[ 50.410392] audit: type=1800 audit(1545315065.460:26): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 51.999858] kauditd_printk_skb: 2 callbacks suppressed [ 51.999887] audit: type=1800 audit(1545315067.050:29): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 52.024648] audit: type=1800 audit(1545315067.070:30): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.136' (ECDSA) to the list of known hosts. 2018/12/20 14:11:22 fuzzer started 2018/12/20 14:11:26 dialing manager at 10.128.0.26:46613 2018/12/20 14:11:26 syscalls: 1 2018/12/20 14:11:26 code coverage: enabled 2018/12/20 14:11:26 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 14:11:26 setuid sandbox: enabled 2018/12/20 14:11:26 namespace sandbox: enabled 2018/12/20 14:11:26 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 14:11:26 fault injection: enabled 2018/12/20 14:11:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 14:11:26 net packet injection: enabled 2018/12/20 14:11:26 net device setup: enabled 14:11:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) syzkaller login: [ 91.209638] IPVS: ftp: loaded support on port[0] = 21 [ 92.594118] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.600673] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.608946] device bridge_slave_0 entered promiscuous mode [ 92.689114] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.695829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.704111] device bridge_slave_1 entered promiscuous mode [ 92.784381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.865868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.119779] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.204489] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.288334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.295420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.377693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.384691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.636411] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.645163] team0: Port device team_slave_0 added [ 93.724798] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.733424] team0: Port device team_slave_1 added [ 93.814976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.827410] ip (6513) used greatest stack depth: 54048 bytes left [ 93.910020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.993873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.001528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.011192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.097976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.105637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.114864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:11:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}, {{@in6=@local, 0x0, 0x32}}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f0000183f92)={@random="cd39f2081b0b", @random="9a8c87bcb5a4", [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @loopback}}}}}}}, 0x0) [ 95.087185] IPVS: ftp: loaded support on port[0] = 21 [ 95.399939] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.406691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.413931] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.420482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.429508] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 95.436095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.289253] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.295890] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.304102] device bridge_slave_0 entered promiscuous mode [ 97.486306] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.492920] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.501103] device bridge_slave_1 entered promiscuous mode [ 97.639559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 97.807796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 98.180466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 98.336951] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 99.150241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 99.159087] team0: Port device team_slave_0 added [ 99.334375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 99.343069] team0: Port device team_slave_1 added [ 99.506648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 14:11:54 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='6.::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 99.662757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.820760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 99.828892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.838078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.040669] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 100.048378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.057557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.189788] IPVS: ftp: loaded support on port[0] = 21 [ 101.382960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.792871] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.799424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.806590] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.813287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.822602] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 101.829131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.014716] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 102.599512] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 102.605895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.613866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.990861] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.997597] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.005931] device bridge_slave_0 entered promiscuous mode [ 