6240a66f8e355b54b30b5a33d6022ab1faf52419ca3c687cd6434fd90420661f86986bd5672ca32701d6e30bcaf3c428e03059ccf495729e235dcfb508316e060cb9cfa6022afda76513fc2133f5a82448db27919a776ebeac06158bd80b9ffdf5580c42eb43ff3f22c23769ac1e0d22d7224e9d35e2915c280c420362e53af6860dc5661ea5ad5d36e3bd85f665e", 0xa0}, {&(0x7f0000000f00)="919333b617800db2f72644889f64194acbd1fcc671cbda607565ef74659b0db4ce7579ff3502f0c6435c6a00426c841eee635e4ab66b6085ec09a30596b035949c0ab864a15edf5d00a3d9432d13a3414c46e8be1c15ef018a95684f25dc12d0070e9312d4bcde90f99ea2eefc2c74849992acff0bad52d7cab802d263cbe562efd5796cc53f0fbeda1a5c3813d4d9ad57c2f8369c4946049caf7550ee9759aa4ffc786a63bf922e82ab7b42ac9c68abf5eee37dd59fa0c0713a9282a8b31bed0f7fe08e04d12c112532c56192c43f065bf7ec8e512a9ffcb76ea0656b59092f2189b0ab89e88dd449", 0xe9}], 0x7, &(0x7f0000001080)=[{0x98, 0x10e, 0x6, "a725afeecf5b33573f1818aacd8cce40d763e6e9b5b7ca7616598314c287aea487b2d0a75ac93c3f019ccda8b67d44297907b996b5698591bf89c7c2c10510d0495c63ce41c4a0c6f9307fe82491aa9669a3c207db30ad5135f2e781b2f0aabd8cc61fed3c933b348fccf2e1447f618fec1e6ed0a1a4507ff4fbe4647d1638c37ab3"}, {0xd8, 0x117, 0x8, "55c36fbc1f7969880ae0aa7a180d9e473d98296895e0464d49af69b75144a02ded84836673d64788fd5d925a420d08271a2534d2e87e52a9081b5f40b83d8e9b9e6bf573519cb806646f646fd72654086236434f02e1b56292e80cb2739248f79ab3161f8ed3f947b1a7c763c390ec78fb7bdefa06fc0405a0af388afc244afddb01d565dd02aa3f537213b80bb5130aef3ba8b629a2a9fdf5124cbba30cfd2d6afd9a8f48132965da823c1f561d91d76abd371ba52b2f30774957bf32adb196202f"}, {0x1010, 0x13b, 0x6, "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"}, {0x18, 0x1, 0xa3c4, "b2"}, {0xc0, 0x117, 0x6, "bfa734ff32b5680bd9598d67e5938bffbf5cfdc46d74d4c619e6b1a0e47825b7e3961f32bab22bbec9822529d4bd4f1453a28b06d47251eb5118abe4f2e25dcfb392f2773b4f2f7f10b50c7e59acbdb2b6f479deaf68fab5430bcc66270c6c55a6eb5c56d0f5b684bed2d39f6c11aa4528804371630f7b899896ba8e04a70ae36c9ed704bfb7aae450e0b432226d617de2c1c6f45c7fa02b4eb267f467ca9661b09c582ba940176091e5ee509591d718"}], 0x1258}, 0x44081) 10:39:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="dd9f283c4c45ef91c0bdd2108b854a966c7fcf1910a8f80e6279170d8e554ba4fe202890d84e70e2b8f8bc7324974d776bcb0375a6cdf47c32cfc6a0a649ada474156af4ee8eb85dbac87279c1f2b4e59840324121e4d4780a52adfb64a866f28e9f9cc6ad57a3c2afa2c31c26fe22971e2b48a95eca25a0163842b63988498ff0b1b64d6c0a0ab6c23687a8f289cfdd60bd0142d0cf9950dbc1cd8b763c224f9e55cdea51e9180001b0cdcab6a77134c932cf1b87c44bf359b9d8d220caea2c39c09dd3ec1b3060c87f39b985e67fcbff858b70c540c3aa0a5c040c568853cd58d723d8c3", 0xe5, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000290007031dfffd946fa2830020200a000900000006000000000000000100ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 10:39:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0xa}]}, &(0x7f0000000240)='GPL\x00'}, 0x48) [ 234.555595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.595199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:39:40 executing program 0: unshare(0x8000400) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e000000120081aee4050cecff0e00fa108b5bdb4cb904e473730e55cff26d1b0e001d800c3800005e510befccd7", 0x2e}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0) 10:39:40 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010a00001e00003c0000fb0404050016008000", 0x22) [ 234.742514] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 234.750295] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 10:39:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'caif0\x00', &(0x7f0000000000)=@ethtool_test}) 10:39:41 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010a00001e00003c0000fb0404050016008000", 0x22) [ 235.005790] IPVS: ftp: loaded support on port[0] = 21 10:39:41 executing program 1: unshare(0x20400) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 10:39:41 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xfffffff, 0x8, 0x7, [], &(0x7f0000000040)={0x9f0902, 0x81, [], @ptr=0x2000000000000000}}) r1 = epoll_create(0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x5) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) epoll_pwait(r1, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x1555555555555465, 0x20000000000800, &(0x7f0000000300)={0x400000047d2}, 0xfffffffffffffecb) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x0) 10:39:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x580], [0xc2]}) [ 235.239810] chnl_net:caif_netlink_parms(): no params data found 10:39:41 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x101000) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r0, 0x1f) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001140)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x0, 0x0, @stepwise}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) [ 235.339547] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.346175] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.354210] device bridge_slave_0 entered promiscuous mode 10:39:41 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="24000000130a07141dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80000000, 0x20000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2, 0x0) [ 235.446129] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.452745] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.460827] device bridge_slave_1 entered promiscuous mode [ 235.562331] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.593548] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 235.632997] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 235.641336] team0: Port device team_slave_0 added [ 235.662975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 235.671350] team0: Port device team_slave_1 added [ 235.692899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 235.713252] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.796099] device