[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.807414] audit: type=1800 audit(1543562459.856:25): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.826481] audit: type=1800 audit(1543562459.876:26): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.845931] audit: type=1800 audit(1543562459.886:27): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. 2018/11/30 07:21:14 fuzzer started 2018/11/30 07:21:19 dialing manager at 10.128.0.26:36845 2018/11/30 07:21:19 syscalls: 1 2018/11/30 07:21:19 code coverage: enabled 2018/11/30 07:21:19 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/11/30 07:21:19 setuid sandbox: enabled 2018/11/30 07:21:19 namespace sandbox: enabled 2018/11/30 07:21:19 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/30 07:21:19 fault injection: enabled 2018/11/30 07:21:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/30 07:21:19 net packet injection: enabled 2018/11/30 07:21:19 net device setup: enabled 07:24:33 executing program 0: syzkaller login: [ 277.115306] IPVS: ftp: loaded support on port[0] = 21 [ 278.184813] ip (6815) used greatest stack depth: 53472 bytes left [ 279.420184] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.426966] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.435853] device bridge_slave_0 entered promiscuous mode [ 279.577202] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.583885] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.592776] device bridge_slave_1 entered promiscuous mode [ 279.723051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 279.856822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.262409] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 280.398662] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:24:37 executing program 1: [ 281.261385] IPVS: ftp: loaded support on port[0] = 21 [ 281.373888] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 281.382308] team0: Port device team_slave_0 added [ 281.581084] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 281.589322] team0: Port device team_slave_1 added [ 281.797167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.957134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 281.964231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.973223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.178151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 282.185982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.195356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.486486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 282.494290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.503616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.714672] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.721182] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.729872] device bridge_slave_0 entered promiscuous mode [ 284.897579] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.904255] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.912814] device bridge_slave_1 entered promiscuous mode [ 285.023071] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.029539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.036690] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.043262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.052300] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 285.099598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.313359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.938490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.992433] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.129157] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.353372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 286.360425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.507245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 286.514384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:24:43 executing program 2: [ 287.027697] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 287.036206] team0: Port device team_slave_0 added [ 287.211018] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 287.219482] team0: Port device team_slave_1 added [ 287.470066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 287.477368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.486760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.731970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 287.739089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.748043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.980430] IPVS: ftp: loaded support on port[0] = 21 [ 288.107047] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 288.114830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.124086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.372445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 288.380119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.389475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.550474] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.557025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.564106] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.570650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.579463] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 292.174006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.475888] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.482566] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.491158] device bridge_slave_0 entered promiscuous mode [ 292.778798] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.785461] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.794015] device bridge_slave_1 entered promiscuous mode [ 293.155156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 293.428012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.223783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.537940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 294.730007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 294.737365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.978970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 294.986119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.585927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.630497] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 295.638673] team0: Port device team_slave_0 added 07:24:52 executing program 3: [ 295.849934] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 295.858568] team0: Port device team_slave_1 added [ 296.221480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 296.230379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.239523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.540720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 296.547917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.556990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.869819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 296.877550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.887007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.923479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 297.009232] IPVS: ftp: loaded support on port[0] = 21 [ 297.233202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 297.240828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.250010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.239238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 298.245779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.254027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.535278] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.064696] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.071217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.078233] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.084838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.093690] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 301.932024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.464088] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.470565] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.479193] device bridge_slave_0 entered promiscuous mode [ 302.805043] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.811611] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.821147] device bridge_slave_1 entered promiscuous mode [ 303.122345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 303.413910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 304.517844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 304.636581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.907013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 305.267803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 305.274976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.589652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 305.597342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.852670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 306.697590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 306.705979] team0: Port device team_slave_0 added [ 307.062194] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 307.068714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.077118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.093967] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 307.102413] team0: Port device team_slave_1 added 07:25:04 executing program 4: 07:25:04 executing program 0: [ 307.526831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 307.534610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.543594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 07:25:04 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket(0x1e, 0x2, 0x0) shutdown(r2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x1}}) [ 307.952538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 307.960047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.969219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 07:25:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x400001, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x7ff, 0xea3, 0x20}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000880)={r1, 0x6}, 0x8) r2 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000800)=@sco, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000000)=""/30, 0x1e}], 0x2, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000000d00)=""/223, 0xdf}], 0x2, &(0x7f0000000980)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 308.330445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.338340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.347555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 07:25:05 executing program 0: syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r0, 