103.178020] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.184671] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.192935] device bridge_slave_1 entered promiscuous mode [ 103.221711] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.370151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 103.525045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 103.933815] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 104.106021] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 104.331417] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 104.338504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.502528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 104.509498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.949280] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 104.958056] team0: Port device team_slave_0 added [ 105.142760] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 105.151321] team0: Port device team_slave_1 added [ 105.296185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 105.303318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.312394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.484771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 105.491887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.500741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.700719] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 105.708516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.717606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.913577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 105.921168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.930213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.154462] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 14:12:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x4) 14:12:02 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) 14:12:02 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) 14:12:02 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) [ 107.935246] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.941895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.949018] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.955609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.964919] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.971407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 14:12:03 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) [ 108.172583] IPVS: ftp: loaded support on port[0] = 21 14:12:03 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) 14:12:03 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) 14:12:03 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) 14:12:04 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) [ 109.067655] 8021q: adding VLAN 0 to HW filter on device bond0 14:12:04 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) [ 109.840337] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.521981] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.528295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.536158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.188701] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.414799] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.421416] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.429862] device bridge_slave_0 entered promiscuous mode [ 111.563790] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.570324] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.578583] device bridge_slave_1 entered promiscuous mode [ 111.764156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 111.948827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 112.456598] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 112.662969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 112.826679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 112.835172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.014153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 113.021127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.542743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 113.551250] team0: Port device team_slave_0 added [ 113.743493] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 113.752236] team0: Port device team_slave_1 added [ 113.945823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 113.953459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.962412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.171277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 114.178356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.187218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.359860] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 114.367894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.377023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.588655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 114.597176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.606086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.633088] 8021q: adding VLAN 0 to HW filter on device bond0 14:12:10 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}, {{@in6=@local, 0x0, 0x32}}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f0000183f92)={@random="cd39f2081b0b", @random="9a8c87bcb5a4", [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @loopback}}}}}}}, 0x0) [ 115.291662] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 115.796862] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 115.803231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.811137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.188876] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.248590] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.255192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.262372] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.268905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.280228] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 