hsr_slave_0 entered promiscuous mode [ 235.952278] device hsr_slave_1 entered promiscuous mode [ 236.072939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 236.080383] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 236.108698] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.115260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.122392] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.128864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.201326] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 236.207682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.221006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 236.235017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.245756] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.256696] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.267835] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 236.286771] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 236.292961] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.306504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 236.315458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.323976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.332075] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.338507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.355331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 236.367927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 236.376180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.384672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.392818] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.399264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.408601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.425564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 236.438214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 236.450127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 236.460753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.469785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.478862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.487437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.496130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.511006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 236.522551] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 236.532724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.542462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.553748] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 236.572196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.580167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.588530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.597136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.605940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.617283] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 236.632305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.653943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 10:39:42 executing program 2: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)={0x6, 0x0, 0x100000000e393}, 0x8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/230, 0xe6}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000400)=""/149, 0x95}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000680)=""/141, 0x8d}], 0x7}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/155, 0x9b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/183, 0xb7}, {&(0x7f0000001a80)=""/136, 0x88}, {&(0x7f0000001b40)=""/216, 0xd8}, {&(0x7f0000001c40)=""/91, 0x5b}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x9, &(0x7f0000002d80)=""/128, 0x80}, 0x80000001}, {{&(0x7f0000002e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/61, 0x3d}, {&(0x7f0000002ec0)=""/203, 0xcb}, {&(0x7f0000002fc0)=""/160, 0xa0}, {&(0x7f0000003080)=""/101, 0x65}, {&(0x7f0000003100)=""/73, 0x49}], 0x5, &(0x7f0000003200)=""/249, 0xf9}, 0x8000}], 0x3, 0x20, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x80000001, 0x7, 0x1, 0x1, 0x8000, 0xffff, 0x7f, 0x9, 0x0}, &(0x7f0000000080)=0x20) accept4$inet6(r0, &(0x7f00000033c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000003400)=0x1c, 0x800) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 10:39:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) bind$rxrpc(r0, 0x0, 0x0) 10:39:42 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000400)=""/159) 10:39:43 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa0f, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000200)=[{r2, 0x4000}, {r0, 0x400}, {r0}, {r2}, {r2}], 0x5, &(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f00000002c0)={0x6}, 0x8) 10:39:43 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000001c0)=ANY=[@ANYBLOB="8000000004000000050010006f1c05"]) r1 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x300a}}) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$getenv(0x4201, r2, 0x3, &(0x7f0000000180)) 10:39:43 executing program 2: socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0xff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000250000000000000000000000000000000000000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xfffffffffffffffe}, 0x48) 10:39:43 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x20000000087) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400001, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000005e00)={&(0x7f00000005c0), 0xc, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000007ec0)=[{{&(0x7f0000000180)=@pppol2tpin6, 0x80, &(0x7f0000003480), 0x0, &(0x7f0000000300)=""/12, 0x3a}}, {{&(0x7f0000003b80)=@can, 0x80, &(0x7f0000003e40), 0x35e, &(0x7f0000000340)=""/217, 0xd9}}], 0x40000000000002d, 