0xc0045540, &(0x7f0000000080)) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe9a7, 0x80) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) [ 308.710242] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 308.718113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.727310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.795794] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.829763] IPVS: ftp: loaded support on port[0] = 21 07:25:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0xf002) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(serpent)\x00'}, 0x58) write$selinux_attr(r1, &(0x7f0000000140)='/sbin/dhclient\x00', 0xf) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="146a06ef3037c9ae86400ff9903a8c016444f97681be259a27e37ae66918e23d89d68041c2", 0xfffffffffffffdc7) socket$inet_dccp(0x2, 0x6, 0x0) 07:25:07 executing program 0: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x202000, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f00000003c0)="d740cbfef06e14ed518984381db8ffa88948c8de5e4d2d6cd417d5bf08ee372e44c02da3fd47f33e1e915fd2a15a7e526f62f32e2749ad4817f55ec225252bc49923b9146ea9a03252bf6e308d7a742d7ce188900661a4e69c76fde75ee67d3517ac726c", 0x64) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f00000000c0)="65059947d5f7e412e9e7c28c871e3801c5fcc17e100befce28967e1afc7ee4c3dda0fb094510da707dfaa0c9abb413a06183332eb473f364042c3f45de51adb954b325656cb94e16e5d5ecef2ae8bcb5b4e2605541ceaef7ed671e544f17343029b6bf3fa6720e5019be49ed12c7fd357cd4f5415e7cdeec4639e4447c46a91c5e159b91a131cd694fbed9554eec62c30533054ddeba6f1097b6d2d87fc1bea06bc74165a4d5b150d33168fc1498ea5b8a94fe5e38732f") pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flistxattr(r3, &(0x7f0000000240)=""/200, 0xc8) vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x1f}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340)={r4, 0x8ee}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000440)={'HL\x00'}, &(0x7f0000000480)=0x1e) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) 07:25:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xe0000, 0x2c2200) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x13, 0x1c, 0x10, 0xf, 0x5, 0x1, 0x0, 0xc8, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) 07:25:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x240101, 0x0) write$FUSE_POLL(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x2, {0x5}}, 0x18) socket$pppoe(0x18, 0x1, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000080)={0x100000001, 0x4, 0x7, 0x7, 0x80000001}) ioctl$KVM_SET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080, {}, [], "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", "c20cb97be271dc82a4192f7d1f93f1626322eabda595277633dee6febf99aae4ff4a64c55e43bd66fed8a377ce0025a921430fef63011effdac9389a22d8b110cbb2b022c3f7ea4459443eec931a3dcef93ec5f3523d5f78973eb67c04e9ea1a574e8771b54e68aaee40177851c9d92a1c7536ca80de7c530e775adab833f2e5e638d6029a995ffdebe6af3ab67dc11b06acafeca89e948e22c8ca54cc5b67eb3557f0db00ba0f36f8a5a461b727779cc3f5bc31a18c5b46982cd9d376c6424dc7798c1ad2db5c6b2930b420ed0848aa06581f19215060213364803b657066c9ff26d549b24e93e62b8b7583097c4484b351dd9200d5f60d4f59b771f6b54032ba28786a43bbaef71fd50aff8b5dc1282b4a36ec3f37600ab2e2e4ea9af61c306acb73085fa496cd066953a9d652fb8c4bf852a059c47aeffb5d360f332d9aed51a764fbdcd4116f224d96bae589cc401385787542d305aba3471b63f4accfebdb74965e5bbdbb2464fa4e7e2913a4d47d9384353893f21b0b5e741903f6a898741251a827acb3838aaf4800c4c5238feb55f9a54b528ae9582b7a3a91c76da51a98adfca5065f380778d5f1b6c793e059fc18f494f5a438f4a6bfb912358c25ff090cfd999a0ddb4618fdb940c5bd016d6af0f3260ba0ac749f8de52d6c4ff3ad43e94a520847e8221e31344aee47dbe0270006d34bb3128bd45c834c0b64a025f8f938517aa488893e3e475748b1a3bb678e518364161148b98c1db526a90acd57da4e40760de770e0b40270f03399ce8b3d8439b82735562187b6b548676654c62de977d62d6ac1fbaee64e43fe386727cccb4d5cc02764d478dd70dc2e8f4dcc005be61f55aac5d3c43bf6e50f330dc6313cf38334ef024bf90e17d4f7a31fe258e278f5f9f1f4afd54219299fc9dc8302b4aa46ab8e4cc2496bd876d5ee419c77bd9d3696e32e97180e54ce9566e3df8bff3a047ef776bdf4d9dba1e2ea2ee16ecd42fca093780b1e1183ec5fa99b36d38ddc15ed1c52a0f2b5ed32aba439446c8b8c85088c9323da4363ef8755a05d3092e8e79769b1ed72fe8fb2da7c32d00300c1e381abb72f3614aac3a82895e1299bc4adc03db46311b40e9a96791c4882612cdfcf3f42fcda7a26fed0b062ed70fc9ea098414bf01b1a73d7ba33c0a4d5efd3cc9e53c0cca59032f9cd1ab831592ebe6ee37cc3786ca59c8f75b861e0920f86fc53e0fc6ed3033b31055ad983b93f924729088daabe5f3113157aff81cf91e08a503b5856f4d0601260429c7182b2a7f2e4f44f2bbf0870b416f071407fde89bcb5cedbe37d2ff4a5b6e974b911b990a2e23a2a4afa0cbb23ba71db7a3ee6bcf629e2f1c53c1eed7f76607db216a6603518acf1ed2522072c84d3bbecdffb398f9878cb9ba0b77a10c296f933e9b8dd166f61b70e5d6b0ad095a1ee4d5ad598481f9ee286df29c6239233794bc598f6651b755177e9494937e9a731a2dfc235d2880655b21c517acb9b04e40d3ba86ccd8c44dfcfe208e676f17df34c37c304e589bb5f7d256509bab39a5bc0aba93a86de2a281d4ff19c979af313b16aaba863f66cba01c0c4ee4e323120f03115749c0e9b99898c8929e43bd3b1b4d1fab69f2e9ae842ad2f4f65ace4053c05084908c0a75ce00daa19c779b509ca5bfa88d45ca6effe110e4c6eed7d183d0ccd3a49e319a354c1ed0b233404b67414f7d8e64da70eef85f1f2ca56c7370cb6316af0e52b2eebd353f2e4239542d6958f9b59270c5bc7303f4ba6f56157bda08941e51de53b1506792d50ff033371f086ef73fa9ef8cf1cb13aa03779817a4d94da163f965cd760bacaa80ec114e718089497f8948170886d35a8e184dd052fbbd723efdaa7476709842570d4485198c82e75591f67b91345f76ecc92da24de20aa9c4f3aa8d27cb418e336e66b5fc16c8cbc3196595e31fab444bf2fd53c4d2f5869a0aad0cbb5ce5e84c84f79a2515ef443dc50977304b387f9949dc022b0709b4ee0798a035d200709986c89db2bd9d5e75c817301713fa3e7e231e663f81a686c501f1f5ca3ae9dc2274e5daa4d92c98d29df887757fc1f117d0e886fb4a63e02eeda51cc4eb60408445549079e97bbbb2c3e8223bb34665327c007c5883c82804e77371ad0a0f3629767a2d69c2a45f7b4f9c8b844fb1ee43974bc442a8029d2ae24e8f3dcd8d5f41212f4bf61098b03f9315c98f54d3a40088c732b8d793ead43ea81a692909aba7c9c70bc01694b709cba7647ffe21a46bc6a07320a76df9dd6102dc5241e168d10badf35fa7669ca3b31c087fb42d7aa16b03130f7b7d2a731830d43a87b319eecf1d2b4ff8201e170f55cec1c309af988ac5db44bbe2c8088bb1f7a7ceb29797788eaf8e5b556240a3ff6af6966dabaa4f42c3484665fb312849ec3f30dd73ddaf6e3510ea17d5ed90a21df2092fccff3473f8fbfc12fd828c368150080e05be42fc359696b466d9cd71dfefc9e1bb1ed4a924e0fe7a07b62881e8fcdd4fcdf08308a63bf1111de263e7548281c0fe1e0b0a4aea3d6732811584d8aa6501e53e8efe9d13c0267777abc146de4cea32cbc4a1fabf1cbfa712f271c2fece7315dd64b6309ba28d366b99eb1b1e5de37901bd35a1146424e6955d7d07cc12c321a49efdbf8b9faead93bcfe04a775ebe4e0691352ccad48da86197082142c6ebe66b2b9749398c4fcb3cb3f496b1dd231222c9f70170d7a6f1bc173dc4f6a1550bced1fef57d7a3385a0f07433bf7359f50b52acc8188f52a55fb2117264824911a00f54eea1112391496be3d0bda852976daf333080660a1d09a9d6d6ae7e16c41e6cea90eeb4050bc0376cc9877975f9a45174ca05ba27e627da7a1e03a7b41d7626be28e4cffdfdd68a8fcf70bbdf11ef93827d277d61fe459a19f7c5de362f3e5bf2416d639d089acfa586c6619b62715f9d787b045552cc896224e8d7e7820551bd43ac8626afb24ad864523b581dde10ec463ca921ddf0b88152d940cff7bdaaf63b8b3a03631e8f1477e0116c8e06340579e2cc98fe24c2bc234d52d160fa51963655d887d9bd30fe6e7c07f372df5625c3773992b5bd5987264b97a0af9386f86abb4742ac325e3ca710e71275d603086b5c170996ceb59951d60169b0ea87a63f825a8dd7203a0db53c2c60c1d2404ba673b9541557af8b4bee463e893f6332b382487a136695f30649789f717b21354f1a358dc7483ab357f200f1fde39c362a2029c466ddd744e0f9be4ba94aabab258798e1829b9a7e9da6ad96d5f440a123fa85576c1f25bbabf395d17d6ecd1bb370458c6171afcf25672145cb26cac909bee8a12d6fcb8601409ac432145461a4e328e9afce4117ac60324389a841cffd571bcf5f5239e19d61ba21809c6c4ecdafb44b5bb1a836649534fa5c77d87108e05a47551291a68bc6790e1b80a5426231c608aef6ed1de6a0dadd3ed5e8114e96ddf330666f3f655edbb3740aa4cc3bb9249d197cae2069d92a310251cebc03553653d877192cf7102407fbe517517bcc2abb25e0417cd3a022988b581b79d8f53ef50809ed60696f0168088041d30959730491502a8c945c5446716f719eaf839fd57d3c7bfa27b1e80c43aaabb5c67cc58977784f3bc62a0a5f5bfd384dbc4819e24d656c5726ef3e1b450825c0082d188e0043f6d33ac2b8b33e68ffbbcfb87c6e4d99de78579fdc1aea1c9a94cec3e5cfc807e9ea8aa8f4b73b58d27c4674e025c03a5d1088683f44321d2abef67bb91a15fa6c30a67b97ea5fdb8eadbc314dbde52a562ffcc631966bbb1550ec0d36ac13df75b68f62aefc136d3de8efe85876baf9ce517021f9f7bb4fc12f4ef7b7bbe3e9e8c118a62ed2701f01e05875bd87bca99026007b46b8383657479fd0ee34779b333c794ae185024c7c4ea65453047855deaff8da939478e27ddef11287f4b3619014ac0010b1fb8e79ac8f519c1f37f08dd29c7c6eca1c7478ddfbc78d36a433d5ccd1281a99f7cb50ea3820099da9b1860477f38acb319c49dfc0759d2e3afcf1b7466c2ec75ba93bd84251a82bf59636fd1db262292f5f9d4fd6044643b7874d366b5890dafd8752c5b5f8874cac9f4ccae348f49e02e703f803df5562c15ab8fbb736ff153873be4eb97cd2253a3bb517243b4d15592cf7411d02bdae2e95fa7b961e0cfcbd36851e0fd5ae631bde6576f62927e01167cee2cc18d20744fc107bb1a26582a0fc1ebe8669c7170e1dca8522d3c7ae6edd6dce8f0dc1183865e0f5bc3475a23010a86028f91743470941bf02f359fd05a78ede7f6d5d02fa6573c450d2b8d26961f3cc75cf05b75b22a1f67387b384bba05bb566b3efb59be610f7abc7ad701ceb317b33311b66adbd60cddcf630167f0e1cccb762db2f7dea2e59a49a8c16244d1621d4ff6aa537275d5a2747d536489c7d4532b555397c2022cb5971f9d399a1fe4dd275dac380338274e75464d484a83d18417b81ffc5fbdb13f5eea8509b3b34bf401cc1a2c82db1deebf551441e5e33c77cd10bd369300fefd9dcef8b7d59e8c6fa99710b480d0e521a7338f61958cb53e1f4a4776b05c8ef1febe16239e4e41556ad3d9241a20d99e4f1e6989fcabb153a3f84dc117a4e7101babd268afd8a2affdccaa7438e94ddbceecbe15e4561956d5ea52a23bdbfd022b0f06c6a43907ec7d7e317fbc8b6e3e649ca73222b9042c32c8ae9a043e4b99ca15a24a3bc80b32b233bab5f2c0c1072f280e5a77333d04c21659201e1f9da18be7b3262fc5dc3200b6654855c9a2634382e04f8a22c07345bf31e07c73c095b37f9d1c5c2490c97ced58c2a0af2bf47c83c1647127ff9155fac7ef656ff539d02ee5b9fd59375394b182ab04b0052077fbad9ece41af535dd4afb9fbae5f84b1abdacee5a36761824fd00699f2d2ca23b061feb1ba8becb40dd289395437aaaab4e367e6b1d804c69415116b8cfac381489e3493ddce7f4ac10ffedf99dc5cfe3071f0b5e1874920d65be17c79173ac4ed01653813ea82cbd8bf93d3d0a2bfb09000000e363706a1cc2c1098833b6fa499101d439265c9699df28140c4368854bcc6a7040ea16ac8a4498076bc8078c644fc902118a10c0ec3c74103f22c945e894b0f64fd35bca6365ad9c42a0fccd71bc81daf1dadc317d0e61b9f820eaf9ec0b9865ec6ea1d639124f40a8beaf900fbcb4722077afc0868371723a029e87f4395801788db22a30c6593b5724dc49ce186d6abca24bd8157a9615dea5a5ed9395de260206eef4a0828223fc150d40215005486ba0682c6e5e7a208b6a879d9b0ea0c1e9697b34a6045d5b150a2bcf0f80d3dfbb845efbcd68064cf1cbc59ae064241f7efd1c04b64fd82d9ed889ba2028267d3e2695469ee0ceee26b76b4f9cda4e6f3c4839429dc8d3064b8f259e34bf04e0e23744640f932dc6d27853a1dbaccae5b94f7c0ad42b20ca21a5285a6ce36c352c5624563067561255dccac14a8adac68c3b8aed8a947f03a41cdeb710c9f2f557e441ba6f8e886a5c13c3acbdde26c56a6fa2b41495092970db0634c3602dc3f52e31ce6123b39224625a51eb336070f2d3a2d2fb31e39e7f4b749007dae0cc3449dad490c3c73b35313c9bc5007b69c77fc3573e69fff2b005d9dd1b978e8152093a49e8be894a6006704539f316c79277373701fb8885134bb24fdab156b240e37fdbe025fbb45b69a72dbd6b1fa87231beaa14f819524d44d24454ba5009397332f94fb2ee93139724a377cc1680b400"}) [ 