116.812535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.622846] libceph: parse_ips bad ip '6.::d' 14:12:14 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='6.::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 119.749348] libceph: parse_ips bad ip '6.::d' [ 120.654729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.822892] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 120.987922] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 120.994150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.001712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.171901] 8021q: adding VLAN 0 to HW filter on device team0 14:12:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x4) 14:12:17 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x33c) sendmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@tipc=@id, 0x80, 0x0}, 0x0) 14:12:17 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 14:12:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}, {{@in6=@local, 0x0, 0x32}}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f0000183f92)={@random="cd39f2081b0b", @random="9a8c87bcb5a4", [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @loopback}}}}}}}, 0x0) 14:12:17 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='6.::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 14:12:17 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x5, 0x1, 0x0, 0x0, [{r0, 0x0, 0x9}]}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x43, "5b38dc63e6208d34e3eee25024835923920e6718c4c12bd16fae79f104d9e6493cafd5cc6ec271616303bd3304c7eb0ddeca2a2fc289ce6b92c278088bec999cb38277"}, &(0x7f0000000140)=0x4b) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x1, 0x100000001, 0x10001}, &(0x7f00000001c0)=0x10) getdents(r0, &(0x7f0000000200)=""/101, 0x65) fcntl$addseals(r0, 0x409, 0xd) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000280)={0x0, {0x6e, 0xffff}}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x6bd9, @loopback}, 0x1c) fgetxattr(r0, &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)=""/230, 0xe6) r3 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="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", 0x1000, 0x0) keyctl$invalidate(0x15, r3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000001580)={r2, 0x6}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r0, 0x0, 0xcd, 0x7b, &(0x7f00000015c0)="5bbdf018f792bd6655d5f49a584429644f2ed4eddb94c96b6824c22268fe0a0f2e74a757e6fb82825d03ffe08f2f279e5667dc2bc9ef42a72cd878038a7ad25834330e31ac0b795f3677ed9a9151a5a76187240396535fb3d3bf0fd23c3ec76a4dffbefe2e27cb30aa808600eeb543466369fa8e1c1d5a0a2f784702a014891c4bb57e1a5906969eebfbc2d831082b51bc7918ea96869c34369e0cf992c3e3e490329c504dbe7487076888d94679ed23706c8dffe9bfff40f27b2f16215c5e7cd2ac1c780a201bf1c6fc2b59d0", &(0x7f00000016c0)=""/123, 0x6c}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x14) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0, 0x0}, &(0x7f00000017c0)=0xc) setfsgid(r6) mmap$xdp(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x16c052, r0, 0x80000000) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001800)=r5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000001840)='/dev/audio\x00', 0xa24404e31c4e8044, 0x0) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000e4c000/0x18000)=nil, &(0x7f0000001900)=[@text64={0x40, &(0x7f0000001880)="67646766470f3a60b4cdd389000000660fe48209000000d1ab9300000066b89c000f00d066b8dd000f00d0b9800000c00f3235004000000f30c421916cd9660f38816413580f09f3640f06", 0x4b}], 0x1, 0x14, &(0x7f0000001940)=[@dstype0={0x6, 0xa}], 0x1) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000001980)='syz') open_by_handle_at(r4, &(0x7f00000019c0)={0x1008, 0x8, "d7e4b3f8b44d071966c52140dea74c442e23e9eb20d57f53c64cce49ca704adf69b1a5d49697722ec0572347c3eeccbe3c1067db328d9f866662c8b249b5b85bb3cb0a6c742264595df136ab284c124b32434a3c66992e80571f7f7f262dc5eaaa44b1e700d1057fa725fd668985e5f8a5daf3a47f800419a92a80e2a5a7bb84302af29320242440d7fefd7b72e99eeac72c53901f4912c5de895cb9384cf3dba5f5a8b329dffcb7dde4860e165af03e13b3f70527653bbf7cf39751df13e2746787a852246d1585745e85700db220f187e943114cba6b8ab5e9ab9c38bdff3ab8b0fe9ef8d1a5267ab484dd94a4c55ee4be0309e5f795ce3d3e90fe3ed1ee5ab901e51e86b800e13f405f98c4339550e209ecde4a70c71f04fd4cbd741546583ec1e6cdd0b0071ba4140a43d0d2d9d3b8b02b92f80603002daa172387b56afcd45d6cc558053abbff7183e3a310b2e3b5832075e8f1eb199e42902cba9a9d6e5e529ab1d919b6d24508683181dc6007413817b059948c8fd1d2daab7385d695cb349c0cc6eef66237ea6e1cea37e2887c0ff29cdc3c3867c1a74c4e1d35eb9a9e249cc7493cfa855610a3eed963017335f1c973d7326e3a57db92d2b9843d55a0cf76c30e8cb2676887a7565ab2f3af3331db71b9732c1cf0336b183902def400eea43cf53dab1852a6b68f6b513f8ce461caaf260857a3b1074881c9d3d7e926c14812dcc848bf764c7677073a35eb8839cc1f01fdfbb25b36eddb40c820ed424ead45c1af231a78428235fe9efbba19154f6b73382d8d79b6780589a8b6a9217e4ebebeccb62573d2deb8999a6bcace6ac7d911bb2a20140097cb7e311a8ac7687bd5c3ef0b51dec0826fd407dfcc92483eba86586d7d1e145133a2cbbcc9b8e60dae48cbc24ce6f5199d9a404312a5330fcf9a65755cc5ff9cb8d2a3929553867c66be41969658f752749b2f801edde961036077bd52a5d690ca1b9f4eabb8e6d8c945dcb2165f55421c579e7de32f9474f64412a65c92e8694cfd153723d926c4fc96deb4031bedaede02d7eca520547ec38507028aa2af5fefdc5f2ce5828c15f48e22bf348838165fdcba11eb9c1ec66f771788c5b20d9e558be9af9c72308bf08d16837010e0a6fb8d61baa8d78560faff2d3ad90323dfbbf2fdd8b36a17b4473c185fa842fd940ca94f079a67258733b5549bf46404d01c8988f524ccb4894e92119d6a6173995bfe1381fd93b446c5468a0f0f4e2a7df6851a5f1d8d79150f6b8e741291295822067b9e7479e37805b54ccbf0f6fe18a153043c186f12f868d4d42074ce48e33fc98486471974fc6458a95a34d8e9240d0f399ede71779a3a1c1749035b0e0711a77ba68fe4d097315ed16b83e83a01b5a22e344917cca03be43b75de4601055384df9eb