0x0, &(0x7f0000008080)={0x77359400}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_getneigh={0x20, 0x1e, 0x313}, 0x20}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@initdev, @in=@multicast2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@rand_addr="fcce8ec43493a9cdf6ad711c8b82c2fd"}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) 10:39:43 executing program 1: unshare(0x8000400) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0xff33) r1 = mq_open(&(0x7f00000002c0)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) read(r1, &(0x7f0000000100)=""/59, 0x3b) 10:39:43 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0xf0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:39:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e20, 0x3b7c96d3, @mcast1, 0x6}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @rand_addr=0x3}, @in6={0xa, 0x4e21, 0xf4, @ipv4={[], [], @remote}, 0x210}], 0x98) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7ff}]}}) 10:39:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/226}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast2=0xe0000001}}}}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:39:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = shmget$private(0x0, 0x1000, 0x822, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x420000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x1, 0xfffffffffffffffc, 0x3, 0x4, 0xb2, 0x0}, &(0x7f0000000180)=0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x602}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="048dd2346369fe7fa0257b028a1f2194", 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000001c0)=0x84) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1}}, 0x40) r5 = socket(0x10, 0x802, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000a00)={'raw\x00', 0xfe0, "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"}, &(0x7f0000000280)=0x1004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000400)) 10:39:43 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x4122, &(0x7f0000000380)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001480)={0xff, 0xffffffff, 0x6}) fcntl$setlease(r0, 0x400, 0x2) sendmsg$rds(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x4, &(0x7f00000013c0)=[@fadd={0x58, 0x114, 0x6, {{0x3}, &(0x7f0000000140)=0x2, &(0x7f0000000340)=0x37, 0x7, 0x10000, 0x0, 0x5, 0x24, 0x7}}], 0x58, 0xc000}, 0x8000) 10:39:44 executing program 1: r0 = socket$packet(0x11, 0x10000000003, 0x300) set_mempolicy(0x3, &(0x7f0000000080)=0x6697, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x3, 0x72, [], 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000280)=""/114}, &(0x7f0000000380)=0x78) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0x38c) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1d, r2, 0x1, 0x3, 0x6, @link_local}, 0x14) setrlimit(0x5, &(0x7f00000001c0)={0x80d, 0xffffffffffffb307}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) 10:39:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') fchdir(r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01009217019a951401000080000069623a73797a6b616c6c3bb5ffffffff"], 0x2c}}, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000480)=""/4096) 10:39:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f0000000100)=0x8) readv(r0, &(0x7f0000001680)=[{&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/135, 0x87}], 0x2) 10:39:44 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:39:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='tunl0\x00'}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e21, @broadcast}}) write$vnet(0xffffffffffffffff, &(0x7f00000002c0)={0x1, {&(0x7f0000000000)=""/125, 0xfffffffffffffe4c, 0x0}}, 0x68) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r1, 0xc00c5512, &(0x7f00000002c0)=ANY=[@ANYBLOB]) 10:39:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000b7be67560000"]], 0x0, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/92, 0x5c) 10:39:44 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140)='gfs2\x00', 0x0, 0x0) [ 238.502105] binder: 11275:11277 got transaction with invalid offset (95003581284352, min 0 max 24) or object. [ 238.512449] binder: 11275:11277 transaction failed 29201/-22, size 24-8 line 3097 [ 238.538196] binder_alloc: binder_alloc_mmap_handler: 11275 20001000-20004000 already mapped failed -16 [ 238.567417] binder: BINDER_SET_CONTEXT_MGR already set [ 238.572890] binder: 11275:11277 ioctl 40046207 0 returned -16 [ 238.579890] binder_alloc: 11275: binder_alloc_buf, no vma [ 238.585727] binder: 11275:11278 transaction failed 29189/-3, size 24-8 line 3035 [ 238.603493] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.610580] binder: undelivered TRANSACTION_ERROR: 29189 10:39:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000000000), 0xc, &(0x7f0000df6000)={&(0x7f0000002f40)=ANY=[@ANYBLOB="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"], 0xec4}}, 0x40000) 10:39:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f023c123f3188a070") r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) r2 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000001c0)=0x1) readv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/93, 0x5d}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x2, 0x2000100227, 0xfffffffffffffff7, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) bind$tipc(r1, 0x0, 0x0) [ 238.775476] netlink: 3672 bytes leftover after parsing attributes in process `syz-executor.2'. 