311.461955] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 313.283168] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.289758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.296861] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.303423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.312643] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 313.319372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.879126] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.885862] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.894589] device bridge_slave_0 entered promiscuous mode [ 315.288701] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.296331] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.304931] device bridge_slave_1 entered promiscuous mode [ 315.619161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 315.944680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 316.754784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.058930] bond0: Enslaving bond_slave_0 as an active interface with an up link 07:25:14 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}) [ 317.488175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.895975] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 317.903226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.173333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 318.180424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.237614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.097629] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 319.106123] team0: Port device team_slave_0 added [ 319.353481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 319.361626] team0: Port device team_slave_1 added [ 319.384845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 319.403196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.411167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.516082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 319.523333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.532415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.804537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 319.812004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.820877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.014444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 320.022430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.031541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.247592] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.272724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 320.280432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.289682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.920738] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.927315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.934381] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.940876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.949476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 322.956297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.928596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.667313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 07:25:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x1) r0 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) [ 325.578371] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 325.585486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.593586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.108896] 8021q: adding VLAN 0 to HW filter on device team0 07:25:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) [ 329.626575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.629396] binder: 8060:8061 transaction failed 29189/-22, size 0-0 line 2834 [ 329.644049] binder: 8060:8062 transaction failed 29189/-22, size 0-0 line 2834 [ 329.653907] binder: undelivered TRANSACTION_ERROR: 29189 [ 329.659602] binder: undelivered TRANSACTION_ERROR: 29189 [ 330.006281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 330.294724] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 330.300994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.309348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.604987] 8021q: adding VLAN 0 to HW filter on device team0 07:25:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mlock(&(0x7f0000761000/0x2000)=nil, 0x2000) capset(&(0x7f00000000c0)={0x20071026}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') sendfile(r1, r2, 0x0, 0x100000080000000) 07:25:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x8004550f, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000280)) 07:25:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x201a7f1b, 0x0, 0x201a7fd7, 0xa, 0x7a, 0xff00}]}, &(0x7f0000000000)="1d4e4cc000", 0x20000, 0x8a, &(0x7f00001a7f05)=""/251}, 0x20d) 07:25:29 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0xffffffffffffffff, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x2, r1, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x100000001, @mcast2, 0x1000}}}, 0xa0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x80}, 0x8) recvfrom(r0, &(0x7f00000002c0)=""/169, 0xa9, 0x40002061, &(0x7f0000000380)=@generic={0x9, "0801556c3ba7009218439794d4e08ee364a9719e28784fc92e4551edc85f0821919ce6f3bca1c9f226ada63f1fa89dee3f551f74f10a393fc04bad6aa3e8e1bf23eb99267a18bd498d8a4eb5d7d52fcb2c22abd7210b29dd302f7babdcc8c2295d5a34d525c36aeefe19b3799ef4e8b91a6ca2c30c22902ae0bcd4a04158"}, 0x80) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xffffffffffff8001) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000400)={0xfffffffffffffffc, 0x8, 0x0, 0x7}) pread64(r0, &(0x7f0000000440)=""/136, 0x88, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe0, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xdd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x22}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000700)=""/4096) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001700)='/dev/dlm_plock\x00', 0x60000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000001740)=0x80000000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001780)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000017c0)={0x0, 0xc4, "9bc9dc439dea3ce59c329970d368c781c518538db3d6b6ecebd61c53663b641d7b535b88818de5a5e481a8b1bda9f0bd3b0173d5cf71d9f7408c212728efb22e5f91d8b23a8953d34e0db6d326dad20e474d071eab13877f5659b3e1061eb524a5aa61ebb702ccfeef214cac16ce220a1da4178f0858f83585ff48047ae668e4bc72d250d0de8cf3f2bc01d09a757551a0bfdb78aff8d10db28a0d74775283d9abc974320e58b791c45933c582f674512ecef9f60eb6199259d601fd9380b5e66460f8da"}, &(0x7f00000018c0)=0xcc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001900)={r4, @in={{0x2, 0x4e22, @local}}, 0x8, 0x6000000000, 0x0, 0x6, 0x10}, 0x98) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000019c0)) sendmsg$nl_generic(r0, &(0x7f0000001c40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x184, 0x20, 0x0, 0x70bd28, 0x25dfdbff, {0x19}, [@nested={0x170, 0x50, [@typed={0x20, 0x63, @str='@selfeth1em0ppp1vboxnet1\x00'}, @generic="9c6dcd102ba4e9293f7c9f168dc916ddd317", @generic="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", @typed={0x14, 0x91, @ipv6}, @typed={0xc, 0x6e, @u64=0x8}, @generic="48a67075ff07d3ab77ffe87b02b4444e44c62de344e46c2309b47fbe10"]}]}, 0x184}}, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000001c80)='IPVS\x00') sendmmsg$inet_sctp(r0, &(0x7f0000001f40)=[{&(0x7f0000001cc0)=@in6={0xa, 0x4e22, 0x3, @loopback, 0x1}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001d00)="36289536e4657c401c57de8f869cb9e83e73dd8d99ea387c4b4f1f291acb54f74d448c7a3fddc3b5cdf4c12907fd70f4e68b2205374f13d01886560724bd25aec086bcc6e306c53a7e1cf38fb719d7b5e0f96cab5a3f44859e0cf70242134c2bb460c8a2d3b2b29f779ce06701bf162e6b9d9b13db802de90e63765c46aeb9c5fb3642536185ebb1af8020e912bc49a0a64f9f2d98", 0x95}, {&(0x7f0000001dc0)='oN', 0x2}, {&(0x7f0000001e00)="2c27b19fe045af8aa6e20e3a4ee67dc773cccc1b43fc6661e414eef1422dd61cb1c1d1fb6fd00e5a8571110dfce5244c1e5622bcc01b8b5b28af1ddc2c782e30f0a9807281883b352f8db1b518474ec3ececc16d4e750bd9396f39bf0ad1c3a20885b1b7fc", 0x65}, {&(0x7f0000001e80)="ab049f80c70f3d768b990a8718f8a3d3969539804e464e4b9c9e03993ee08ec4481096ee376f5af196816dbf6ce68051e0d957227e67814bab23297f48b8a992b150c91ce721f0f2ebd143265353913acb2ae7930f5b8bcdb9ef65d6fbc0", 0x5e}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x20004000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000001f80)="6fc32cb68fae99ae1695695fa322c8a5a65fb81853e1237b", 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001fc0)={r4, @in6={{0xa, 0x4e21, 0x5e0d771f, @mcast2, 0x7}}, 0x3, 0x7cdb, 0x57, 0x7ff, 0x1}, 0x98) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000002080)={{0x8e4d}, 'port1\x00', 0x20, 0x1400, 0x4, 0x3, 0xffffffff00000000, 0x100000001, 0x7, 0x0, 0x2, 0x30000}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000002140)={0x0, @speck128}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000002180)=""/12, &(0x7f00000021c0)=0xc) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000002340)={&(0x7f0000002240)={0xd4, r2, 0x402, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd963}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x683d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x880}, 0x0) 07:25:29 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:25:29 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) setresuid(0x0, 0xee01, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={"0200"}, &(0x7f0000000100), 0xfffff, 0xfffffffffffffffb) [ 332.682386] bond0: Releasing backup interface bond_slave_1 07:25:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141046, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r4, 0x0, 0xd026, 0x6d0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8001}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) [ 332.732890] capability: warning: `syz-executor4' uses deprecated v2 capabilities in a way that may be insecure [ 332.752783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 332.776292] bond0: Releasing backup interface bond_slave_1 [ 332.919486] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:25:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') preadv(r0, &(0x7f0000fc5fc0)=[{&(0x7f00003b0000)=""/4096, 0x1000}], 0x1, 0x0) 07:25:30 executing program 3: syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mlock(&(0x7f0000761000/0x2000)=nil, 0x2000) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') sendfile(r1, r2, &(0x7f0000000000), 0x100000080000000) 07:25:30 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:25:30 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x7000, 