333ccc2a138ce4575aa673ccb14ee728bcabd1bc800808d599b469d3952ddd261d64b00ec26fd5c17101b0bcfe31a0fb2ba13e2d4fc2a7ff04c5a63f8087e99e2ce4da24564b93374a37cf9e0fd6c55bb967bc25537ab468d7fbab34a0c328abd1535c7da4f94bb10af8b7f5de081382d5baf3764fcfd131141da7bd856bf737d5d98d38a4c8ec3f9a14f4fda241f01c34c41f9087569a48751d1607c9580d57832dce48847991cedc80a2fe1cbbc24bff3c8a137d26b723fc2d5b7b23bbfcf0b8237ec0a24fff5347565146171e40e4eb09549c05463fb39f45a59f914ee063027af3221938a946817ac41a9dd63455f75f27ee0fd201e527801d89bf5e540d97c279b3aa059983adde2bad7f61675f13ab03281e2cf659d6dfddcd8fb950c4f742cc07c3fbdd3332f2c10b9d9a0898b47ae1545c8d813bc6d5237636e61fd3f462f0926e7a38611d9b6a7600e3fa272089249382318bc4e62525afcb8ea12760f153f475d3a36e83cdfa98faa38170c492b2955fd0fc94449c5ea5c18f16cd44b221faf7c84c3c61fdf2f06c2065be5aee98861a1cfffd4da484adc3bdfc7d949ac3bf935b042a8ab308d53796e344090e72421a0a6415eeb5c17d930d2568be57bfc578c6e5fd64393f1403a31e49bbf0b857e1bc26956a80ec11375f2e2a203f65a8f4a637349647251de14730b93a93cbf9db0089c269270cf48247bd7bf42eef8332cc911155091a32ba032feb0ec758f700fc1cd6683c022835b7d5e8e6637158a2b3d033e87920aeb1299747dc60e66dd9388c12e41373db7357f306d5bdfe07317345cfbf66e08da91a2aa150ce66aed625c81cc12df092b40acf3d63ecb348207688e67b69e1e6fea2a75dd332bdd3fc8eb94d12eda18fc6c7d9aed584a1750535a27da5f5495ce7627a327e72ef61cd9fb750f2082d838855be82933502fec1ad444a351d3284849909a5e540b0173a47b3dc1635e7b9986042b4a7657c173b55cb7f1ea6bbaf75a6800b23b1cdff8559f80a0b1bf6b48ffadae42349296d10cdfbb0ba6f7e8e63276b62ee3fdffd0f9efebc51bc4eee65fe9ec3e708ec40637ccf56530c1519a04493bcb87e426cb9e9f08d4ea0743deeb703d81e7d97fb46f04f643cc972293676acc0e23b0f769ed2677f899e08b1ed918ca9b2df930fa6827f1d9db82e01a1a7adea560d9bfdd943686d5fdce09fdc0d17c263ca8210b47fa965eaeccb60042b69e2d86714c17516c06fb6492771904f679e909f4a71dfd9b1ec4fd3e93f19df508e29c6d8fe0286616942d97b7032f7467ea57f055ddbf5f0d4ec6c7e3e77727cef1bc7c885204d723a6f5accfe1325c07aa7494535faeda6479a00ded25d29d1074759fadbf837fa000b6d4c7d3e9c73d4cd45bcc5b7c18669f7fe0c62d4e5b935d2cbcf437a10bb49553f1d423c5fa4fffdb1ff635813b9896f6a8186854942a7c2594af65ad782be1c2479a826c5bd42046843bb239fe764c67dc487d10d00bfc8d6c579b76d95b9e518daa9785490ccf057e4042cd606fdb6beabf9f92e5ab74d7ec97e102044d8349aaca0596f23a2194580deca7a64bd666a0faa92fbe81699ccc1830cc1560191fd050127ea04505649bfb775555aa8d8e6f7d89b3787440f870d23ba6beca5ffb3bf6c871ce6363c17ce1a71485610c03357148a6da8973d0c2deb739402b202dcff323936afe0dbdf1ff8fbb933fd944131bba0ba8393bd551d31c4a43ab9354b9095aa36d8b68be8df00019aa59ff554ca33dfb8def257acb77a657f128872158194b883785c6ad5ba90e0be5ae05697b391eb45f58a40bdc929ab0befcfbf471429e6c80dea0d3e70864c16569154c7d3ff5eb6d0d103d257c9052b99e270cd225482abe12408f233e647a32e401963973dd0e3b78efcc044f3931b8258aa05ad11f897e241c029cf3ceadf86a7e459a45cf4ed2bdc205ba24ac8baf7a36dda97fe6196d3f69421b808835c3582db14163b87c4baf68b55c05e99ecc4e436d198d57a17e13a23a296b3a629797a6e1dc5610435073c33d805a76dd9b5a5fdb0c32311a2201c51bf2cd25b1d09fdaede4d035da3298847e0a0850fcc18ea46bbc2d1fb08592432f7d6fd1b86807a9d2e7aba74fab4f28d64e6e1866303f86960c4fd2b162774616cfa836056440ee4e053f90735729424335adade62e8ba4b1395c6c7abb09cc385f3c417415389d08e297143c7df5534081a78ce4626620ea145028bd28b9e16b0a81f8a8b9591e08d20073a3be1b3efc835adf702fc838f26b5d38d75e3b530ec339d075ca4e1b33b9c226b3b3fa49b0b101a147d9da2cc5e01db12a23f30446406d5daa02fce11226268fb6256accd599b6f7629062a9ba5cd9e901881bb4e7f69ed24a0ea8b92e2db91f3c4df2eb8ed10a6d3fb01be050ace2ec027e72081c4b6c011c2871c0ffd6b662ef9c8b9d9234239a3a12eabeaa3ef64fd51f37fd207a825da5a64f1c13e945e19825c68ab402b8158f82c703e4c8b01d75b30f10a4b7f5839ec83d42bb0855f6ad3bd54808f486e27731856ebe4228d3fb7264e63343c569412508d0b8ccf36814b4f6df1e0c7b868420a88c56123c3a82c8e6b3e13081c0363d62bb6c8d524bb5ac4d33ace2b0d8ead1407b76211e89ab2985c999a59266c51f3431b32c8a12982f024730a15dea8f72c5438d75572fa69153ce31b916c306b0ee26aa04d6081e38333129c2d0c017492a08b4376e514ec965f9f014fe312a4792f8e32e39e7247978e8b9372fd08a70994913ff4c429e6069f487829fb865a92e617b957b31bfc04077c340f7f8b1965e4f6a7fbcd0d02f05cdb913bc585d93409b000ef6739b8587ed5925632029f3eabd36a040e75fabc700b41f3d1bad2729a9e03ad8f36de9774d90fe2dd31ef828184fee397018ae00f13ad61a38b3160c73528f77030593f6e2f03b93c12acfc9738ce5eca4eda7f8265c8ddd34ee8bca7a7402ba8ce6d1f0bc024f49e8f176c3f8c8bc6003ae2cf263035519b63d2abf8f80b5b291e0d46bc9ff4753789551c3e66b109804cda1fc3ba66ce2d200c70fce25258993ad9be4934fd845fa266cd1d83bfa2d9330d8199f3babbb7979706733dab4ab11106a08627d4af46e61f27f85644066114560cd87abf308a49ad98ccc02d625fff598aa1aa68923e6913fd6f4419847a655b2c487b8309ea2faad777175900e72f63afbdb676f0a1ee9bf3cfaf7d9f7f7fcb6396fe3f8f7ae2ed2ad18eaefc07d34529756d1be8c7dccc8087a55c327db72e0f29398fcff4afb8fb927ee0550290ca34b93255d70554b9dd5b7b149de4d223d91175c7299396879ecdc5dd2c784c9b332ac2915a36db6b68fae42241f303ff5e19474f8d2e7b12eb97e011eb20d3e8474fb588a3890e8c2997dd1a988ae0344ba9f0cc4b0949e9d217bb35e79adb9c4811a4722f267f3a85466e062600c5b934fc5c3d1997c3788283e668d46e23f7e0bc682ec83a64ab9ebde55f83e563b9533a20710b1b98d952333b1ee52ff4048a7fd2909de9716601c1a415906cc904967dcd3bc4d29977f6680f917a166de88e3ee4a89f0b6eb25b52ba9e3e25d3c5b33ebef65a135657bb81f2831c01c71749ef3a613c8821ec71bc11837325ede9e461fd87176f227fb2a8410d1f4e69bb257b5d490f5b0e05adf23a7abd62158127104a6e1b6cee88b39d5c5a7bc79d2a92bea3dc093c32d5337227d9eb9263091b3e6cc66305094e05f70e91b188d19b6427293a2cbf0dfd946086c3a8ecbbb3f75afd172c3eca6f435eb0d48ac8e42fa27abdb9f85db646811ae619f026654b1ebdda82556e1f3bd23c9689aee46dd4c5052150cba8af2fb81f1fbc691f40e32e20f1c9ba2c0d00a486c94088a1e2aa65e32e95b88470a517c8f4449f320a13d844d690cdbde5f262e4240cbedb36775dcb6b419b773966958a27b27abd23ef8281f9905026927535890e054f5f2c744beb136e4d30227e4001c608f42067d3ffc4ae6afb8635baa941d973e3627f789b8eda8fb570732fdf06b1d5778499960390fe57333f05e58cc54b3b51ecc5b53edd874b1009f8d258631afbd9fb8300c190fe2346ec195db6b21123e1cee78c7e785a558e3fd199c5ab53310f68a6d0b4adb6e92ecc7809801350ebd639b6f07d29a0c41c80f897cabe635ec95ceccd312841e74d9ee5550456f802824cc1a865e14f24c920c98826c66ee87ca2e3cbfe0c44ae7f36bb8ab79820faed3d078832d3b99552b8b826a8819151cb68e63e5466af69af027e42ccd2fedbdf7ace52258cc6f5c73cf87b48c0fa5a0d74947b73ba0884e95effcbfa7be2fc109ea504abeaa"}, 