10:39:44 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000000)='IJR\xa4\xc2T\x8c\xd2\x14') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000340)={r1}) 10:39:45 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r0 = socket(0xf, 0x80000a, 0x8) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010100000000000010010000010000007700000000000000f9524937b28b3b66"], 0x18}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0xfffffffffffffff7, 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x1673, 0x91}, 0x8}, 0x10) 10:39:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup(r0) setrlimit(0x7, &(0x7f0000000000)) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000040)=""/217, &(0x7f0000000140)=0xd9) accept4$unix(r1, 0x0, 0x0, 0x0) 10:39:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="32f4b2b072e099af35e49f7083283b8f", 0x6, 0x0, 0xff, 0x1}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x199200, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000280)=""/78) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x7, {{0xa, 0x4e21, 0x80, @mcast1, 0x2}}}, 0x88) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x3, 0x9}]}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 10:39:52 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x280, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x80000007, 0x9, 0x1, 0x2, 0x3}]}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x32, 0x6, 0x0, {0x4, 0x0, 0x9, 0x0, '/dev/dsp\x00'}}, 0x32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x600000, 0x0) futex(&(0x7f0000000100)=0x1, 0x9, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x2, 0x1) fcntl$getflags(r1, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x201, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r3, 0x8a}, &(0x7f0000000300)=0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000440)={'lapb0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x2000000000000000, 0xe0, "5d4bc501c36c97be8b5a5769eaf02f552270e213cc3c84041e20afb4e2748c08b9c0ae9852019782921835ea52e80dd556e7391e19c48392276f70911321f19ee14be8b0320475dc45ac845aa8e24b6ee4ab8e1d10574643c340d65fa0c669418dceb2e646dde6763a48abc80661055bbe96efad45f8c326cc0a102de67e6e3a3828e5bcfd6903177e8525425bbefc0dec61b0b709303b763b5c43b4069499b4e2f8798f07b921d6fee6a1ce3a74534e837b9ae7b46348c9afc67e6a4de227f8fdff36c29b531421cc7934313609eb78551ddbd8c5216eaead8ecdcc9b7e42dd"}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x90000800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x914, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xb, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x404000, 0x0) r6 = fanotify_init(0x72, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000640)={0x0, @aes256}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r8 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="3186692b208028ec4f2f96aece98720a2617aeaf2190df17f46d250b99d97d9d32f2a0cd9b49bb5c5f3329ae2029459eb5657f138beba9ab7cacc22200cbc4c942fe20143e2d4d1eb3ecde2f3f9c35cac598becc5ccd1b197c2ffee5cd3a451b2e2ffa13c366ada7fd10c04598c64267fb796586", 0x74, 0xfffffffffffffffa) keyctl$invalidate(0x15, r8) getsockopt$inet_dccp_int(r5, 0x21, 0xb, &(0x7f0000000800), &(0x7f0000000840)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)={0x0, 0x8, 0x5, 0xbc8, 0x28, 0xffffffffffffffff, 0x9}, 0x2c) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r9, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xec}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) tee(r0, r6, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a40)={r3, 0x9, 0x30}, &(0x7f0000000a80)=0xc) syz_open_dev$dspn(&(0x7f0000000ac0)='/dev/dsp#\x00', 0x71d89833, 0x121042) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)={&(0x7f0000000b00)='./file0\x00', 0x0, 0x18}, 0x10) openat$vfio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/vfio/vfio\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000bc0)={0x8}) 10:39:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x2) getsockname(r2, &(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000200)=0x80) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@rand_addr="a18de5e9dcf0448735265e30a57d5033", @dev={0xfe, 0x80, [], 0x20}, @remote, 0x200, 0x9, 0x1f, 0x100, 0x4, 0x2, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x8040ae9f, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0xd, &(0x7f0000000080)) 10:39:52 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x2, 0xfffffffffffffffe, 0xaa8, r1}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x7ff}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@obj_role={'obj_role', 0x3d, '!lo'}}, {@uid_eq={'uid', 0x3d, r7}}]}}) mount$fuseblk(&(0x7f0000000540)='/dev/loop0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='fuseblk\x00', 0x4000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x7ff}}], [{@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, 'vboxnet0&'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'group_id'}}, {@obj_role={'obj_role', 0x3d, '},*posix_acl_access/'}}]}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000780)={r1, 0x1}, &(0x7f00000007c0)=0x8) ioprio_get$pid(0x1, r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @multicast1}}, 0x4, 0x9}, &(0x7f00000008c0)=0x90) getsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000980), &(0x7f00000009c0)=0xc) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000a00)={0x67, @multicast2, 0x4e20, 0x2, 'rr\x00', 0x4, 0x7ff, 0x63}, 0x2c) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000a40)={0x3, 0x0, 0x300b, 0x40, 0x8, {0x50f, 0x4}, 0x1}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000a80)={0xd37, 0x3ff, @name="cbba75b1233d97064a9caf952062c32157d8363a0bb20f3c387a59176a89b3fc"}) connect$unix(r0, &(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000b40)={0x4, "301a8f33aaec541518ab58d5c82c525d979b856434e1dd8b3f2d2cb9a5b0b306", 0x5, 0x2, 0x4, 0x7, 0x4, 0x1, 0x3, 0x401}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000bc0)={'erspan0\x00', {0x2, 0x4e24, @rand_addr=0x84cc}}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000c00)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000e00)={{&(0x7f0000000cc0)=""/193, 