0x891, &(0x7f0000ff7000/0x7000)=nil) getgroups(0x1, &(0x7f0000000380)=[0xee00]) shmctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0xa10, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r3, 0x0) 07:25:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) 07:25:30 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_open_dev$mouse(0x0, 0x0, 0x0) [ 333.544882] bond0: Releasing backup interface bond_slave_1 [ 333.594829] hrtimer: interrupt took 58181 ns [ 333.671500] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:25:30 executing program 2: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 07:25:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200), 0x181, 0x0, 0x0) [ 334.634019] bond0: Releasing backup interface bond_slave_1 [ 334.692139] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 334.756094] IPVS: ftp: loaded support on port[0] = 21 [ 336.385114] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.391554] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.399811] device bridge_slave_0 entered promiscuous mode [ 336.478951] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.485428] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.493832] device bridge_slave_1 entered promiscuous mode [ 336.572459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 336.649231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 336.875689] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 336.952442] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 337.094514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 337.101447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.328484] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 337.336249] team0: Port device team_slave_0 added [ 337.413612] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 337.421276] team0: Port device team_slave_1 added [ 337.497252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.579737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.658813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 337.666246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.675343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.753957] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 337.761276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.770563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 338.610300] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.616818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.623863] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.630360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.639268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 339.066014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.798587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.082499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 342.376260] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 342.382579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.390374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.671624] 8021q: adding VLAN 0 to HW filter on device team0 07:25:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xf, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000440)={r1}) setsockopt$inet_tcp_int(r2, 0x6, 0x36, &(0x7f0000000480)=0x200, 0x4) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r3, 0x0, &(0x7f0000000400)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x1, 0x25) r4 = socket$inet6(0xa, 0x3, 0x6) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000003, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000300)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000340)={r7, 0x9, 0x7}, &(0x7f0000000380)=0x8) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 07:25:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 07:25:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) 07:25:41 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x7000, 0x891, &(0x7f0000ff7000/0x7000)=nil) getgroups(0x1, &(0x7f0000000380)=[0xee00]) shmctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0xa10, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r3, 0x0) 07:25:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x15, 0x10, 0xc6}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000000), 0x0, 0x3}, 0x20) 07:25:41 executing program 3: clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4000000000021) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x0, 0x0, 0xab}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 344.650539] ptrace attach of "/root/syz-executor3"[8481] was attempted by "/root/syz-executor3"[8489] 07:25:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r1, 0x2}}, 0x18) 07:25:41 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') sendfile(r0, r1, 0x0, 0x10000000000443) 07:25:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x40000af, 0x0) 07:25:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) 07:25:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000440)={@local, r2}, 0x14) 07:25:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x1, 0x0, 0x1, @discrete={0x1, 0x7fff}}) fallocate(r2, 0x0, 0x0, 0x10000) fallocate(r1, 0x0, 0x85, 0x10001) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000400)) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x4000, 0x10) writev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="fa2d1f4f1e86405034e4c43a338139bf289bb5096b5c9fb130a856a3d9795e", 0x1f}], 0x1) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000500)={0x0, 0x8, 0x0, 0x1, {0x8, 0x6, 0xbc, 0x10000}}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000580)={0x13, 0x34, 0x11, 0x7, 0x5, 0xffffffff, 0x0, 0x5e}) unlink(&(0x7f0000000380)='./file0\x00') 07:25:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xf, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000440)={r1}) setsockopt$inet_tcp_int(r2, 0x6, 0x36, &(0x7f0000000480)=0x200, 0x4) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r3, 0x0, &(0x7f0000000400)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x1, 0x25) r4 = socket$inet6(0xa, 0x3, 0x6) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000003, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000300)=0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000340)={r7, 0x9, 0x7}, &(0x7f0000000380)=0x8) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 07:25:42 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) shutdown(r0, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001780)={@remote, 0x0}, &(0x7f00000017c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000001880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@mpls_newroute={0x40, 0x18, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x1000, 0xff, 0x1, 0xfe, 0x1}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0xc, 0x1, [{0x80000000, 0x2, 0x0, 0x245}, {0x1, 0x4, 0x20, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x800) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000006ffc)=0x6, 0x235) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=""/143, &(0x7f00000000c0)=0x465) accept4$inet(r0, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f0000000000)={0xb, 0x6, {0x57, 0x4a3b, 0x1, {0x400, 0x80000001}, {0x100, 0x5}, @const={0x6, {0x7, 0x3, 0x5, 0x7f}}}, {0x57, 0x5, 0x5, {0x4, 0x3}, {0xe7, 0x2}, @cond=[{0x4, 0x1, 0x2, 0xfffffffffffffffa, 0x7b82, 0x1}, {0x1, 0x0, 0x1ff, 0xf4, 0x1ff, 0x7}]}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)) splice(r4, 0x0, r1, 0x0, 0xab11, 0x0) 07:25:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 07:25:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) close(r0) 07:25:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), 0x0, 0x80000000000}, 0x20) 07:25:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) 07:25:43 executing program 1: close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000000)="cf2a6a72da032260545df462daed981267", 0x11) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="82022e2f01006b0c2fe4"], 0x1) r1 = socket(0x2, 0x4002, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000000)=0x3, 0xf4) 07:25:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001500add427323b470c458c5602067fffffff81004e220000f7ff58000b480500945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a100041043d410000fcff", 0x58}], 0x1) 07:25:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 07:25:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) shutdown(r0, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001780)={@remote, 0x0}, &(0x7f00000017c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000001880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@mpls_newroute={0x40, 0x18, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x1000, 0xff, 0x1, 0xfe, 0x1}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0xc, 0x1, [{0x80000000, 0x2, 0x0, 0x245}, {0x1, 0x4, 0x20, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x800) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000006ffc)=0x6, 0x235) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=""/143, &(0x7f00000000c0)=0x465) accept4$inet(r0, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f0000000000)={0xb, 0x6, {0x57, 0x4a3b, 0x1, {0x400, 0x80000001}, {0x100, 0x5}, @const={0x6, {0x7, 0x3, 0x5, 0x7f}}}, {0x57, 0x5, 0x5, {0x4, 0x3}, {0xe7, 0x2}, @cond=[{0x4, 0x1, 0x2, 0xfffffffffffffffa, 0x7b82, 0x1}, {0x1, 0x0, 0x1ff, 0xf4, 0x1ff, 0x7}]}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)) splice(r4, 0x0, r1, 0x0, 0xab11, 0x0) 07:25:44 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) close(r0) 07:25:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:25:44 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000090607031dfffd946fa2830020200a0003000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 07:25:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x34000, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) [ 347.544192] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 07:25:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) shutdown(r0, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001780)={@remote, 0x0}, &(0x7f00000017c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000001880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@mpls_newroute={0x40, 0x18, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0x1000, 0xff, 0x1, 0xfe, 0x1}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x1}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0xc, 0x1, [{0x80000000, 0x2, 0x0, 0x245}, {0x1, 0x4, 0x20, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x20000001, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x800) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f0000006ffc)=0x6, 0x235) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=""/143, &(0x7f00000000c0)=0x465) accept4$inet(r0, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000200)) ioctl$UI_END_FF_UPLOAD(r0, 