[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 39.316344] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.977085] random: sshd: uninitialized urandom read (32 bytes read) [ 42.428052] random: sshd: uninitialized urandom read (32 bytes read) [ 43.589569] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. [ 49.614299] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/31 12:55:26 fuzzer started [ 51.115948] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/31 12:55:29 dialing manager at 10.128.0.26:36423 2018/08/31 12:55:31 syscalls: 1 2018/08/31 12:55:31 code coverage: enabled 2018/08/31 12:55:31 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/31 12:55:31 setuid sandbox: enabled 2018/08/31 12:55:31 namespace sandbox: enabled 2018/08/31 12:55:31 fault injection: enabled 2018/08/31 12:55:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/31 12:55:31 net packed injection: enabled 2018/08/31 12:55:31 net device setup: enabled [ 57.273197] random: crng init done 12:57:32 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) fdatasync(r0) 12:57:32 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) flock(0xffffffffffffffff, 0x0) 12:57:32 executing program 7: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb19c01d46d31fb6, 0x0) 12:57:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) vmsplice(r0, &(0x7f0000001480)=[{&(0x7f0000000080)}], 0x1, 0xe) accept4$packet(r0, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001580)=0x14, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000015c0)={@mcast2, r1}, 0x14) 12:57:32 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:57:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000000c0)=0x20000084) 12:57:32 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x5, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 12:57:32 executing program 3: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000200)=""/244, 0xf4, 0x20400000, 0x0) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000000)) [ 176.696733] IPVS: ftp: loaded support on port[0] = 21 [ 176.711549] IPVS: ftp: loaded support on port[0] = 21 [ 176.796299] IPVS: ftp: loaded support on port[0] = 21 [ 176.803155] IPVS: ftp: loaded support on port[0] = 21 [ 176.808899] IPVS: ftp: loaded support on port[0] = 21 [ 176.833341] IPVS: ftp: loaded support on port[0] = 21 [ 176.840062] IPVS: ftp: loaded support on port[0] = 21 [ 176.847247] IPVS: ftp: loaded support on port[0] = 21 [ 180.568141] ip (5028) used greatest stack depth: 53736 bytes left [ 181.050764] ip (5061) used greatest stack depth: 53480 bytes left [ 181.843164] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.849707] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.874366] device bridge_slave_0 entered promiscuous mode [ 181.890199] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.896705] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.922588] device bridge_slave_0 entered promiscuous mode [ 181.938068] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.944584] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.967930] device bridge_slave_0 entered promiscuous mode [ 182.006182] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.012693] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.039266] device bridge_slave_0 entered promiscuous mode [ 182.058042] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.064501] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.084572] device bridge_slave_0 entered promiscuous mode [ 182.097496] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.103964] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.120358] device bridge_slave_0 entered promiscuous mode [ 182.143075] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.149524] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.171831] device bridge_slave_0 entered promiscuous mode [ 182.191810] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.198270] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.232161] device bridge_slave_1 entered promiscuous mode [ 182.248788] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.255315] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.269061] device bridge_slave_0 entered promiscuous mode [ 182.277524] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.284009] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.298979] device bridge_slave_1 entered promiscuous mode [ 182.326282] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.332725] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.349079] device bridge_slave_1 entered promiscuous mode [ 182.371098] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.377551] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.410768] device bridge_slave_1 entered promiscuous mode [ 182.433171] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.439690] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.466794] device bridge_slave_1 entered promiscuous mode [ 182.495987] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.502452] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.517554] device bridge_slave_1 entered promiscuous mode [ 182.528334] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.534780] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.561153] device bridge_slave_1 entered promiscuous mode [ 182.579808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.597944] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.604380] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.654004] device bridge_slave_1 entered promiscuous mode [ 182.671149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.684087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.692720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.705346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.761953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.818879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.868947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.955380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.964327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.994738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.004090] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.024925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.057565] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.160591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.233794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.787500] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.913088] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.945328] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.969306] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.024574] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.037268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.094793] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.106920] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.140297] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.216738] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.274232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.306267] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.335563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.389135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.399118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.423781] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.456599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.471441] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.552121] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.559172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.583766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.591083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.638548] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.645521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.703161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.710206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.731979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.742483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.758052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.770681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.812771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.820234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.864929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.871899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.887916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.894934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.963970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.970952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.984467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.007393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.097488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.104509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.125682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.132728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.159769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.166841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.249194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.256247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.650096] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.676249] team0: Port device team_slave_0 added [ 185.854957] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.891822] team0: Port device team_slave_0 added [ 185.979771] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.017966] team0: Port device team_slave_1 added [ 186.033881] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.047845] team0: Port device team_slave_0 added [ 186.082182] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.096726] team0: Port device team_slave_0 added [ 186.114562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.145196] team0: Port device team_slave_0 added [ 186.167522] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.179079] team0: Port device team_slave_0 added [ 186.208759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.232341] team0: Port device team_slave_0 added [ 186.261315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.269238] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.295928] team0: Port device team_slave_1 added [ 186.322710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.350267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.381829] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.410797] team0: Port device team_slave_0 added [ 186.441263] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.460826] team0: Port device team_slave_1 added [ 186.474813] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.482886] team0: Port device team_slave_1 added [ 186.495039] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.514759] team0: Port device team_slave_1 added [ 186.523253] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.542742] team0: Port device team_slave_1 added [ 186.576679] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.603714] team0: Port device team_slave_1 added [ 186.636446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.645107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.671961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.698468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.716421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.736004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.762684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.770699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.804291] team0: Port device team_slave_1 added [ 186.819542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.836241] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.843231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.868293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.897240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.931129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.958975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.988677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.034922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.046148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.061468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.073170] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.093061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.102748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.113904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.133416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.150124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.173878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.193313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.214031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.234243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.242931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.255930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.271800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.300748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.317530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.335095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.353973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.378874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.394948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.404687] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.412120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.420985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.433909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.448883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.466697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.479911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.495196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.519850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.539152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.559734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.587802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.595302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.604755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.634247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.652967] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.660436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.684446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.701593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.719437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.740590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.748831] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.756977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.764473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.813897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.840141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.873671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.888451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.900209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.940590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.948319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.960265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.987050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.998066] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.011348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.029954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.051044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.082471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.111224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.119295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.152585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.181402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.189194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.211951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.252006] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.259559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.277794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.295093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.307412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.318325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.340002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.389422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.426109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.475371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.512496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.546948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.254456] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.260943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.267846] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.274334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.336372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.344206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.383078] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.389525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.396357] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.402795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.453532] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.481718] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.488160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.495020] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.501472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.593849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.621420] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.627872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.634747] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.641201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.722063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.787856] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.794346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.801241] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.807704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.866775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.894714] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.901163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.908041] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.914494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.987397] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.014312] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.020765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.027646] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.034116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.078680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.119398] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.125878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.132761] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.139213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.243345] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.418484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.431727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.461554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.495532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.525894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.550674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.570505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.263585] ip (5709) used greatest stack depth: 53448 bytes left [ 203.973873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.033471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.387717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.481656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.734983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.760960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.820467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.927561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.152109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.197173] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.574789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.705400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.851080] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 205.868156] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 206.079442] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 206.121700] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 206.270191] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 206.276431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.287122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.413130] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 206.419385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.433778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.756311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 206.764677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.780477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.897226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 206.903488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.918153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.040784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.047572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.061966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.144497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.150883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.165509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.221323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.227730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.242196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.400477] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 207.411749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.428480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.499934] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.737845] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.079682] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.148287] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.295183] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.392239] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.523168] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.769695] 8021q: adding VLAN 0 to HW filter on device team0 12:58:12 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000011, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0), 0x4) 12:58:12 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x200000002, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x200000000010, 0x2, 0x0) write(r1, &(0x7f000095c000)="24000000260077000000000000007701000000ff0100000000000000dcffffff0100ff10", 0x24) 12:58:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000debff0)={0xfffffffffffffffd, 0x242, &(0x7f000082f000)}) [ 215.738802] Unknown ioctl 21382 12:58:12 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) close(r0) 12:58:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000080)={{0x0, 0x0, 0x5d3}}, 0x20) 12:58:12 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x201269}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x2}, [@ldst={0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x2a0, &(0x7f00000001c0)=""/195}, 0x34f) [ 215.891550] Unknown ioctl 21382 12:58:13 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x3}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000110) 12:58:13 executing program 6: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x100) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) [ 216.273869] hrtimer: interrupt took 43320 ns 12:58:13 executing program 1: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000340)=0x951a, 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 12:58:13 executing program 0: write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000240)={0x43}, 0x43) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="b464d313003678cd8c1e6a7cdc45c58ee6f43e1d1d94c190ca0b1fe1b95e7488592f9165f5354d0b3eb4c969afd15b1f32f547ff99085856ac96e79f74ea597b6cd7c23d1a787e02b5c90ce057f18573f77a1b724b455af2e0ad5d67617e9c860d646842d4824b66754abfc167f7ee6495cffb64bf927a6415a14821143cb35e28634959062c6e4d1c6ff710370fc0f7b6ef60badf32b4282114db45fed886ec02c058e946cc7546ad2f9265", 0xac}, &(0x7f0000000140)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) dup2(r1, r0) 12:58:13 executing program 7: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$getregset(0x4, r2, 0x400002, &(0x7f0000000000)={&(0x7f0000002280)=""/4096, 0xd7}) 12:58:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2000000802, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 12:58:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e3, 0x0) 12:58:14 executing program 6: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e3, 0x0) 12:58:14 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)="2e2f6367726f75702e6370752f2f797a3110", 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x0, 0x7ff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) socket$inet6(0xa, 0x2, 0x3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r3, r4+10000000}, 