0xc1}, &(0x7f0000000dc0), 0x8}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000e40)={r1, 0x240, 0x9a, "68cf18c1ec7032f9ad11b8cdc9bc2bcdb9db287da4adcc5fd4c1e0c657bbcdf723fab92525e1a457176e494b19c007bbbf4622050f2f6f679f97cc98f22691331f70083da83e4ae6433b49c2c6d454f22fd60e653c83d83636cc959b66fecade1de56439d674fc9f3d63813e71a0421076c398c35a80dbcb5e20f03b256fe546b223e9e00441147fef6bb926c6c1b2e16f41a63d0abb35d32f6e"}, 0xa2) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000f40)={0x3, &(0x7f0000000f00)=[{0xd8, 0x1, 0x2, 0xf8}, {0x101, 0x4a9, 0x4, 0xf4f}, {0x400, 0x800, 0x1800000, 0x9}]}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000001000)={0x0, 0x0}) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001040)={0x0, 0x1000}, 0x2) ioprio_get$pid(0x2, r9) 10:39:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000607031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x3, "d99dbdb537ee0eb65899421b"}, 0xe, 0x0) [ 246.914759] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.961836] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 10:39:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5b643a3a5d3a2c35342e3a00465f0e350ac0274ec8480c67d98512e2"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={0x8001}, 0x8, 0x80800) 10:39:53 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) socketpair(0x4, 0x200802, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x2002000000004b, 0x4000002b0, 0x4000000000000000, 0x80, 0x4, 0xffffffffffffff9c, 0x2223}, 0xfffffffffffffff4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 10:39:53 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) read$FUSE(r2, &(0x7f00000002c0), 0x1000) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x40) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000012c0)=""/203) [ 247.200732] libceph: resolve '54.' (ret=-3): failed [ 247.206152] libceph: parse_ips bad ip '[d::]:,54.' [ 247.241248] libceph: resolve '54.' (ret=-3): failed [ 247.246529] libceph: parse_ips bad ip '[d::]:,54.' 10:39:53 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 10:39:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02060100210000002abd7000b63309cab7eb627bf80600003ca88234b9dd6cf9b2ca93c4a2973bd5a327338d319c7be9b9e764782f58fc0c0517bccfbe6e2c385b8349d4f2a3f6ecbc1086be4f2af4e87d10fd66a061606124ee93eb1276e02ff42abce966f642a648886106152b68bb9cb7a9f24fe446c84b5ab803081d9c78c626f385470be25c1fd805f58dae676563d08137fd18d1fb11efcdd5b0f20a64054ea855ea79d5172479a36b3bf3cc48520bb66e7538cd8f3bd18a44e9f4ede8b0015fe0019698bdcc7af403958742410efc921eaea15b0200000000000000000800000e0000000000000000000010000000000000000000"], 0x108}}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f00000000c0)={{0x8, 0x5, 0x5, 0x9, 0x1}}) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 10:39:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x200, 0x2000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'bond0\x00', 0x800}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='ns\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f00000002c0)={0x0, 0x3, 0x1, [], &(0x7f0000000280)=0x5}) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000000c0), 0x1000001e, 0x0, 0x0, 0x4000}, 0x0) sched_rr_get_interval(r1, &(0x7f0000000500)) getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="0300eeb9fd1ba0816ddf9023992b0000a872705c0e87952363473e4de99b8834045c3ead626f8e7584cea107021619e53d4e48c8875b75401e82c5cd6c4b9eb2e5d559de41fb22b10d37ab200d847b2fef9b7900a2667d9c2476a5da66a08eb384d09c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) socketpair(0x1a, 0x400000006, 0x101, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 10:39:53 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 10:39:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe, 0x2101801) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000180)={0x180323}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0xffffffff, 0x200400) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x820d, 0x440) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) 10:39:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000005efff)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffffffffffffffff) [ 247.760189] IPVS: ftp: loaded support on port[0] = 21 [ 247.777898] IPVS: ftp: loaded support on port[0] = 21 [ 248.130004] chnl_net:caif_netlink_parms(): no params data found [ 248.229241] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.235790] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.243858] device bridge_slave_0 entered promiscuous mode [ 248.261098] chnl_net:caif_netlink_parms(): no params data found [ 248.291645] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.298127] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.306268] device bridge_slave_1 entered promiscuous mode [ 248.350379] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.367989] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.374534] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.382721] device bridge_slave_0 entered promiscuous mode [ 248.392767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 248.400462] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.407040] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.414968] device bridge_slave_1 entered promiscuous mode [ 248.447871] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.456256] team0: Port device team_slave_0 added [ 248.469638] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.478105] team0: Port device team_slave_1 added [ 248.486669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 248.494970] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 248.503834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 248.530713] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 