0x406055c9, &(0x7f0000000000)={0xb, 0x6, {0x57, 0x4a3b, 0x1, {0x400, 0x80000001}, {0x100, 0x5}, @const={0x6, {0x7, 0x3, 0x5, 0x7f}}}, {0x57, 0x5, 0x5, {0x4, 0x3}, {0xe7, 0x2}, @cond=[{0x4, 0x1, 0x2, 0xfffffffffffffffa, 0x7b82, 0x1}, {0x1, 0x0, 0x1ff, 0xf4, 0x1ff, 0x7}]}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)) splice(r4, 0x0, r1, 0x0, 0xab11, 0x0) 07:25:44 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x1}}) 07:25:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/128, 0x80) 07:25:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 07:25:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) dup2(0xffffffffffffffff, r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000d65000)='-ppp0#:)\x00', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r1, &(0x7f0000317000), 0x7f8) 07:25:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x200000000000, 0x28021) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x10000}) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) 07:25:45 executing program 2: getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000004780)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) shmget$private(0x0, 0x7000, 0x0, &(0x7f0000ff7000/0x7000)=nil) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) 07:25:45 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x34000, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 07:25:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x40000012, 0x1, 0x3e}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) 07:25:45 executing program 3: r0 = socket(0x800000000000010, 0x20100000003, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000034b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a000102080000000000000000000000"], 0x1}}, 0x0) 07:25:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x34000, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) 07:25:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000080)) [ 349.334919] ion_ioctl: ioctl validate failed 07:25:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000009f80)=@delpolicy={0x50, 0x14, 0x231, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}}}, 0x50}, 0x8}, 0x0) 07:25:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) close(r0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000340)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000380)={0x0, 0x0}) sched_setaffinity(r1, 0x1e97dfd61ed55ccd, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioperm(0x2, 0x1, 0x1000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r2, 0x0, &(0x7f00000005c0)="972435663bda6a5cbb4bbce415620dad6b9ad28b3e5752eee1466f54a74198ae945b6eb742f687ff41b9b9f152c51e39384230b68f43b36606f777be15fb21c28a4688ab81ee1eff9dd058c0125ec3b39d6805") sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) 07:25:46 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0f85403, &(0x7f00000001c0)={{0x3}}) 07:25:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000080000000000000000000000c4d981ae211e6951"], 0x1}}, 0x0) 07:25:46 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000808, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget(0x3, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4002) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa5e0936e7f46bf5c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r3) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'team_slave_1\x00', 0x5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0]], 0x0) accept4$packet(r2, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @rand_addr=0x2}]}, &(0x7f0000000540)=0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000680)=0x14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000002c0), &(0x7f00000006c0)=0x4) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000400)) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0xa}}, 0x20) shmdt(r1) [ 349.779105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.786035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:25:46 executing program 1: clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 07:25:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) close(r0) 07:25:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 350.085678] ptrace attach of "/root/syz-executor1"[8657] was attempted by "/root/syz-executor1"[8659] 07:25:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) [ 350.222306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:25:47 executing program 3: r0 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="957a88ca", 0x4, 0x0, 0x0, 0x0) 07:25:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') fchdir(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 07:25:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmmsg$unix(r1, &(0x7f0000005cc0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="be", 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x1) 07:25:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e22}, 0x1c) 07:25:48 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000100007031dfffd946fa2830020200a0003000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 07:25:48 executing program 3: r0 = memfd_create(&(0x7f0000000100)='-vmnet0\',^]$\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) 07:25:48 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b3593b0030670000000000000000000b0c000000000000ff020000000000000000000000000001000000000030907819a24607132d1c774a83eb416841045fba9cc01b421edc05fd635e38d1eae9197d84a529e96fb6dc1be14b0bfbacef417d52aa41ad7ee9bae9aef5c132f04a4c7df2264faf878407aa2120d001b287195595a69876c9333662854bf98e69c28898089094c5bef8f28e325f3a3fa3f5112c5f8279a8fcbd498047c713e87468ea638a369ec6a3660000"], 0x0) 07:25:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000003c0)={@dev={0xfe, 0x80, [], 0xa}, 0x0, r3}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="ded983957fd6b68d0549060948a67b8aa0509f258c9c0bf8e2ea96216dd36f580d0a2ff8"]) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f000026cfff)="c6", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0xb) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)="6d656d6f72792e63757272656e7400a41acf9655be386f93847e1e3c", 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8013, r5, 0x0) shutdown(r4, 0x1) 07:25:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x2ff) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:25:48 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000200)=0x32, 0x4) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="07015681a101000036010000caaa00003c0300008f0f00000000000000000000763917c8"], 0x24) [ 351.506618] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. 07:25:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x6, 0x4, 0x338d, 0x7, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000847f95), 0x0}, 0x18) 07:25:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {}, r1}}, 0x30) 07:25:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 07:25:48 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) 07:25:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000004780)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fstat(r1, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0xbc, 0x1, 0xadfe, 0x7fffffff}, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() clock_gettime(0x3, &(0x7f0000000400)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000003c0)={0x6000, 0x1000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000380)=0x10) sched_setparam(0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1800000000, 0x2, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r3, 0x1004000000016) write(r2, &(0x7f0000000440)="21efdba9b6f75539b510811bdd7bebc7d758451cf6cae36dd622956df39658bcd8720e5aedaece98579db517e46c97af5077e1daad165c485fc1f3fccc7b3a8760ce5c617c0598dde37c337e370eb073d4f22bc89bd213d172b1eb48820aee968c332ea18cf281786976fb963ffdd86e0050921a5f4ad2b50f48cae1d61bd582237592b591533d5d5015d84b14af0b4159ad01214d6cf923312ca68abdf8d030d6c02f5a8c512fce829b7461", 0xac) [ 351.950999] ptrace attach of "/root/syz-executor3"[8714] was attempted by "/root/syz-executor3"[8718] 07:25:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000180)=""/182, &(0x7f0000000100)=0xffffffffffffff82) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x203, 0x4) 07:25:49 executing program 4: clone(0x3102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xfdf2) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) connect$unix(r1, 0x0, 0x0) 07:25:49 executing program 1: getrlimit(0x0, 0x0) clone(0x400002100001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000002c0)='security.evm\x00', 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, 0x0, 0x60000, 0x0) 07:25:49 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="cb"], 0x1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 07:25:49 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x7000, 0x0, &(0x7f0000ff7000/0x7000)=nil) getgroups(0x1, &(0x7f0000000380)=[0xee00]) shmctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0xa10, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r3, 0x0) 07:25:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af24, &(0x7f0000000000)) 07:25:49 executing program 1: getrlimit(0x0, 0x0) clone(0x400002100001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000002c0)='security.evm\x00', 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, 0x0, 0x60000, 0x0) 07:25:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101000, 0x120) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) write(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/185, 0xb9}, {&(0x7f0000000e40)=""/8, 0x8}], 0x2}}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) msgget(0xffffffffffffffff, 0x210) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 07:25:50 executing program 4: semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{}], 0x1) semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000040)=""/25) 07:25:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000004780)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fstat(r1, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0xbc, 0x1, 0xadfe, 0x7fffffff}, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() clock_gettime(0x3, &(0x7f0000000400)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000003c0)={0x6000, 0x1000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000380)=0x10) sched_setparam(0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1800000000, 0x2, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r3, 0x1004000000016) write(r2, &(0x7f0000000440)="21efdba9b6f75539b510811bdd7bebc7d758451cf6cae36dd622956df39658bcd8720e5aedaece98579db517e46c97af5077e1daad165c485fc1f3fccc7b3a8760ce5c617c0598dde37c337e370eb073d4f22bc89bd213d172b1eb48820aee968c332ea18cf281786976fb963ffdd86e0050921a5f4ad2b50f48cae1d61bd582237592b591533d5d5015d84b14af0b4159ad01214d6cf923312ca68abdf8d030d6c02f5a8c512fce829b7461", 