0x7}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 12:58:14 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x3}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:14 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r3, r4+10000000}, 0x7, 0x7}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 12:58:14 executing program 5: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x804, 0xff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f00000003c0)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendfile(r3, r1, &(0x7f0000000140), 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @mcast2, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x40) r6 = add_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r6, &(0x7f0000000280)=""/142, 0x8e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = open(&(0x7f0000000380)='./bus\x00', 0x141042, 0x40) ftruncate(r7, 0x2007fff) sendfile(r4, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 12:58:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") flistxattr(r0, &(0x7f00000000c0)=""/185, 0xb9) 12:58:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x1d1, 0x0) [ 217.871833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:58:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000080)='\x00', 0x1d1, 0x0) 12:58:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) prctl$getname(0x10, &(0x7f0000000240)=""/4096) r1 = syz_open_dev$vcsa(&(0x7f0000002300)='/dev/vcsa#\x00', 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000002340)={0x0, 0x0, 0x0, 'queue1\x00', 0x7ff}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x0, @multicast1}}) 12:58:14 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) prctl$getname(0x10, &(0x7f0000000240)=""/4096) syz_open_dev$vcsa(&(0x7f0000002300)='/dev/vcsa#\x00', 0x5, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000002340)={0xffffffff, 0x800, 0x3, 'queue1\x00', 0x7ff}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x7ff, @multicast1}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001280)='/dev/snapshot\x00', 0x200000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x100000000000008, 0x0, 0x4, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000022c0)={0xffffffffffffffff, &(0x7f00000021c0), &(0x7f0000002240)="c0ec2d0e7ed5c50e6526640edf0c1f3f83ba310b6f318bcb6641e16e74a8b582dfac0999be05967034521c299b9803abee5d79a31bed29581d740b416075a5a4acf5b3e5a743fcfa35db1e4bc16562ea615b9c", 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x0) linkat(r1, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x1400) 12:58:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") flistxattr(r0, &(0x7f00000000c0)=""/185, 0xb9) 12:58:15 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f8571") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)="2e2f6367726f75702e6370752f2f797a3110", 0x1ff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x0, 0x7ff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000000)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000140)) socket$inet6(0xa, 0x2, 0x3) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r3, r4+10000000}, 0x7}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 12:58:15 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000140)=""/206, &(0x7f0000000000)=0xffffffffffffffeb) 12:58:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) close(r0) 12:58:15 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x3}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:15 executing program 6: socket$inet6(0xa, 0x0, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r2, r3+10000000}, 0x7}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x0, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:58:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a000000200000ebffffff000800120000000000000061e64dfa44f468783342f002000000000000060000000000000000000000000000000000000000000000000000200000000000000000"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x33ab0eaa68c8dfc, 0x0) 12:58:15 executing program 0: r0 = socket(0x10, 0x10000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) 12:58:15 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000140)=[{}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e0019010000000000000000020030d3bec200000800010000000000fdd9bf618f8a370eb7ba1e52eddd65030db3326a861dab3222c2fc81783b49c7e7e45ee3cd014d14f8618cfab531e61549927e62d568b59bedb99a1eb03eda78dffb8f78d10fdac65457632d65a04aa6"], 0x1}}, 0x0) 12:58:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'rose0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000480)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 12:58:15 executing program 6: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) close(r0) 12:58:16 executing program 0: socket$inet6(0xa, 0x0, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000480)={0x0, 0x20, 0x9, {r2, r3+10000000}, 0x7, 0x7}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:58:16 executing program 4: socket$inet6(0xa, 0x0, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000480)={0x0, 0x20, 0x9, {r2, r3+10000000}, 0x7, 0x7}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:58:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) prctl$getname(0x10, &(0x7f0000000240)=""/4096) r1 = syz_open_dev$vcsa(&(0x7f0000002300)='/dev/vcsa#\x00', 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000002340)={0x0, 0x0, 0x0, 'queue1\x00', 0x7ff}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x0, @multicast1}}) 12:58:16 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x3}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:16 executing program 6: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000004000), &(0x7f00000000c0)=0x4) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) 12:58:16 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f00000002c0), 0x81, &(0x7f00000001c0)=""/87, 0x57}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/8, &(0x7f0000000080)=0x1a08) 12:58:16 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) prctl$getname(0x10, &(0x7f0000000240)=""/4096) syz_open_dev$vcsa(&(0x7f0000002300)='/dev/vcsa#\x00', 0x5, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000002340)={0xffffffff, 0x800, 0x3, 'queue1\x00', 0x7ff}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x7ff, @multicast1}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001280)='/dev/snapshot\x00', 0x200000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x100000000000008, 0x0, 0x4, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000022c0)={0xffffffffffffffff, &(0x7f00000021c0), &(0x7f0000002240)="c0ec2d0e7ed5c50e6526640edf0c1f3f83ba310b6f318bcb6641e16e74a8b582dfac0999be05967034521c299b9803abee5d79a31bed29581d740b416075a5a4acf5b3e5a743fcfa35db1e4bc16562ea615b9c", 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f0000001180)=""/4096}, 0x18) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x0) linkat(r1, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x1400) 12:58:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:16 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:16 executing program 5: socket(0x0, 0x0, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000140)=[{0xc, 0x1, 0x2}], 0xc}}], 0x1, 0x0) 12:58:17 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r3, r4+10000000}, 0x7, 0x7}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 12:58:17 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000000)={{0x1}}) fchdir(r0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) unshare(0x400) r3 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r3, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:58:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") flistxattr(r0, &(0x7f0000000040)=""/34, 0x22) 12:58:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:17 executing program 5: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x7fff, 0x0, 0x9, 0x35, 0x0, 0x0, 0xde321f6}, 0xb) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000900, @dev={0xac, 0x14, 0x14, 0x1a}, [0xfeffffff00000005, 0xe00000000000000, 0x80fe]}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 12:58:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36013, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:58:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:17 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x80000003) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000180)=0x8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(r1, 