248.626196] device hsr_slave_0 entered promiscuous mode [ 248.762307] device hsr_slave_1 entered promiscuous mode [ 248.915155] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 248.933138] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 248.941399] team0: Port device team_slave_0 added [ 248.948018] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 248.975013] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 248.983388] team0: Port device team_slave_1 added [ 248.992537] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.999007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.006077] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.012589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.026677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 249.035170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 249.176132] device hsr_slave_0 entered promiscuous mode [ 249.312287] device hsr_slave_1 entered promiscuous mode [ 249.513126] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 249.521366] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 249.528802] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.536374] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.572691] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 249.650216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.668466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.678101] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.689746] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.696133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.703782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.713228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.724953] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.731228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.738904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.749112] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 249.756126] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.766303] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 249.772820] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.782618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 249.789911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.798603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.806442] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.812947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.825644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 249.835089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 249.842375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.851005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.861258] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.867756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.875847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.884322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.892672] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.899070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.907609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.922230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 249.931305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 249.944717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 249.953361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.962546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.971028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.979477] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.985926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.994508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.011097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 250.020527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 250.027739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.036836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.045330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.055158] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.067631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.076949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.085629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.099191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 250.108717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.120652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 250.128062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.137037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.148013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 250.157731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.166381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.179759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 250.189589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 250.197092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.204861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.213626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.221748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.229499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.243805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 250.251182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.259465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.273002] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 250.279047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.289892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 250.304159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.312614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.328902] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 250.335111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.343789] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 