0x4080) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002a00)=0x1, 0x4) syz_open_dev$midi(&(0x7f0000002a40)='/dev/midi#\x00', 0xff, 0x80) timer_create(0x4, &(0x7f0000002a80)={0x0, 0xf, 0x2, @tid=r5}, &(0x7f0000002ac0)=0x0) clock_gettime(0x0, &(0x7f0000002b00)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000002b40)={{}, {r9, r10+10000000}}, &(0x7f0000002b80)) [ 122.296336] libceph: parse_ips bad ip '6.::d' 14:12:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}, {{@in6=@local, 0x0, 0x32}}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f0000183f92)={@random="cd39f2081b0b", @random="9a8c87bcb5a4", [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @loopback}}}}}}}, 0x0) 14:12:17 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='6.::d:/0,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 14:12:17 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 14:12:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x4) [ 122.576128] libceph: parse_ips bad ip '6.::d' 14:12:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') 14:12:17 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 14:12:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0x0, 0x4) 14:12:17 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 123.032735] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 123.186308] IPVS: ftp: loaded support on port[0] = 21 [ 123.361359] IPVS: ftp: loaded support on port[0] = 21 [ 124.591328] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.597945] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.606269] device bridge_slave_0 entered promiscuous mode [ 124.687019] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.693677] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.702345] device bridge_slave_1 entered promiscuous mode [ 124.715677] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.722226] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.730347] device bridge_slave_0 entered promiscuous mode [ 124.779687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.814278] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.820826] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.829145] device bridge_slave_1 entered promiscuous mode [ 124.855212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 124.910329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 124.988699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 125.100280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.185083] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.235577] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 125.271474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.278553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.320097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 125.360970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.368006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.404580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 125.411568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.490179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 125.497226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.612580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 125.621093] team0: Port device team_slave_0 added [ 125.700481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.709323] team0: Port device team_slave_1 added [ 125.745807] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 125.754519] team0: Port device team_slave_0 added [ 125.790162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.832298] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 125.840806] team0: Port device team_slave_1 added [ 125.884197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.920065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.958466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 125.966145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.975262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.001370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.058927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.066549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.075686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.090837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 126.098998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.108113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.191613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 126.199272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.208394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.979888] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.986518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.993686] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.000342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.009447] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.172793] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.179392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.186520] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.193123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.202439] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 127.231909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.239752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.432184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.600537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.742536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.909927] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 