0x7005) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r3, r4+10000000}, 0x7, 0x7}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x5, 0x13b7615, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 12:58:18 executing program 1: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) 12:58:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000080)="000000037970652700000004000000070000204500000000", 0x18, 0x0) 12:58:18 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:58:18 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x76) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) 12:58:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000008001b000000e500"], 0x1}}, 0x0) 12:58:18 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700ee5fc5715070") getsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000534000), &(0x7f0000000080)=0x4) 12:58:18 executing program 5: 12:58:18 executing program 3: 12:58:18 executing program 6: 12:58:18 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:18 executing program 7: 12:58:18 executing program 5: 12:58:18 executing program 2: 12:58:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) sendto$inet6(0xffffffffffffffff, &(0x7f00000012c0)="c929748a327f1b97088c2883439a4d4d9142f7f7c624d5df13064bf9463ca745cbc5fb1a18efeea2b379749a2737222514a2d43a42f0108f3d4040f2281283e6e6b95372a594ddc1ddbb60c0dc7f716152de7fb54cefe8ac6bbd9ca094e476459d", 0x61, 0x20000000, &(0x7f0000001340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12:58:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000007000)={&(0x7f00000000c0), 0xc, &(0x7f0000000080)={&(0x7f0000009000)=@newsa={0x138, 0x10, 0x301, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr}, {@in6=@loopback, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 12:58:18 executing program 3: 12:58:18 executing program 7: 12:58:19 executing program 0: 12:58:19 executing program 5: 12:58:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:19 executing program 2: 12:58:19 executing program 3: 12:58:19 executing program 7: 12:58:19 executing program 6: 12:58:19 executing program 2: 12:58:19 executing program 3: 12:58:19 executing program 6: 12:58:19 executing program 0: 12:58:19 executing program 5: 12:58:19 executing program 1: 12:58:19 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:19 executing program 7: 12:58:19 executing program 2: 12:58:19 executing program 0: 12:58:19 executing program 5: 12:58:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) sendto$inet6(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x0, &(0x7f0000001340)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) 12:58:19 executing program 6: 12:58:19 executing program 5: 12:58:19 executing program 6: 12:58:19 executing program 7: 12:58:20 executing program 4: 12:58:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000180)='dev ', 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) 12:58:20 executing program 2: clone(0x200, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000100), &(0x7f0000000300)) mknod(&(0x7f0000000480)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000300)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) 12:58:20 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000011, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0xfe69, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x1, @ipv4={[], [], @multicast2}}, 0x1c) 12:58:20 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) sendto$inet6(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x0, &(0x7f0000001340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:58:20 executing program 7: 12:58:20 executing program 5: 12:58:20 executing program 4: 12:58:20 executing program 1: 12:58:20 executing program 0: 12:58:20 executing program 7: 12:58:21 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:21 executing program 5: 12:58:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x3}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) sendto$inet6(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20000000, &(0x7f0000001340)={0xa, 0x4e23, 0x1, @loopback, 0x6}, 0x1c) 12:58:21 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x2000000011, 0x2, 0x0) 12:58:21 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000500)=""/236, 0xec}], 0x2, 0x0) 12:58:21 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) sendto$inet6(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x0, &(0x7f0000001340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:58:21 executing program 2: 12:58:21 executing program 5: 12:58:21 executing program 7: 12:58:21 executing program 0: 12:58:21 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:21 executing program 5: 12:58:21 executing program 7: 12:58:21 executing program 2: 12:58:21 executing program 0: 12:58:21 executing program 5: 12:58:21 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:22 executing program 4: 12:58:22 executing program 0: 12:58:22 executing program 7: 12:58:22 executing program 2: 12:58:22 executing program 6: 12:58:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) sendto$inet6(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20000000, &(0x7f0000001340)={0xa, 0x4e23, 0x1, @loopback, 0x6}, 0x1c) 12:58:22 executing program 5: 12:58:22 executing program 4: 12:58:22 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:22 executing program 5: 12:58:22 executing program 4: 12:58:22 executing program 7: 12:58:22 executing program 2: 12:58:22 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:22 executing program 6: 12:58:22 executing program 0: 12:58:22 executing program 0: 12:58:22 executing program 7: 12:58:22 executing program 5: 12:58:22 executing program 6: 12:58:22 executing program 4: 12:58:23 executing program 1: 12:58:23 executing program 2: 12:58:23 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:23 executing program 5: 12:58:23 executing program 0: 12:58:23 executing program 7: 12:58:23 executing program 4: 12:58:23 executing program 6: 12:58:23 executing program 7: 12:58:23 executing program 2: 12:58:23 executing program 5: 12:58:23 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:23 executing program 6: 12:58:23 executing program 0: 12:58:23 executing program 4: 12:58:23 executing program 1: 12:58:23 executing program 7: 12:58:23 executing program 2: 12:58:23 executing program 0: 12:58:23 executing program 6: 12:58:23 executing program 4: 12:58:23 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:23 executing program 5: 12:58:24 executing program 1: 12:58:24 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000025bfc8)={&(0x7f0000b9343a), 0xc, &(0x7f0000b4b000)={&(0x7f0000171fc4)=ANY=[@ANYBLOB="2c000000190001002b73cfeb8506d66002205e00ff00fe00000000000800060001000100080001007f000001"], 0x1}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) 12:58:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602000000fde80001024000040d000500000500000005000000", 0x29}], 0x1) 12:58:24 executing program 0: [ 227.221887] netlink: 'syz-executor2': attribute type 5 has an invalid length. 12:58:24 executing program 6: 12:58:24 executing program 4: 12:58:24 executing program 5: 12:58:24 executing program 1: 12:58:24 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:24 executing program 7: 12:58:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80003, 0x2000000080) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080), 0x10) recvmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f00000012c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001840)}}], 0x1, 0x22, 0x0) 12:58:24 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 12:58:24 executing program 6: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 12:58:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x0, 0x2}}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 12:58:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 12:58:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xf21, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x38}}, 0x0) 12:58:24 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x856, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000011, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0), 0x4) 12:58:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) shmget$private(0x0, 0x1000, 0x54000042, &(0x7f0000ffd000/0x1000)=nil) getpid() ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000540)={0xff}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f0000001540)=[{{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000fc0)=""/93, 0x5d}}], 