250.362526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.377334] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 250.396613] 8021q: adding VLAN 0 to HW filter on device batadv0 10:39:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x10a}], 0x1, 0x0, 0x0, 0x0) 10:39:56 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 10:39:56 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x4100) fcntl$notify(r0, 0x402, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000000700)=""/4096}, 0x48) 10:39:56 executing program 0: syz_emit_ethernet(0x0, &(0x7f000000a000)=ANY=[], 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 10:39:56 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={[], 0x28}, @dev={[], 0x16}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @loopback, @remote, @remote}}}}, &(0x7f0000000040)={0x1, 0x2, [0xb4d, 0x527, 0x9ff, 0xd78]}) munmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) getsockname$netlink(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x74) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x4, 0x1, 0x10, &(0x7f0000ff7000/0x2000)=nil, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x6000, 0xa000}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000280)) shutdown(r0, 0x1) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x88, 0x4, 0x9, "2283f573f0b5d3a1851354262fd0a5e5", "c3741b571d657a27bb7e12503d3338335e0f8b91ce32d3507ee5a009b032413565cc464ca410f222e8375b3bc180e1bf95b8a9cad61106cfd08fc7c2d06b38bab7c747de306f5243de74c9039203c162461f5b93649c8f4f99a410690f74a0d6b3ce40d7d407a9768352133b6c5bc919ba36b4"}, 0x88, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a4, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x48ed}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xceb}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x69}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10bd2907}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0xe}}]}]}, 0x1a4}}, 0x20008040) listen(r0, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000680)=0x24, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r1, 0xa10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xde7b3c02f29c3d4) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000800)="5d085ea5d377bf5d8e0897a9770bb8d3eba88cdd5dd954331dd34c87979deee17b1682703b58fa1181cc6953c7448e9aa6d948d6c375bb87b02191cb4b3a95053e2717fecbc4eb8f42d05c433aff00a37d7c3146265bdfb9673602440c516775b15b961295b252419b33474b1b449ef73c199c36ba62e2f6b71b310fa415e28ee669d5dff4fe16eabdf2b59e6f23c8a12707d71995d098ccf5ec8d5b5db40930a1ce6f494b746953cbe232ea5461") ioctl(r0, 0x4, &(0x7f00000008c0)="f576ab3271613464ad00e2e3ce7648a602d3bd382a14f9d341500c1f5022900b33668d6ba4f6ad70da0a2b241224ec79f7d9435d4b006d0b063edb94be5e4824427c9c9251a450ce70c59bb89dd1f8d0cbbd51dbd3cad202c0ba89d14d3ab414fc2eea882072025eae1ad5f4ad6ee3562cf452d8730253b18a0a7ce993e5") setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000940)={0x100000000}, 0x4) readlink(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=""/126, 0x7e) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000a40)=@ethtool_eeprom={0x4b, 0x2, 0x1ff, 0x5f, "e811775775fb25d99e6805d7201ecd8e02bbdb64316956c077878b3e3b8bdeededd4b7dd829731e5dfee4ec7d01ea2c8c2d4f6c3fa7c6bb491b940a0fb5fa9cf522ec589c69d8d6e9a1d7b0e542f7aa4d9415f557d96c9b5e561ea7415727c"}}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000b00)={0x5, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000b40)={0x8001, r2, 0x10000, 0x9}) ioctl$int_in(r0, 0x5421, &(0x7f0000000b80)=0x200) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000bc0)={0x0, 0x7, 0x8000, 0x10000}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000c00)=0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x5f57fefd57483789}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8722c18360cb333d) syz_open_dev$vbi(&(0x7f0000000d40)='/dev/vbi#\x00', 0x2, 0x2) 10:39:56 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xab, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv(r1, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 10:39:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYBLOB="f20fae"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:39:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x80000008, 0xfffffffffffffffb}, {0x1}]}) 10:39:56 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 10:39:57 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000500)={0x45}) [ 251.069150] ================================================================== [ 251.076556] BUG: KMSAN: kernel-infoleak in __kvm_write_guest_page+0x2d5/0x470 [ 251.083837] CPU: 0 PID: 11387 Comm: syz-executor.0 Not tainted 5.0.0-rc1+ #9 [ 251.091020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.100372] Call Trace: [ 251.102974] dump_stack+0x173/0x1d0 [ 251.106619] kmsan_report+0x12e/0x2a0 [ 251.110433] kmsan_internal_check_memory+0x9e4/0xb10 [ 251.115568] kmsan_copy_to_user+0xab/0xc0 [ 251.119755] __kvm_write_guest_page+0x2d5/0x470 [ 251.124464] kvm_vcpu_write_guest+0x77a/0x920 [ 251.128998] emulator_write_std+0x391/0x4d0 [ 251.133351] ? kvm_read_guest_phys_system+0x100/0x100 [ 251.138549] em_fxsave+0x7c2/0x840 [ 251.142159] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.147367] ? check_svme+0x220/0x220 [ 251.151179] x86_emulate_insn+0x2d11/0xb400 [ 251.155842] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.161052] x86_emulate_instruction+0x1105/0x73b0 [ 251.165998] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.171206] ? __msan_metadata_ptr_for_store_1+0x10/0x20 [ 251.176689] kvm_mmu_page_fault+0xcef/0x2860 [ 251.181135] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 251.186601] ? kvm_requeue_exception+0x4e8/0x5e0 [ 251.191398] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.196622] handle_ept_violation+0x565/0x5a0 [ 251.201142] ? handle_desc+0x110/0x110 [ 251.205043] vmx_handle_exit+0x17a9/0x6690 [ 251.209294] ? kmsan_get_shadow_origin_ptr+0x120/0x440 [ 251.214595] ? vmx_flush_tlb_gva+0x420/0x420 [ 251.219016] kvm_arch_vcpu_ioctl_run+0xa556/0x11300 [ 251.224140] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 251.229514] ? update_load_avg+0x11b5/0x1a90 [ 251.233968] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 251.239439] ? rb_erase_cached+0xde8/0x2c00 [ 251.243791] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.249008] ? __msan_poison_alloca+0x1f0/0x2a0 [ 251.253695] ? put_pid+0x4a/0x260 [ 251.257173] ? kvm_vcpu_ioctl+0x1d11/0x1d20 [ 251.261521] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.266746] kvm_vcpu_ioctl+0xfe9/0x1d20 [ 251.270840] ? kvm_vm_release+0x90/0x90 [ 251.274839] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.280044] ? kvm_vm_release+0x90/0x90 [ 251.284036] do_vfs_ioctl+0xebd/0x2bf0 [ 251.287950] ? security_file_ioctl+0x92/0x200 [ 251.292467] __se_sys_ioctl+0x1da/0x270 [ 251.296470] __x64_sys_ioctl+0x4a/0x70 [ 251.300381] do_syscall_64+0xbc/0xf0 [ 251.304120] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 251.309314] RIP: 0033:0x457e29 [ 251.312520] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.331427] RSP: 002b:00007f4cae280c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.339141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 251.346414] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 251.353688] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 251.360983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cae2816d4 [ 251.368258] R13: 00000000004c0d62 R14: 00000000004d2b18 R15: 00000000ffffffff [ 251.375541] [ 251.377170] Local variable description: ----fx_state@em_fxsave [ 251.383136] Variable was created at: [ 251.386856] em_fxsave+0xcb/0x840 [ 251.390313] x86_emulate_insn+0x2d11/0xb400 [ 251.394627] [ 251.396256] Bytes 8-159 of 160 are uninitialized [ 251.401009] Memory access of size 160 starts at ffff888013b0edc0 [ 251.407153] Data copied to user address 0000000020000000 [ 251.412598] ================================================================== [ 251.419951] Disabling lock debugging due to kernel taint [ 251.425400] Kernel panic - not syncing: panic_on_warn set ... [ 251.431292] CPU: 0 PID: 11387 Comm: syz-executor.0 Tainted: G B 5.0.0-rc1+ #9 [ 251.439861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.449214] Call Trace: [ 251.451820] dump_stack+0x173/0x1d0 [ 251.455461] panic+0x3d1/0xb01 [ 251.458692] kmsan_report+0x293/0x2a0 [ 251.462532] kmsan_internal_check_memory+0x9e4/0xb10 [ 251.467657] kmsan_copy_to_user+0xab/0xc0 [ 251.471814] __kvm_write_guest_page+0x2d5/0x470 [ 251.476505] kvm_vcpu_write_guest+0x77a/0x920 [ 251.481029] emulator_write_std+0x391/0x4d0 [ 251.485364] ? kvm_read_guest_phys_system+0x100/0x100 [ 251.490562] em_fxsave+0x7c2/0x840 [ 251.494161] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.499360] ? check_svme+0x220/0x220 [ 251.503171] x86_emulate_insn+0x2d11/0xb400 [ 251.507522] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.512751] x86_emulate_instruction+0x1105/0x73b0 10:39:57 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 10:39:57 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 10:39:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000340)=ANY=[@ANYBLOB="f3c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:39:57 executing program 1: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) [ 251.517687] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.522906] ? __msan_metadata_ptr_for_store_1+0x10/0x20 [ 251.528383] kvm_mmu_page_fault+0xcef/0x2860 [ 251.532807] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 251.538270] ? kvm_requeue_exception+0x4e8/0x5e0 [ 251.543061] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.548267] handle_ept_violation+0x565/0x5a0 [ 251.552783] ? handle_desc+0x110/0x110 [ 251.556677] vmx_handle_exit+0x17a9/0x6690 [ 251.560938] ? kmsan_get_shadow_origin_ptr+0x120/0x440 [ 251.566231] ? vmx_flush_tlb_gva+0x420/0x420 [ 251.570653] kvm_arch_vcpu_ioctl_run+0xa556/0x11300 [ 251.575796] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 251.581173] ? update_load_avg+0x11b5/0x1a90 [ 251.585594] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 251.591053] ? rb_erase_cached+0xde8/0x2c00 [ 251.595398] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.600611] ? __msan_poison_alloca+0x1f0/0x2a0 [ 251.605302] ? put_pid+0x4a/0x260 [ 251.608766] ? kvm_vcpu_ioctl+0x1d11/0x1d20 [ 251.613096] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.618295] kvm_vcpu_ioctl+0xfe9/0x1d20 [ 251.622377] ? kvm_vm_release+0x90/0x90 [ 251.626449] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 251.631649] ? kvm_vm_release+0x90/0x90 [ 251.635638] do_vfs_ioctl+0xebd/0x2bf0 [ 251.639548] ? security_file_ioctl+0x92/0x200 [ 251.644058] __se_sys_ioctl+0x1da/0x270 [ 251.648059] __x64_sys_ioctl+0x4a/0x70 [ 251.651961] do_syscall_64+0xbc/0xf0 [ 251.655690] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 251.660905] RIP: 0033:0x457e29 10:39:57 executing program 2: unshare(0x2010000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) [ 251.664102] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.683006] RSP: 002b:00007f4cae280c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.690733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 251.698003] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 251.705273] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 251.712551] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cae2816d4 [ 251.719821] R13: 00000000004c0d62 R14: 00000000004d2b18 R15: 00000000ffffffff [ 251.728155] Kernel Offset: disabled [ 251.731774] Rebooting in 86400 seconds..