131.055199] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.075939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.084002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.229614] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.235997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.243996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.362467] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.552116] 8021q: adding VLAN 0 to HW filter on device team0 14:12:28 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 14:12:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000006000), 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x0, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}}, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) 14:12:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') 14:12:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:12:28 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 14:12:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') [ 133.626352] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 14:12:28 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:12:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') 14:12:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') 14:12:28 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 14:12:28 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 14:12:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000006000), 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x0, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}}, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) [ 133.872077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 14:12:29 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830020200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:12:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') 14:12:29 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 14:12:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) rmdir(&(0x7f00000002c0)='./file0\x00') [ 134.241289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 14:12:29 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000006000), 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x0, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}}, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) 14:12:29 executing program 0: futex(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040), 0x0) 14:12:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/33) 14:12:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000100)=[@in], 0x10) 14:12:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:29 executing program 0: futex(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040), 0x0) 14:12:29 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000006000), 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x0, 0x0, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c2522aa66"}}, 0x48}}, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) [ 134.744964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.751705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:29 executing program 0: futex(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040), 0x0) 14:12:29 executing program 5: unshare(0x2000400) r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x40000) 14:12:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/33) 14:12:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000100)=[@in], 0x10) 14:12:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffd, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 14:12:30 executing program 5: unshare(0x2000400) r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x40000) 14:12:30 executing program 0: futex(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000040), 0x0) [ 135.103953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:30 executing program 5: unshare(0x2000400) r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x40000) 14:12:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000100)=[@in], 0x10) 14:12:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/33) 14:12:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffd, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 14:12:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000100)=[@in], 0x10) 14:12:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000577fc8)={0x0, 0x0, &(0x7f0000577000)={&(0x7f000057ad74)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106%gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 14:12:30 executing program 5: unshare(0x2000400) r0 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x40000) 14:12:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) 14:12:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffd, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) [ 135.716234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000280)=""/33) 14:12:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000577fc8)={0x0, 0x0, &(0x7f0000577000)={&(0x7f000057ad74)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106%gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 135.811508] binder: 8204:8205 tried to acquire reference to desc 0, got 1 instead [ 135.819387] binder: 8204:8205 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 135.827837] binder: 8204:8205 unknown command 134 [ 135.832781] binder: 8204:8205 ioctl c0306201 20000680 returned -22 [ 135.923040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.929814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000577fc8)={0x0, 0x0, &(0x7f0000577000)={&(0x7f000057ad74)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106%gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 136.002422] binder: BINDER_SET_CONTEXT_MGR already set [ 136.007852] binder: 8204:8205 