0x1, 0x0, &(0x7f0000001680)) 12:58:24 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:24 executing program 0: clock_settime(0xd8badf75a6fc898e, &(0x7f0000000040)={0x0, 0x1c9c380}) 12:58:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002f002907ffe900000000000003000000180000001400010004000000fffffff00000000000000001"], 0x1}}, 0x0) 12:58:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[]}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000110) 12:58:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 12:58:25 executing program 7: r0 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r0, &(0x7f000000aff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000009ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 12:58:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000000)=[{}], 0x18) 12:58:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) fdatasync(0xffffffffffffffff) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x1000) 12:58:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x800000000000002, &(0x7f0000000080)=0x8, 0x4) 12:58:25 executing program 5: 12:58:25 executing program 1: syz_emit_ethernet(0xffba, &(0x7f00000000c0)={@local, @remote, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty=0x3000000, @dev, @local}}}}, &(0x7f0000000080)) 12:58:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80044584, &(0x7f0000000280)=""/152) 12:58:25 executing program 3: socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000b40)='./file0\x00', 0x3) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) 12:58:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)={0x10000004}) epoll_wait(r1, &(0x7f0000001900)=[{}], 0x1, 0x0) 12:58:25 executing program 6: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x40284504, &(0x7f0000000280)=""/152) 12:58:25 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x40044581, &(0x7f0000000280)=""/152) 12:58:25 executing program 1: syz_emit_ethernet(0xffba, &(0x7f00000000c0)={@local, @remote, [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty=0x3000000, @dev, @local}}}}, &(0x7f0000000080)) 12:58:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) 12:58:26 executing program 1: 12:58:26 executing program 2: 12:58:26 executing program 3: socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:26 executing program 6: 12:58:26 executing program 0: 12:58:26 executing program 5: 12:58:26 executing program 4: 12:58:26 executing program 1: 12:58:26 executing program 0: 12:58:26 executing program 2: 12:58:26 executing program 7: 12:58:26 executing program 6: 12:58:26 executing program 5: 12:58:26 executing program 3: socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e61c14519b40f1fd01469fa4c00893a3cc8d9a7c2fa7fb1341d55c9b7f00559ec626b32f5550b28a8567f1e5a20549455420414f2fe7e2eeda2aaddec53152edbc619ee0a1e593a4396fc4387dec0635a2d360bce0a02d8c8fe4fc6974a03c467a4e86057445b648a"], 0xd0}, 0x0) 12:58:26 executing program 4: 12:58:26 executing program 1: 12:58:26 executing program 0: 12:58:26 executing program 2: 12:58:26 executing program 0: 12:58:26 executing program 2: 12:58:26 executing program 5: 12:58:27 executing program 4: 12:58:27 executing program 6: 12:58:27 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]}, 0x0) 12:58:27 executing program 1: 12:58:27 executing program 7: 12:58:27 executing program 0: 12:58:27 executing program 5: 12:58:27 executing program 2: 12:58:27 executing program 4: 12:58:27 executing program 1: 12:58:27 executing program 7: 12:58:27 executing program 6: 12:58:27 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]}, 0x0) 12:58:27 executing program 0: 12:58:27 executing program 5: 12:58:27 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:58:27 executing program 7: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x8002) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)=0x2) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0}, 0xa0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) prctl$getreaper(0x0, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) 12:58:27 executing program 2: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x8002) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) prctl$getreaper(0x0, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) 12:58:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80001100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) write(r1, &(0x7f00000001c0), 0xfffffef3) r3 = epoll_create(0x47c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:58:27 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 12:58:27 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]}, 0x0) 12:58:27 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@broute={'brodte\x00\x00d\x00', 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000300000000000000000073797a5f74756e000000000000000000626a004700000000000000000000000076657468305f746f5f7465616d00000076657468300072a500000000000000000180c20000000000000000000000000000000000000000000000a8020000a8020000f80200006270660000000000000000000000000000000000000000000000000000000001100200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x400) 12:58:27 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x8002) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000000040)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) prctl$getreaper(0x0, &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) 12:58:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000ac0), 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)=@ipv6_getnetconf={0x14, 0x52, 0x7c5fd5fa6bcda905}, 0x14}}, 0x0) [ 231.187920] xt_bpf: check failed: parse error 12:58:28 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:28 executing program 6: 12:58:28 executing program 0: 12:58:28 executing program 1: 12:58:28 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:28 executing program 6: 12:58:28 executing program 0: 12:58:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 12:58:28 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:28 executing program 7: 12:58:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2, 0x33}, 0x10}}, 0x0) 12:58:29 executing program 4: 12:58:29 executing program 0: 12:58:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x9) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80001100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x10, 0x70bd2d, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x47c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:58:29 executing program 5: 12:58:29 executing program 1: 12:58:29 executing program 4: 12:58:29 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9dfd57e4890ee211146978f4ab3f8258789c6fa9911eb9fb62dd76e9499743df97ff16e2411904d7b7416554e3c0e02712840b97e"], 0x68}, 0x0) 12:58:29 executing program 0: 12:58:29 executing program 7: 12:58:29 executing program 2: 12:58:29 executing program 1: 12:58:29 executing program 5: 12:58:29 executing program 0: 12:58:29 executing program 4: 12:58:29 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:29 executing program 2: 12:58:29 executing program 1: 12:58:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x201}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000300)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001880)}}], 0x1, 0x0, &(0x7f0000003980)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00'}) 12:58:30 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e20, @local}}, 0x0, 0xffffffffffff7fff, 0x7, "dbe058ec9b88b34a2668bedc978a6a9c55d078c453534ab3c3dd2b3ec18283c40d2d0a268fa36e2ca7f41f6d5d5783a8f4610cb313189d4707310861d08017879610c3f73ea5e2c6e73f2bd73becafee"}, 0xd8) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket$inet6(0xa, 0x3, 0x3c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 12:58:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 12:58:30 executing program 7: socket$inet6(0xa, 0x0, 0x80000003) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2002) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000380)={0x200000000000003, 0x7ff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000480)={0x1a, 0x20, 0x9, {r2, r3+10000000}, 0x7}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000540)={0x7ff, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x3f}) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 12:58:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 12:58:30 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:30 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x20}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket(0x2000000011, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0), 