0xac) 07:25:50 executing program 1: getrlimit(0x0, 0x0) clone(0x400002100001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000002c0)='security.evm\x00', 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, 0x0, 0x60000, 0x0) 07:25:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) 07:25:51 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) shmget$private(0x0, 0x7000, 0x891, &(0x7f0000ff7000/0x7000)=nil) getgroups(0x1, &(0x7f0000000380)=[0xee00]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r2, 0x0) 07:25:52 executing program 1: getrlimit(0x0, 0x0) clone(0x400002100001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000002c0)='security.evm\x00', 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, 0x0, 0x60000, 0x0) 07:25:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 07:25:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) 07:25:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000004780)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fstat(r1, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0xbc, 0x1, 0xadfe, 0x7fffffff}, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() clock_gettime(0x3, &(0x7f0000000400)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000003c0)={0x6000, 0x1000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000380)=0x10) sched_setparam(0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1800000000, 0x2, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r3, 0x1004000000016) write(r2, &(0x7f0000000440)="21efdba9b6f75539b510811bdd7bebc7d758451cf6cae36dd622956df39658bcd8720e5aedaece98579db517e46c97af5077e1daad165c485fc1f3fccc7b3a8760ce5c617c0598dde37c337e370eb073d4f22bc89bd213d172b1eb48820aee968c332ea18cf281786976fb963ffdd86e0050921a5f4ad2b50f48cae1d61bd582237592b591533d5d5015d84b14af0b4159ad01214d6cf923312ca68abdf8d030d6c02f5a8c512fce829b7461", 0xac) [ 367.292523] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 367.304034] clocksource: 'acpi_pm' wd_now: 5b6a58 wd_last: 969512 mask: ffffff [ 367.313572] clocksource: 'tsc' cs_now: ca584c971f cs_last: c5e7b97910 mask: ffffffffffffffff [ 367.324264] tsc: Marking TSC unstable due to clocksource watchdog 07:26:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 07:26:04 executing program 1: 07:26:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x2}) 07:26:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000004780)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fstat(r1, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0xbc, 0x1, 0xadfe, 0x7fffffff}, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() clock_gettime(0x3, &(0x7f0000000400)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000003c0)={0x6000, 0x1000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000380)=0x10) sched_setparam(0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1800000000, 0x2, 0x8}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r3, 0x1004000000016) write(r2, &(0x7f0000000440)="21efdba9b6f75539b510811bdd7bebc7d758451cf6cae36dd622956df39658bcd8720e5aedaece98579db517e46c97af5077e1daad165c485fc1f3fccc7b3a8760ce5c617c0598dde37c337e370eb073d4f22bc89bd213d172b1eb48820aee968c332ea18cf281786976fb963ffdd86e0050921a5f4ad2b50f48cae1d61bd582237592b591533d5d5015d84b14af0b4159ad01214d6cf923312ca68abdf8d030d6c02f5a8c512fce829b7461", 0xac) [ 367.342736] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 367.351672] sched_clock: Marking unstable (367401072445, -58360330)<-(367462069715, -119356545) [ 367.366562] clocksource: Switched to clocksource acpi_pm 07:26:04 executing program 0: shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) r0 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4002) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa5e0936e7f46bf5c) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000006c0)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000400)) getpid() shmdt(r0) 07:26:04 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) io_setup(0xc0, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x3}]) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) r3 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) dup2(r3, r0) 07:26:04 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4203, r0, 0x0, 0x707000) 07:26:04 executing program 3: 07:26:04 executing program 4: 07:26:05 executing program 5: 07:26:05 executing program 3: 07:26:05 executing program 4: 07:26:05 executing program 1: 07:26:05 executing program 0: 07:26:05 executing program 2: 07:26:05 executing program 5: 07:26:05 executing program 3: 07:26:05 executing program 4: 07:26:05 executing program 1: 07:26:06 executing program 5: 07:26:06 executing program 0: 07:26:06 executing program 4: 07:26:06 executing program 2: 07:26:06 executing program 3: 07:26:06 executing program 1: 07:26:06 executing program 5: 07:26:06 executing program 0: 07:26:06 executing program 4: 07:26:06 executing program 1: 07:26:06 executing program 3: 07:26:06 executing program 2: 07:26:07 executing program 0: 07:26:07 executing program 5: 07:26:07 executing program 4: 07:26:07 executing program 1: 07:26:07 executing program 2: 07:26:07 executing program 3: 07:26:07 executing program 0: 07:26:07 executing program 5: 07:26:07 executing program 1: 07:26:07 executing program 2: 07:26:07 executing program 4: 07:26:07 executing program 3: 07:26:07 executing program 0: 07:26:08 executing program 5: 07:26:08 executing program 2: 07:26:08 executing program 4: 07:26:08 executing program 1: 07:26:08 executing program 5: 07:26:08 executing program 3: 07:26:08 executing program 0: 07:26:08 executing program 1: 07:26:08 executing program 2: 07:26:08 executing program 3: 07:26:08 executing program 4: 07:26:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="060000000000000000cd71"]}) 07:26:09 executing program 0: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x3, 0x182) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x2, 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x3d, &(0x7f0000164ff0)={0x0, &(0x7f0000000080)}, 0x8) r4 = syz_open_dev$admmidi(&(0x7f00000012c0)='/dev/admmidi#\x00', 0x2, 0x150d1c6b1b09fa8f) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300)={0x0, 0x7fffffff}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001740)={r5, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x2}}, 0x100}, 0x88) rt_sigprocmask(0x5, &(0x7f0000000580)={0x2}, &(0x7f0000000480), 0x8) recvfrom$unix(r4, &(0x7f0000000300)=""/121, 0x79, 0x10002, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000240)={'veth1_to_team\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) sendto$inet(r4, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000001640)) fcntl$setsig(r2, 0xa, 0x6) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001340)=@broute={'broute\x00', 0x20, 0x3, 0x92e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f00000003c0), &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff060000000900000008000000001569705f76746930000000000000000000627269646765300000000000000000006272696467655f736c6176655f31000074eb41000000400000000000b277df9c02eff96b00000000ffffffffffff00ff00ffffffaaaaaaaaaabbffffffffff4b807eff000070000000b8000000280100006c6f67000000000000000000000000000000000000000000000000000000000024000000d16535ee7e72fd3aab975c835d31bfbd34dc65003ad790d60285c60e945288000200666c6f670000000000000000000000000000000000000000000000000000004c0000000100008000000100000000001f046064bb0767a8005c1d5b5b14aa5d040ea366d92341f69985000042a4b84ff185c7d7283e35d325aaa4d59282077ab69fa687aaae7649aa8410b8443d1fa71cbb1edc7300000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000500000004000000886362637366300000000000000000000000697036746e6c300000000000fe00000079616d30000000000000000000000000766c616e30000004000000000000000000000000000000ff00ff00ffaaaaaaaaaabb00ff00ff00000000d802000028030000500300636f6e6e6279746573ddfd118ecc8da0d3000000000000000000000000000000180000000200000000000000ff03000000000000020000000000000062706600000000000000000000fc1c0c00000000000000000000000000000000003c0008020000340000000000020009000000ba0007083bf8fffffe0e00070400000038ff01030900000040007124db0000000800018009000000040005f807000000ed0568010300000008000806bc850000030000080500000008000101040000000000000800000800ff7f8007196100001f00b20608000000e0fff54e05000000070008f90100000000000000000100020001ff40000000ae0d5305060000000200ff2803000000070001035ca9ffff0700041f8100000005002904050000000500fc00dd0300003b727f0005000000030081080000010081000101000000000001030380000000fbff010305000000030000fb0400000007002108ff080000000800cb433000000000007f06010400000200ff00ffff00083ed8b702020000000600b09f01000000e600070008000001040081000700000080000705000000000500ca073f0000008000090f0300000000008177080000000080090801000000070000010800316600010809000000000700090205000000000400000063620801040000000300ff07000000000000011fff0000020200020509b5b84222db3615f2370f686ced9e808c0000003f00c1ff03000000060005008d3b0000000003069a00000001003f07fdffffff0104010309000000b10002061600000001000002070000000500060504000000a80300ff000000000900040101000080fcff01070400000001000000726564697265637400000000000000000000000000000000000000000000000004000000ffffffff7265b4ca8bfc637400000000000000000000000000000000000000000004000000feffffff4e46515545554500000000000000000000000000000000000000000000000000040000000900000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff00000000956cb57b869eb9fa2d8d50cd324b534dd3a90c77578631b18f80a2900ad91e7829cde0dcd1e3dbd61e087ca74ba4e6fc37b1f2fdebde320bae0d0f842c6b47850b987355241fcb3d72780eb85f13e24b38ae4a8294b01eae765b1c4388bd851da3ddb1658917cc882457972794ebe38a6cd086eb00d7dfc17872c5a2f0cc36e3d23b1c7b34eafbdc17ffa912058201026fd76e6ffc63f6f7c679907248647ae767cc1c15c498bff1a6f7d938f4b4da2636d1af40694d0ca91e53e4ed651263b84f8898804b8cbe2a93441343143a868ce4c249c9811ed60af2a4eb92595f5e769dc04c647c9152b1aeaa3c8d48a39917777c4b5d1f26b9b02c0e6d042f422961822dfee7f4a7c4cf0edf5d7f40ac547398b60d2a54aeac8c2bca5add084a623d7624543ffa62ecdf07710d6ce4a51d3f4040bdc89603e8a08f7770039735fb27a7f4c4cf385d72fdcb9fae811f777000ee0bb2bfb20b9bc0e2fa09d5bb51c4a8d163a1002a283ead2e5b55b8ffd157a15af1bed10d24c89ca32f46411cda916b06cf8fe709b53801c49529c97fd7242deeca5de8a296617c78dace8e692c1d193dab760534060778cf7a6d3fdda429853d91fd8959972e98e1c60e81cb9dfeb13b737994dbd009085f44ac3413000000000000000000ed7c369b44872e968a2da172dba4b113e34e1f29ceaaef78415a508b8969048e4617a50433f06a70e7aacc9837802511d38cd133d599a6fe9907054e479dd09d10dedc9132283c700be8dfa8b49a6cf40272fcf3ca164156dc987e4d8a914144267fdf5766d54e7886c1dcd183aad555faca3800e1349fa4e2183aae01f6f5ed32cf776e696e4f08946458648eff45e46e351b78afc2908dae25c40c7168522af824f602a5d56ab50ea78bb6dd9c1037b9c1b4c42220926478ecdff4ec256375c0429a13c4875aa6773a8978478fdbdce5d693364b04b437f3a4d2c2c65504f3e14c06628fd3e887850e1ec48fb658284dafec9b6a25b34cac5a5c1e12a7b51f3199e93b4808000000000000007bbbfad5d9b9709856f2175522272b423309f0a7e13f066f70276535a96cbf3d1aa58a03040909e263b8086aaa986c81d4de3a23db484059c3045175d2e49c5be4383370ba0e4186788acdd28a888b7f8001b5af44660d4801769fc5f138e918228f7e8454512cba7040399e46a837b3dfbcf3bd9991a2144181fe23bb15936bdf693cc89fa8641e2609080a23da3d6015891a79120dfae95b9c00b9c86f7457b56b363442f2d77f4b83285c8db0147a7c2504a0db7f8a7da636c17523641e121f2958dc36d53628b655b43bf99695e638b43e5b1150ad6561b18b7c2b97ae0eb3e99bbf2e91babf1871916cb45a3a698e75410d9d91e34dfd6a8afcfe5a355acde87afc6fee3c3a2732c35bb90640704f26822af0294c309545df2493a59ff174507208bcc19393777ecc7385c042cffe026dcb410000000000"]}, 