ioctl 40046207 0 returned -16 [ 136.029730] binder: 8204:8218 tried to acquire reference to desc 0, got 1 instead [ 136.055522] binder: BINDER_SET_CONTEXT_MGR already set [ 136.060942] binder: 8204:8219 ioctl 40046207 0 returned -16 [ 136.070772] binder: 8204:8220 tried to acquire reference to desc 0, got 1 instead [ 136.078670] binder: 8204:8220 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 136.087150] binder: 8204:8220 unknown command 134 [ 136.092923] binder: 8204:8220 ioctl c0306201 20000680 returned -22 14:12:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffd, 0x8042) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 14:12:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 14:12:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000577fc8)={0x0, 0x0, &(0x7f0000577000)={&(0x7f000057ad74)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}, @in6=@mcast2}, {@in6=@mcast2, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106%gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 14:12:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) [ 136.385748] binder: 8237:8239 tried to acquire reference to desc 0, got 1 instead [ 136.393678] binder: 8237:8239 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 136.402255] binder: 8237:8239 unknown command 134 [ 136.407153] binder: 8237:8239 ioctl c0306201 20000680 returned -22 [ 136.428500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) 14:12:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 14:12:31 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) [ 136.643461] binder: 8243:8244 Acquire 1 refcount change on invalid ref 0 ret -22 [ 136.656968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) [ 136.693303] binder: 8243:8250 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 136.701838] binder: 8243:8250 unknown command 134 [ 136.706728] binder: 8243:8250 ioctl c0306201 20000680 returned -22 14:12:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 14:12:31 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) [ 136.830914] binder: BINDER_SET_CONTEXT_MGR already set [ 136.837405] binder: 8256:8258 ioctl 40046207 0 returned -16 14:12:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) 14:12:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0x4a) 14:12:32 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 14:12:32 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 14:12:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) [ 137.178820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.229909] binder: 8272:8275 tried to acquire reference to desc 0, got 1 instead [ 137.237791] binder: 8272:8275 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 137.246271] binder: 8272:8275 unknown command 134 [ 137.251154] binder: 8272:8275 ioctl c0306201 20000680 returned -22 [ 137.289445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:12:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="046304400000000007630440004e23d986"], 0x0, 0x0, 0x0}) [ 137.334073] binder: BINDER_SET_CONTEXT_MGR already set [ 137.339485] binder: 8282:8283 ioctl 40046207 0 returned -16 [ 137.373695] binder: 8282:8283 Acquire 1 refcount change on invalid ref 0 ret -22 14:12:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:32 executing program 2: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) [ 137.431878] binder: 8282:8283 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 137.440315] binder: 8282:8283 unknown command 134 [ 137.445380] binder: 8282:8283 ioctl c0306201 20000680 returned -22 [ 137.528967] binder: BINDER_SET_CONTEXT_MGR already set [ 137.534485] binder: 8290:8291 ioctl 40046207 0 returned -16 [ 137.566530] binder: 8290:8291 Acquire 1 refcount change on invalid ref 0 ret -22 14:12:32 executing program 5: r0 = memfd_create(&(0x7f00000020c0)='\x00\x00:~\xc6\x8c\xf5;\xd69\xc7\x88+\x1e\xe2\xae\x1c\x96\x1c\xef\xbb\xcd\x14\xff\xb7\xa2\xc5\x92\xcd\xfd\xcf[a\xb8\xe4\xfb\xee\x9d\x8f\x8a\xad\x86\xed\xe5\xd5\x8e\xe8^\xd5\xbcM\xf1\xd2m\xcb\x95\xa9p\xdc\x0e\x01\xdc\xa0\xec\xd5\x11Tp\xf5gz\b\xc2\xa9\xc4ii\xddi\xb8\xb9\xaab\xffn\x8f>\fY\xf1 \xe4G\x13\xc2\xe2|N\xec\x8e\x98\x89\xd8\xe8_\xf9\xa6Y\x81\xa9=\x166\xa7MWyl\xd6\xaf\x19\xdb8\xd0\x87Mii\x8d\x86I\xfa\xa6\xd16\x90\xd3\x1c\xee\xc4RC\x80 \xea\x1d\x16p\xbe\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00j\xb9V\xa5T\xdb M\xa1\x9c=(\x82\xbb\x86\x0f\f1\x9d)\fd\xa1bU\xcb\xe7\xe1W\xb5\xbd_b\xab\x8b\xd2\xb4\xe2_e\xa2V\xa7\xed5\x0f\x01\xbb\x90iU}\x8a\xd9\xa9\x8bhc\xf9\xaf6\xdc\xbc\x16d\xd4\x93\xc9\x93\x1b\x80\xe5\x0e\xc4/0\xa0\xbd\xbe\x8f\x8bssq\xac\x8b\x98\xe0\x04\x99\r\xcf\xed\xeb\x00Z\x14\xd2\x7fB\xb9\x02\xfe\x9b\v\x13\xf2\xaf\xc7\x9c\xfd$\xf4\xcbsA\xa7\xc1V\x89\a\xfa*\xfe\xa3\x10&r\xd3w3\xd2\x0f]\x9aw\xc9^\xa7A\xb6\xb5\xebW\n@9Rh\x8b\xd3\xd8h\xc7`\t\xda:7\xd9\x81y\x89\x92\xefh\xfb\xe4\xcb\x02K\xe1p+\\\x14l\xfe\xad\xff\x13\xbb\xf38\xb2\xd8\x91&4\xbc!\xec@f\xb5\xe1\xce\xe0\xc8\x81\xbb\xa0\xee``a\xe6K\x02\xd9,\xb77I\xd3C\x9d\xc63>\x00s\b(\x9f\x91\x99N\xb9#$G\x02f\xa7\xf4\xd9$\x15\x13\xfe=#\xd5\xe4\xb2e\xd6\xd9r\xb6\x93\'B\xe9\xbb\xc2\x8e\xde\xdb^7\xd7b\x90\x16\xad\x05\xf3\xca\x13m7\x8b\x87\bVy?