0x4) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) 12:58:30 executing program 6 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) [ 233.185286] FAULT_INJECTION: forcing a failure. [ 233.185286] name failslab, interval 1, probability 0, space 0, times 1 [ 233.196844] CPU: 1 PID: 7869 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #39 [ 233.204067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.213444] Call Trace: [ 233.216085] dump_stack+0x14b/0x190 [ 233.219800] should_fail+0xa98/0xaa0 [ 233.223570] __should_failslab+0x278/0x2a0 [ 233.227856] should_failslab+0x29/0x70 [ 233.231796] __kmalloc_node+0x22a/0x11c0 [ 233.235937] ? kmsan_set_origin+0x93/0x150 [ 233.240242] ? kvmalloc_node+0x19d/0x3e0 [ 233.244377] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 233.249796] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 233.255314] kvmalloc_node+0x19d/0x3e0 [ 233.259281] setxattr+0x3c8/0x9b0 [ 233.262877] ? rcu_all_qs+0x2e/0x1f0 [ 233.266685] ? __sb_start_write+0x9f/0x2d0 [ 233.270999] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 233.276421] ? __mnt_want_write_file+0x3ea/0x520 [ 233.281241] ? mnt_want_write_file+0x173/0x1b0 12:58:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x42380, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000140)={0x3, 0x1, 0x75, 0x0, 0x1ff}) close(r3) ustat(0x5, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_wait(r4, &(0x7f0000001a40)=[{}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x144) r6 = dup(r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x98) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000000)=""/108) close(r1) [ 233.285909] __se_sys_fsetxattr+0x2b0/0x3a0 [ 233.290317] __x64_sys_fsetxattr+0x15d/0x1b0 [ 233.294776] ? __ia32_sys_lsetxattr+0x1c0/0x1c0 [ 233.299484] do_syscall_64+0x15b/0x220 [ 233.303425] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 233.308660] RIP: 0033:0x457099 [ 233.311916] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:58:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x101000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x401, 0x2}, 0x8) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x1, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) [ 233.330874] RSP: 002b:00007f7de7ba4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 233.338638] RAX: ffffffffffffffda RBX: 00007f7de7ba56d4 RCX: 0000000000457099 [ 233.345943] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000003 [ 233.353240] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 233.360539] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000004 [ 233.367838] R13: 00000000004cbfc8 R14: 00000000004c357a R15: 0000000000000000 12:58:30 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x499, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e20, @multicast2}, 0x22, 0x1, 0xfffffffffffffffe, 0x7fff, 0x400000000000, &(0x7f0000000080)='rose0\x00', 0xfd7, 0x1f}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @dev}, 0xffffffffffffbfff, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) 12:58:30 executing program 4: socket(0x10, 0x0, 0x100) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x100, @mcast2, 0xfca2}, {0xa, 0x0, 0x0, @mcast2}, 0x7, [0x2, 0x6, 0x2, 0x0, 0xaf7a, 0x4, 0x3, 0x5]}, 0x5c) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) prctl$setfpexc(0xc, 0x100000) getpgid(0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f00000000c0)=0x9) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x0, 0x48}, &(0x7f0000000200)=0xc) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)) 12:58:30 executing program 7: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x145200, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000180), 0x0, 0x0) 12:58:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) 12:58:30 executing program 0: unshare(0x20400) r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) listen(r0, 0x0) r1 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x3d, "91ed45", "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"}}, 0x110) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x39b, 0x50d001) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x4a, "db2f00a218f54e72123d92267d41a3e1e4a3b9c9aa6a4a4a970e634387cdfac183d86feae2d33dfaf2d9385ce0b74ea1aa9ea93ab3d25651d6972e6102aba383f9a1ac511fff1e2f2a0d"}, &(0x7f00000000c0)=0x52) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000100)=r4, 0x4) 12:58:30 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000002900000043000000040000009b98e1663cae3ccf97872bc691dc531f7f2002c629e5324b5922aaed917159a9"], 0x34}, 0x0) 12:58:30 executing program 6 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000140)=@random={'user.', 'user.syz\x00'}, &(0x7f0000000180)="a3a7f464809544803dfc1f8971fe9304ab4fe8749e4a751497861bc7fcd4056853aeb6e06567c2d94623ee893a61fd6890f37817136a16bf857bf574cdec6f5db69dd290665451f70691e7ad00000000", 0x50, 0x0) 12:58:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0xfff}, 0x2c) r1 = socket$inet(0x2b, 0x400000000000801, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x28, &(0x7f0000000300)}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x47) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2040, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280)=0xffffffff, &(0x7f0000000380)=0x4) connect$inet(r1, &(0x7f0000000400)={0x2, 0x10000000000, @broadcast}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000680)=ANY=[], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x130, &(0x7f00000000c0)}, 0x69) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'team_slave_1\x00', 0x4}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x37, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/55}, &(0x7f0000000200)=0x78) 12:58:30 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = memfd_create(&(0x7f0000000040)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb90061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cifs\x00', 0x0, &(0x7f0000000140)) write(r2, &(0x7f0000000140)='\x00', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ptrace$getregset(0x4205, r1, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=""/4096, 0x1000}) 12:58:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) fcntl$getflags(r1, 0x40b) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r3}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x0, {}, r2}}, 0x38) [ 234.000582] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 4, id = 0 [ 234.332892] FAULT_INJECTION: forcing a failure. [ 234.332892] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.344764] CPU: 1 PID: 7937 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #39 [ 234.351971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.361342] Call Trace: [ 234.363967] dump_stack+0x14b/0x190 [ 234.367652] should_fail+0xa98/0xaa0 [ 234.371417] __alloc_pages_nodemask+0x5db/0x5c80 [ 234.376214] ? kernel_poison_pages+0x1a0/0x360 [ 234.380848] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 234.386356] ? get_page_from_freelist+0xae35/0xb8b0 [ 234.391454] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.396855] ? __module_address+0x6a/0x600 [ 234.401150] ? task_kmsan_context_state+0x5e/0x110 [ 234.406126] kmsan_internal_alloc_meta_for_pages+0x8e/0x700 [ 234.411897] ? __kernel_text_address+0x250/0x350 [ 234.416693] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 234.422164] ? __save_stack_trace+0x89c/0xaa0 [ 234.426696] ? kmsan_set_origin_inline+0x6b/0x120 [ 234.431585] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 234.436982] kmsan_alloc_page+0x75/0xd0 [ 234.440988] __alloc_pages_nodemask+0xf6b/0x5c80 [ 234.445769] ? __kernel_text_address+0x250/0x350 [ 234.450560] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 234.456035] ? __save_stack_trace+0x89c/0xaa0 [ 234.460571] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.465965] ? radix_tree_lookup_slot+0x4a0/0x530 [ 234.470852] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.476279] alloc_pages_current+0x6b1/0x970 [ 234.480725] __page_cache_alloc+0x95/0x320 [ 234.484992] pagecache_get_page+0x4e9/0x13b0 [ 234.489424] ? __find_get_block+0xbc2/0x1960 [ 234.493891] __getblk_gfp+0x553/0x1110 [ 234.497806] ? kmsan_set_origin_inline+0x6b/0x120 [ 234.502691] __bread_gfp+0xf6/0x820 [ 234.506349] ext4_xattr_set_credits+0x250/0x610 [ 234.511059] ext4_xattr_set+0x23e/0x560 [ 234.515082] ext4_xattr_user_set+0x19e/0x1d0 [ 234.519527] __vfs_setxattr+0x7fa/0x850 [ 