0x9a6) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x1, 0x2009, 0x20000000000001, 0x1, r4}, 0x2c) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x27) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), 0x0}, 0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ustat(0x1, &(0x7f0000000200)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000000), 0x0}, 0x18) 07:26:09 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x3}}) 07:26:09 executing program 1: 07:26:09 executing program 4: 07:26:09 executing program 3: 07:26:09 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x5}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) close(r1) [ 372.484724] kernel msg: ebtables bug: please report to author: entries_size too small 07:26:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:26:09 executing program 2: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/55, 0x37}], 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x400000000000) [ 372.720801] kernel msg: ebtables bug: please report to author: entries_size too small 07:26:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x3, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4002) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000900)=ANY=[@ANYRES32=r2], 0x0) accept4$packet(r2, 0x0, &(0x7f0000000c00), 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000400)) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, 0x0, 0x0) shmdt(r1) 07:26:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket(0x40000000015, 0x805, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 07:26:10 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xb, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x85ffffff, 0x7, 0x61, 0x0, 0x30}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c8c1931769dc6177c1c15bf43aaf", 0x0}, 0x28) 07:26:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 07:26:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x19, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000865aa30b0bd737e53470a7040f3cbb56d4cc9b7dfe00"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r1, r0, 0x0) 07:26:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 07:26:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) r0 = shmget(0x3, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4002) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000900)=ANY=[@ANYRES32=r2], 0x0) accept4$packet(r2, 0x0, &(0x7f0000000c00), 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000400)) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, 0x0, 0x0) shmdt(r1) 07:26:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 373.578653] binder: 9003:9006 ioctl c0306201 0 returned -14 [ 373.645892] binder: 9003:9009 unknown command -2046820352 [ 373.652094] binder: 9003:9009 ioctl c0306201 2000dfd0 returned -22 07:26:10 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000180)) r2 = shmget$private(0x0, 0x7000, 0x891, &(0x7f0000ff7000/0x7000)=nil) getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)) getgroups(0x1, &(0x7f0000000380)=[0xee00]) shmctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0xa10, 0x6}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/15) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xe) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000240)) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r4, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)) 07:26:10 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) 07:26:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000800)="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", 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)='D', 0x1}], 0x1, 0x81806) sendfile(r0, r1, 0x0, 0x20020102000004) 07:26:11 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x140c2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r0, 0x11, 0x0, 0x10000) 07:26:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1c, 0xffffff1f, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 07:26:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002c00ffff003e000000faff00019e0000764529efa68d42e0c0f6068808ec48433f17cd6f66962ed2d8f1771db4b373e85fe44e0ebdf9acdcbf0026d913c145ee901f5cf28322dd879e0c0031ed2b9a94f5cca9b4d49785ef8113e2219e9a554c4a0f58b5289af780e1c6394e2aac2f06f2f94e207cafb68cfc1cab12c1873d102742"], 0x1}}, 0x0) 07:26:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x88) 07:26:12 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000000100)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 07:26:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sendfile(r1, r2, 0x0, 0x10000000000443) 07:26:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) close(r0) 07:26:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="ee", 0x1}], 0x1}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000080), 0x1ab, 0x0, &(0x7f000000a240)={0x0, r2+10000000}) 07:26:12 executing program 0: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c343f5c4c27d794e0066420fe2e3143e0f11101042019dccd3196f") msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) 07:26:13 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000180)) r2 = shmget$private(0x0, 0x7000, 0x891, &(0x7f0000ff7000/0x7000)=nil) getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)) getgroups(0x1, &(0x7f0000000380)=[0xee00]) shmctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0xa10, 0x6}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/15) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xe) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000240)) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r4, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)) 07:26:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x400000200000002e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x104) 07:26:13 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x2, r0, &(0x7f00000000c0), 0x707000) 07:26:13 executing program 4: r0 = socket$kcm(0xa, 0x805, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x3}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)="cf", 0x1}], 0x1}, 0x0) 07:26:13 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x1000000000003) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000180)) 07:26:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000180)) 07:26:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 07:26:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x4000000000000003}) 07:26:14 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_matches\x00') sendfile(r1, r2, 0x0, 0x10000000000443) 07:26:14 executing program 0: 07:26:14 executing program 0: 07:26:14 executing program 2: 07:26:15 executing program 5: 07:26:15 executing program 4: 07:26:15 executing program 3: 07:26:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0xffffffff) 07:26:15 executing program 2: 07:26:15 executing program 1: 07:26:15 executing program 3: 07:26:15 executing program 5: 07:26:15 executing program 2: 07:26:15 executing program 1: 07:26:15 executing program 4: 07:26:15 executing program 0: 07:26:16 executing program 3: 07:26:16 executing program 5: 07:26:16 executing program 2: 07:26:16 executing program 4: 07:26:16 executing program 0: 07:26:16 executing program 1: 07:26:16 executing program 3: 07:26:16 executing program 1: 07:26:16 executing program 4: 07:26:16 executing program 5: 07:26:16 executing program 2: 07:26:16 executing program 0: 07:26:17 executing program 3: 07:26:17 executing program 0: 07:26:17 executing program 4: 07:26:17 executing program 1: 07:26:17 executing program 5: 07:26:17 executing program 3: 07:26:17 executing program 2: 07:26:17 executing program 4: 07:26:17 executing program 1: 07:26:17 executing program 0: 07:26:17 executing program 5: 07:26:18 executing program 3: 07:26:18 executing program 2: 07:26:18 executing program 4: 07:26:18 executing program 1: 07:26:18 executing program 0: 07:26:18 executing program 5: 07:26:18 executing program 2: 07:26:18 executing program 3: 07:26:18 executing program 1: 07:26:18 executing program 4: 07:26:18 executing program 5: 07:26:18 executing program 2: 07:26:19 executing program 1: 07:26:19 executing program 3: 07:26:19 executing program 0: 07:26:19 executing program 4: 07:26:19 executing program 2: 07:26:19 executing program 3: 07:26:19 executing program 4: 07:26:19 executing program 5: 07:26:19 executing program 1: 07:26:19 executing program 0: 07:26:19 executing program 2: 07:26:19 executing program 1: 07:26:19 executing program 3: 07:26:20 executing program 5: 07:26:20 executing program 4: 07:26:20 executing program 0: 07:26:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe(0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 07:26:20 executing program 0: 07:26:20 executing program 3: 07:26:20 executing program 5: 07:26:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:20 executing program 0: 07:26:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe(0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 07:26:21 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) pipe(&(0x7f00000000c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040), 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x60020}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) 07:26:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x0, @remote}, 0x0, {0x2, 0x0, @multicast2}, 'team_slave_1\x00'}) 07:26:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x930000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 07:26:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 07:26:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe(0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 07:26:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2000000004) write(r0, &(0x7f0000000000)="29000000140003b7ff000000040860eb0100100006a40ec58d070054dc17fbffff0100002a00f3ff09", 0x29) 07:26:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x3, {{0x2, 0x0, @dev}}}, 0x88) 