234.523550] __vfs_setxattr_noperm+0x2fc/0x980 [ 234.528178] setxattr+0x823/0x9b0 [ 234.531678] ? rcu_all_qs+0x2e/0x1f0 [ 234.535416] ? __sb_start_write+0x9f/0x2d0 [ 234.539687] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.545069] ? __mnt_want_write_file+0x3ea/0x520 [ 234.549854] ? mnt_want_write_file+0x173/0x1b0 [ 234.554484] __se_sys_fsetxattr+0x2b0/0x3a0 [ 234.558847] __x64_sys_fsetxattr+0x15d/0x1b0 [ 234.563314] ? __ia32_sys_lsetxattr+0x1c0/0x1c0 [ 234.568008] do_syscall_64+0x15b/0x220 [ 234.571931] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 234.577141] RIP: 0033:0x457099 [ 234.580356] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.599276] RSP: 002b:00007f7de7ba4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 234.607006] RAX: ffffffffffffffda RBX: 00007f7de7ba56d4 RCX: 0000000000457099 [ 234.614289] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000003 [ 234.621572] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 234.628878] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000004 [ 234.636164] R13: 00000000004cbfc8 R14: 00000000004c357a R15: 0000000000000001 [ 234.648200] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008 [ 234.656255] PGD 800000013029b067 P4D 800000013029b067 PUD 129c22067 PMD 0 [ 234.663568] Oops: 0000 [#1] SMP PTI [ 234.667241] CPU: 1 PID: 7937 Comm: syz-executor6 Not tainted 4.19.0-rc1+ #39 [ 234.674545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.683952] RIP: 0010:__getblk_gfp+0x573/0x1110 [ 234.688668] Code: 75 a0 44 89 f1 e8 9d 24 ad ff 49 89 c6 4c 8b a3 20 03 00 00 8b 83 a8 0f 00 00 89 45 d0 49 8d 5e 08 4d 85 e4 0f 85 2a 01 00 00 <4d> 8b 7e 08 48 89 9d 08 ff ff ff 48 89 df e8 5a dc db ff 48 8b 08 [ 234.707611] RSP: 0018:ffff88012761f688 EFLAGS: 00010246 [ 234.713022] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000040000 [ 234.720325] RDX: ffffc90003189000 RSI: 000000000003c30a RDI: 000000000003c30b [ 234.727627] RBP: ffff88012761f790 R08: 0000000000000000 R09: ffff88021fd39200 [ 234.734940] R10: 0000000000000000 R11: ffffffff85429350 R12: 0000000000000000 [ 234.742244] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801d2a08248 [ 234.749560] FS: 00007f7de7ba5700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 234.757821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.763759] CR2: 00007f089cd0edb8 CR3: 00000001ac0cc000 CR4: 00000000001406e0 [ 234.771067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.778375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.785677] Call Trace: [ 234.788339] ? kmsan_set_origin_inline+0x6b/0x120 [ 234.793263] __bread_gfp+0xf6/0x820 [ 234.796940] ext4_xattr_set_credits+0x250/0x610 [ 234.801695] ext4_xattr_set+0x23e/0x560 [ 234.805752] ext4_xattr_user_set+0x19e/0x1d0 [ 234.810207] __vfs_setxattr+0x7fa/0x850 [ 234.814239] __vfs_setxattr_noperm+0x2fc/0x980 [ 234.818923] setxattr+0x823/0x9b0 [ 234.822469] ? rcu_all_qs+0x2e/0x1f0 [ 234.826260] ? __sb_start_write+0x9f/0x2d0 [ 234.830588] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.836019] ? __mnt_want_write_file+0x3ea/0x520 [ 234.840843] ? mnt_want_write_file+0x173/0x1b0 [ 234.845523] __se_sys_fsetxattr+0x2b0/0x3a0 [ 234.849949] __x64_sys_fsetxattr+0x15d/0x1b0 [ 234.854406] ? __ia32_sys_lsetxattr+0x1c0/0x1c0 [ 234.859114] do_syscall_64+0x15b/0x220 [ 234.863048] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 234.868268] RIP: 0033:0x457099 [ 234.871499] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.890435] RSP: 002b:00007f7de7ba4c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 234.898184] RAX: ffffffffffffffda RBX: 00007f7de7ba56d4 RCX: 0000000000457099 [ 234.905481] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000003 [ 234.912778] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 234.920190] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000004 [ 234.927490] R13: 00000000004cbfc8 R14: 00000000004c357a R15: 0000000000000001 [ 234.934790] Modules linked in: [ 234.938023] Dumping ftrace buffer: [ 234.941584] (ftrace buffer empty) [ 234.945327] CR2: 0000000000000008 [ 234.949265] ---[ end trace 7150740b9e34581e ]--- [ 234.954159] RIP: 0010:__getblk_gfp+0x573/0x1110 [ 234.958952] Code: 75 a0 44 89 f1 e8 9d 24 ad ff 49 89 c6 4c 8b a3 20 03 00 00 8b 83 a8 0f 00 00 89 45 d0 49 8d 5e 08 4d 85 e4 0f 85 2a 01 00 00 <4d> 8b 7e 08 48 89 9d 08 ff ff ff 48 89 df e8 5a dc db ff 48 8b 08 [ 234.978729] RSP: 0018:ffff88012761f688 EFLAGS: 00010246 12:58:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e20}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x7}, @in6={0xa, 0x4e21, 0x1a, @mcast1, 0x9}, @in6={0xa, 0x4e22, 0x23d, @remote, 0xffff}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x3}, 0xffff}, @in6={0xa, 0x4e21, 0xe000000000000000, @loopback, 0x8001}, @in6={0xa, 0x4e24, 0x4, @remote, 0x9}], 0xd8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() r3 = socket$inet(0x2, 0x10000004006, 0xfffffffffffff674) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)=0x0) timer_settime(r4, 0x0, &(0x7f00000000c0)={{0x0, 0x8}}, &(0x7f0000000300)) r5 = dup2(r1, r3) r6 = semget(0x1, 0x3, 0x408) semctl$GETPID(r6, 0x7, 0xb, &(0x7f0000000200)=""/232) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)=0x8001, 0x4) tkill(r2, 0x14) 12:58:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0xfff, @remote, 0xd8b}}, 0x8, 0x3ea8, 0x5fd, 0x3f, 0xf0}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r1, 0x81, 0x101}, &(0x7f0000000340)=0x8) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) inotify_init1(0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x0, @tick, 0x10000000000000, {0x6, 0x80000000}, 0xd5, 0x2, 0x1f}) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4201, r5, 0x0, &(0x7f00000000c0)) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000001c0)=0x6) 12:58:32 executing program 3: r0 = socket$kcm(0xa, 0x80000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x0) 12:58:32 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x9, 0x7, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000100), &(0x7f0000000440)}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) 12:58:32 executing program 5: r0 = socket$inet(0x2, 0x802, 0x8001) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x9000000000000, 0x2}) sendmsg$netlink(r1, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f0000003580)=[@rights={0x10}, @rights={0x18, 0x1, 0x1, [r2]}], 0x28}, 0x0) 12:58:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="f1", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYRES64=r1, @ANYBLOB="6739207e80e53bf4ee51d536af9975106e37f91e54fecb170725b5859b0ccd8b65c5b926cf5badf738682be86abbe6cfef8c56a447fe8032f6c8ba788e2d3daacbaa236bece45f196ea51f5cc4b998a036b9b093ccdf439d0143eac97052cf5fed3b8ad970e1a9844c6f9ebc0ccb7990b828799761ea8efa2804a7f482c704f626a7469c106166265c56af8ab3142d481f91ccc9ef72d2c6ba4152835a0d43abf978650be33e28d901248332", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=0x0], @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="bc285b81399097eba83fe1e331c61590cd356c123468f24da0641e85ad84d2900b1aceb284faa5625ceb6ca5fdac3cf5b42ff0385b7f797e7f6c5b4898017a05facc9a7832245fbcf3bdfbc1f428720d4ed40415f968ad869d5147465cdbc63351d8511ffc7dfecb4d6988e98dff7e6db3d6a23e55f55c4c9d0cbf09b54a7d766dc770b2dbc341506fdf57a60b04b25d7a8b4314ec1ce0f06d9aa8a69bc4026f195bbc4b9f425c411f9086d6f6c328a8fe66cce8874cc48c420f2ef458", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYPTR64, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT=r1]], 0x123, 0x20000000}, 0x7}], 0x1, 0x48084) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) shutdown(r1, 0x2) [ 234.984231] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000040000 [ 234.991660] RDX: ffffc90003189000 RSI: 000000000003c30a RDI: 000000000003c30b [ 234.999047] RBP: ffff88012761f790 R08: 0000000000000000 R09: ffff88021fd39200 [ 235.006420] R10: 0000000000000000 R11: ffffffff85429350 R12: 0000000000000000 [ 235.013803] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8801d2a08248 [ 235.021196] FS: 00007f7de7ba5700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 235.029584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.035655] CR2: 00007f089cd0edb8 CR3: 00000001ac0cc000 CR4: 00000000001406e0 [ 235.043055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.050421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.057821] Kernel panic - not syncing: Fatal exception [ 235.063629] Dumping ftrace buffer: [ 235.067187] (ftrace buffer empty) [ 235.070901] Kernel Offset: disabled [ 235.074539] Rebooting in 86400 seconds..