07:26:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) 07:26:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x15, 0x10, 0xc6}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), 0x0}, 0x20) 07:26:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe(0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 07:26:22 executing program 0: r0 = socket(0x10, 0x100000003, 0x0) socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001a0001021329888ddc00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 07:26:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1) 07:26:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) 07:26:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:26:23 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) 07:26:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/16, &(0x7f00003d3000)=0x10) 07:26:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:26:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:26:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x48207) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000000000400) 07:26:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) 07:26:23 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 07:26:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1) 07:26:24 executing program 2: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:26:24 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x7b9b, 0x3e}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 07:26:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:26:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 07:26:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)) 07:26:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) 07:26:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 07:26:24 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 07:26:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="180000000000000000000000003bfe00650000002f0000000c000000000000009500000000000000"], 0x0, 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) r1 = socket(0x10, 0x40000000003, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) 07:26:25 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0), 0x1000) 07:26:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {}, {0x2, 0x0, @broadcast}}) 07:26:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 07:26:25 executing program 0: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0xffc, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 07:26:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28021) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x10000}) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e) 07:26:25 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') preadv(r0, &(0x7f0000fc5fc0)=[{&(0x7f00003b0000)=""/4096, 0x1000}], 0x1, 0x68) 07:26:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote}, 0xc) 07:26:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000039c0)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="43f0ffca65178e5a3584527f5c5f9370", 0x10}], 0x1}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1}}], 0x1, 0x0, 0x0) 07:26:25 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0x707000) 07:26:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1ff, 0x1000000000000000, 0x0, 0x0, 0x12, 0x4000000000000, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77a00f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7", [0x1]}) 07:26:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x28, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) 07:26:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x2a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='bond0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x203, 0x0) [ 388.905567] ================================================================== [ 388.911720] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x4c0/0x2700 [ 388.911720] CPU: 0 PID: 9455 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #97 [ 388.911720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.911720] Call Trace: [ 388.911720] dump_stack+0x32d/0x480 [ 388.911720] ? _copy_to_iter+0x4c0/0x2700 [ 388.945330] kmsan_report+0x12c/0x290 [ 388.945330] kmsan_internal_check_memory+0x32a/0xa50 07:26:26 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1b) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x7b9b, 0x3e}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) [ 388.945330] kmsan_copy_to_user+0x78/0xd0 [ 388.945330] _copy_to_iter+0x4c0/0x2700 [ 388.945330] skb_copy_datagram_iter+0x4e2/0x1070 [ 388.945330] netlink_recvmsg+0x6f9/0x19d0 [ 388.945330] ? netlink_sendmsg+0x1440/0x1440 [ 388.945330] sock_read_iter+0x45b/0x4e0 [ 388.981132] ? kernel_sock_ip_overhead+0x340/0x340 [ 388.981132] do_iter_readv_writev+0x822/0xac0 [ 388.981132] ? kernel_sock_ip_overhead+0x340/0x340 [ 388.981132] do_iter_read+0x2fe/0xe00 [ 388.981132] ? import_iovec+0x41f/0x680 [ 388.981132] do_readv+0x2a7/0x650 [ 388.981132] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 388.981132] ? prepare_exit_to_usermode+0x182/0x4c0 [ 388.981132] __se_sys_readv+0x9b/0xb0 [ 388.981132] __x64_sys_readv+0x4a/0x70 [ 388.981132] do_syscall_64+0xcf/0x110 [ 388.981132] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.981132] RIP: 0033:0x457569 07:26:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) socket$kcm(0x2, 0x3, 0x2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @rand_addr}}, {0xa, 0x0, 0x0, @local}}}, 0x48) [ 388.981132] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.043637] ptrace attach of "/root/syz-executor2"[9457] was attempted by "/root/syz-executor2"[9458] [ 388.981132] RSP: 002b:00007fc3231b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 388.981132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 388.981132] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000003 [ 388.981132] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.981132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3231ba6d4 07:26:26 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003640)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000004740), &(0x7f0000004780)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x7000, 0x891, &(0x7f0000ff7000/0x7000)=nil) getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)) getgroups(0x1, &(0x7f0000000380)=[0xee00]) shmctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, 0xa10, 0x6}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8000000000000000, 0x811, r3, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000540)) [ 388.981132] R13: 00000000004c37f6 R14: 00000000004d5e48 R15: 00000000ffffffff [ 388.981132] kmsan_internal_chain_origin+0x13d/0x240 [ 388.981132] kmsan_memcpy_memmove_metadata+0x1a9/0xf70 [ 388.981132] kmsan_memcpy_metadata+0xb/0x10 [ 388.981132] __msan_memcpy+0x61/0x70 [ 388.981132] nla_put+0x20a/0x2d0 [ 388.981132] nlmsg_populate_fdb_fill+0x444/0x810 [ 388.981132] ndo_dflt_fdb_dump+0x73a/0x960 [ 388.981132] rtnl_fdb_dump+0x1318/0x1cb0 [ 388.981132] netlink_dump+0xc79/0x1c90 [ 388.981132] __netlink_dump_start+0x10c4/0x11d0 [ 388.981132] rtnetlink_rcv_msg+0x141b/0x1540 [ 388.981132] netlink_rcv_skb+0x394/0x640 [ 388.981132] rtnetlink_rcv+0x50/0x60 [ 388.981132] netlink_unicast+0x1699/0x1740 [ 388.981132] netlink_sendmsg+0x13c7/0x1440 [ 388.981132] ___sys_sendmsg+0xdbc/0x11d0 [ 388.981132] __se_sys_sendmsg+0x305/0x460 [ 388.981132] __x64_sys_sendmsg+0x4a/0x70 [ 388.981132] do_syscall_64+0xcf/0x110 [ 388.981132] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.981132] [ 388.981132] Uninit was created at: [ 388.981132] kmsan_internal_poison_shadow+0x6d/0x130 [ 388.981132] kmsan_kmalloc+0xa1/0x100 [ 388.981132] __kmalloc+0x14c/0x4d0 [ 388.981132] __dev_mc_add+0x357/0x8a0 [ 388.981132] dev_mc_add+0x6d/0x80 [ 388.981132] igmp_group_added+0x4d4/0xb80 [ 388.981132] __ip_mc_inc_group+0xea9/0xf70 [ 388.981132] ip_mc_up+0x1c3/0x400 [ 388.981132] inetdev_event+0x1d03/0x1d80 [ 388.981132] raw_notifier_call_chain+0x13d/0x240 [ 388.981132] __dev_notify_flags+0x3da/0x860 [ 388.981132] dev_change_flags+0x1ac/0x230 [ 388.981132] do_setlink+0x165f/0x5ea0 [ 388.981132] rtnl_newlink+0x2ad7/0x35a0 [ 388.981132] rtnetlink_rcv_msg+0x1148/0x1540 [ 388.981132] netlink_rcv_skb+0x394/0x640 [ 388.981132] rtnetlink_rcv+0x50/0x60 [ 388.981132] netlink_unicast+0x1699/0x1740 [ 388.981132] netlink_sendmsg+0x13c7/0x1440 [ 388.981132] ___sys_sendmsg+0xdbc/0x11d0 [ 388.981132] __se_sys_sendmsg+0x305/0x460 [ 388.981132] __x64_sys_sendmsg+0x4a/0x70 [ 388.981132] do_syscall_64+0xcf/0x110 [ 388.981132] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.981132] [ 388.981132] Bytes 36-37 of 3744 are uninitialized [ 388.981132] Memory access of size 3744 starts at ffff8881783c0000 [ 388.981132] Data copied to user address 0000000020000780 [ 388.981132] ================================================================== [ 388.981132] Disabling lock debugging due to kernel taint [ 388.981132] Kernel panic - not syncing: panic_on_warn set ... [ 388.981132] CPU: 0 PID: 9455 Comm: syz-executor0 Tainted: G B 4.20.0-rc3+ #97 [ 388.981132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.981132] Call Trace: [ 388.981132] dump_stack+0x32d/0x480 [ 388.981132] panic+0x624/0xc08 [ 388.981132] kmsan_report+0x28a/0x290 [ 388.981132] kmsan_internal_check_memory+0x32a/0xa50 [ 388.981132] kmsan_copy_to_user+0x78/0xd0 [ 388.981132] _copy_to_iter+0x4c0/0x2700 [ 388.981132] skb_copy_datagram_iter+0x4e2/0x1070 [ 388.981132] netlink_recvmsg+0x6f9/0x19d0 [ 388.981132] ? netlink_sendmsg+0x1440/0x1440 [ 388.981132] sock_read_iter+0x45b/0x4e0 [ 388.981132] ? kernel_sock_ip_overhead+0x340/0x340 [ 388.981132] do_iter_readv_writev+0x822/0xac0 [ 388.981132] ? kernel_sock_ip_overhead+0x340/0x340 [ 388.981132] do_iter_read+0x2fe/0xe00 [ 388.981132] ? import_iovec+0x41f/0x680 [ 388.981132] do_readv+0x2a7/0x650 [ 388.981132] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 388.981132] ? prepare_exit_to_usermode+0x182/0x4c0 [ 388.981132] __se_sys_readv+0x9b/0xb0 [ 388.981132] __x64_sys_readv+0x4a/0x70 [ 388.981132] do_syscall_64+0xcf/0x110 [ 388.981132] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.981132] RIP: 0033:0x457569 [ 388.981132] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.981132] RSP: 002b:00007fc3231b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 388.981132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 388.981132] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000003 [ 388.981132] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.981132] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3231ba6d4 [ 388.981132] R13: 00000000004c37f6 R14: 00000000004d5e48 R15: 00000000ffffffff [ 388.981132] Kernel Offset: disabled [ 388.981132] Rebooting in 86400 seconds..