\xdd\xca/7\xdf|\xbc\xc5\xb7U\xb3\xfae\xc9Y\x15\xed\xb7\x05\xfa\xbe\x83\xd6\xa360\xc5e\xa4T<\xb0\xb0y\xc9W\xa8\xbc\xb2|\x969p\\\x00Q\xad', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x18000109801) r2 = dup2(r1, r0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="ff6d8d959b20057ec90a632f142c9390c2f94dee9baf5551f37f8815", 0x1c}], 0x1) [ 137.600745] binder: 8290:8291 DecRefs 0 refcount change on invalid ref -651997696 ret -22 [ 137.609338] binder: 8290:8291 unknown command 134 [ 137.614314] binder: 8290:8291 ioctl c0306201 20000680 returned -22 14:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:32 executing program 2: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 14:12:32 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x8008af00, &(0x7f0000000340)) 14:12:33 executing program 5: r0 = memfd_create(&(0x7f00000020c0)='\x00\x00:~\xc6\x8c\xf5;\xd69\xc7\x88+\x1e\xe2\xae\x1c\x96\x1c\xef\xbb\xcd\x14\xff\xb7\xa2\xc5\x92\xcd\xfd\xcf[a\xb8\xe4\xfb\xee\x9d\x8f\x8a\xad\x86\xed\xe5\xd5\x8e\xe8^\xd5\xbcM\xf1\xd2m\xcb\x95\xa9p\xdc\x0e\x01\xdc\xa0\xec\xd5\x11Tp\xf5gz\b\xc2\xa9\xc4ii\xddi\xb8\xb9\xaab\xffn\x8f>\fY\xf1 \xe4G\x13\xc2\xe2|N\xec\x8e\x98\x89\xd8\xe8_\xf9\xa6Y\x81\xa9=\x166\xa7MWyl\xd6\xaf\x19\xdb8\xd0\x87Mii\x8d\x86I\xfa\xa6\xd16\x90\xd3\x1c\xee\xc4RC\x80 \xea\x1d\x16p\xbe\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00j\xb9V\xa5T\xdb M\xa1\x9c=(\x82\xbb\x86\x0f\f1\x9d)\fd\xa1bU\xcb\xe7\xe1W\xb5\xbd_b\xab\x8b\xd2\xb4\xe2_e\xa2V\xa7\xed5\x0f\x01\xbb\x90iU}\x8a\xd9\xa9\x8bhc\xf9\xaf6\xdc\xbc\x16d\xd4\x93\xc9\x93\x1b\x80\xe5\x0e\xc4/0\xa0\xbd\xbe\x8f\x8bssq\xac\x8b\x98\xe0\x04\x99\r\xcf\xed\xeb\x00Z\x14\xd2\x7fB\xb9\x02\xfe\x9b\v\x13\xf2\xaf\xc7\x9c\xfd$\xf4\xcbsA\xa7\xc1V\x89\a\xfa*\xfe\xa3\x10&r\xd3w3\xd2\x0f]\x9aw\xc9^\xa7A\xb6\xb5\xebW\n@9Rh\x8b\xd3\xd8h\xc7`\t\xda:7\xd9\x81y\x89\x92\xefh\xfb\xe4\xcb\x02K\xe1p+\\\x14l\xfe\xad\xff\x13\xbb\xf38\xb2\xd8\x91&4\xbc!\xec@f\xb5\xe1\xce\xe0\xc8\x81\xbb\xa0\xee``a\xe6K\x02\xd9,\xb77I\xd3C\x9d\xc63>\x00s\b(\x9f\x91\x99N\xb9#$G\x02f\xa7\xf4\xd9$\x15\x13\xfe=#\xd5\xe4\xb2e\xd6\xd9r\xb6\x93\'B\xe9\xbb\xc2\x8e\xde\xdb^7\xd7b\x90\x16\xad\x05\xf3\xca\x13m7\x8b\x87\bVy?\xdd\xca/7\xdf|\xbc\xc5\xb7U\xb3\xfae\xc9Y\x15\xed\xb7\x05\xfa\xbe\x83\xd6\xa360\xc5e\xa4T<\xb0\xb0y\xc9W\xa8\xbc\xb2|\x969p\\\x00Q\xad', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x18000109801) r2 = dup2(r1, r0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="ff6d8d959b20057ec90a632f142c9390c2f94dee9baf5551f37f8815", 0x1c}], 0x1) 14:12:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:33 executing program 2: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 14:12:33 executing program 5: r0 = memfd_create(&(0x7f00000020c0)='\x00\x00:~\xc6\x8c\xf5;\xd69\xc7\x88+\x1e\xe2\xae\x1c\x96\x1c\xef\xbb\xcd\x14\xff\xb7\xa2\xc5\x92\xcd\xfd\xcf[a\xb8\xe4\xfb\xee\x9d\x8f\x8a\xad\x86\xed\xe5\xd5\x8e\xe8^\xd5\xbcM\xf1\xd2m\xcb\x95\xa9p\xdc\x0e\x01\xdc\xa0\xec\xd5\x11Tp\xf5gz\b\xc2\xa9\xc4ii\xddi\xb8\xb9\xaab\xffn\x8f>\fY\xf1 \xe4G\x13\xc2\xe2|N\xec\x8e\x98\x89\xd8\xe8_\xf9\xa6Y\x81\xa9=\x166\xa7MWyl\xd6\xaf\x19\xdb8\xd0\x87Mii\x8d\x86I\xfa\xa6\xd16\x90\xd3\x1c\xee\xc4RC\x80 \xea\x1d\x16p\xbe\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00j\xb9V\xa5T\xdb M\xa1\x9c=(\x82\xbb\x86\x0f\f1\x9d)\fd\xa1bU\xcb\xe7\xe1W\xb5\xbd_b\xab\x8b\xd2\xb4\xe2_e\xa2V\xa7\xed5\x0f\x01\xbb\x90iU}\x8a\xd9\xa9\x8bhc\xf9\xaf6\xdc\xbc\x16d\xd4\x93\xc9\x93\x1b\x80\xe5\x0e\xc4/0\xa0\xbd\xbe\x8f\x8bssq\xac\x8b\x98\xe0\x04\x99\r\xcf\xed\xeb\x00Z\x14\xd2\x7fB\xb9\x02\xfe\x9b\v\x13\xf2\xaf\xc7\x9c\xfd$\xf4\xcbsA\xa7\xc1V\x89\a\xfa*\xfe\xa3\x10&r\xd3w3\xd2\x0f]\x9aw\xc9^\xa7A\xb6\xb5\xebW\n@9Rh\x8b\xd3\xd8h\xc7`\t\xda:7\xd9\x81y\x89\x92\xefh\xfb\xe4\xcb\x02K\xe1p+\\\x14l\xfe\xad\xff\x13\xbb\xf38\xb2\xd8\x91&4\xbc!\xec@f\xb5\xe1\xce\xe0\xc8\x81\xbb\xa0\xee``a\xe6K\x02\xd9,\xb77I\xd3C\x9d\xc63>\x00s\b(\x9f\x91\x99N\xb9#$G\x02f\xa7\xf4\xd9$\x15\x13\xfe=#\xd5\xe4\xb2e\xd6\xd9r\xb6\x93\'B\xe9\xbb\xc2\x8e\xde\xdb^7\xd7b\x90\x16\xad\x05\xf3\xca\x13m7\x8b\x87\bVy?\xdd\xca/7\xdf|\xbc\xc5\xb7U\xb3\xfae\xc9Y\x15\xed\xb7\x05\xfa\xbe\x83\xd6\xa360\xc5e\xa4T<\xb0\xb0y\xc9W\xa8\xbc\xb2|\x969p\\\x00Q\xad', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x18000109801) r2 = dup2(r1, r0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="ff6d8d959b20057ec90a632f142c9390c2f94dee9baf5551f37f8815", 0x1c}], 0x1) 14:12:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:33 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x8008af00, &(0x7f0000000340)) 14:12:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:33 executing program 5: r0 = memfd_create(&(0x7f00000020c0)='\x00\x00:~\xc6\x8c\xf5;\xd69\xc7\x88+\x1e\xe2\xae\x1c\x96\x1c\xef\xbb\xcd\x14\xff\xb7\xa2\xc5\x92\xcd\xfd\xcf[a\xb8\xe4\xfb\xee\x9d\x8f\x8a\xad\x86\xed\xe5\xd5\x8e\xe8^\xd5\xbcM\xf1\xd2m\xcb\x95\xa9p\xdc\x0e\x01\xdc\xa0\xec\xd5\x11Tp\xf5gz\b\xc2\xa9\xc4ii\xddi\xb8\xb9\xaab\xffn\x8f>\fY\xf1 \xe4G\x13\xc2\xe2|N\xec\x8e\x98\x89\xd8\xe8_\xf9\xa6Y\x81\xa9=\x166\xa7MWyl\xd6\xaf\x19\xdb8\xd0\x87Mii\x8d\x86I\xfa\xa6\xd16\x90\xd3\x1c\xee\xc4RC\x80 \xea\x1d\x16p\xbe\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00j\xb9V\xa5T\xdb M\xa1\x9c=(\x82\xbb\x86\x0f\f1\x9d)\fd\xa1bU\xcb\xe7\xe1W\xb5\xbd_b\xab\x8b\xd2\xb4\xe2_e\xa2V\xa7\xed5\x0f\x01\xbb\x90iU}\x8a\xd9\xa9\x8bhc\xf9\xaf6\xdc\xbc\x16d\xd4\x93\xc9\x93\x1b\x80\xe5\x0e\xc4/0\xa0\xbd\xbe\x8f\x8bssq\xac\x8b\x98\xe0\x04\x99\r\xcf\xed\xeb\x00Z\x14\xd2\x7fB\xb9\x02\xfe\x9b\v\x13\xf2\xaf\xc7\x9c\xfd$\xf4\xcbsA\xa7\xc1V\x89\a\xfa*\xfe\xa3\x10&r\xd3w3\xd2\x0f]\x9aw\xc9^\xa7A\xb6\xb5\xebW\n@9Rh\x8b\xd3\xd8h\xc7`\t\xda:7\xd9\x81y\x89\x92\xefh\xfb\xe4\xcb\x02K\xe1p+\\\x14l\xfe\xad\xff\x13\xbb\xf38\xb2\xd8\x91&4\xbc!\xec@f\xb5\xe1\xce\xe0\xc8\x81\xbb\xa0\xee``a\xe6K\x02\xd9,\xb77I\xd3C\x9d\xc63>\x00s\b(\x9f\x91\x99N\xb9#$G\x02f\xa7\xf4\xd9$\x15\x13\xfe=#\xd5\xe4\xb2e\xd6\xd9r\xb6\x93\'B\xe9\xbb\xc2\x8e\xde\xdb^7\xd7b\x90\x16\xad\x05\xf3\xca\x13m7\x8b\x87\bVy?\xdd\xca/7\xdf|\xbc\xc5\xb7U\xb3\xfae\xc9Y\x15\xed\xb7\x05\xfa\xbe\x83\xd6\xa360\xc5e\xa4T<\xb0\xb0y\xc9W\xa8\xbc\xb2|\x969p\\\x00Q\xad', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x18000109801) r2 = dup2(r1, r0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="ff6d8d959b20057ec90a632f142c9390c2f94dee9baf5551f37f8815", 0x1c}], 0x1) 14:12:33 executing program 2: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) 14:12:33 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x8008af00, &(0x7f0000000340)) 14:12:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0x8008af00, &(0x7f0000000340)) 14:12:34 executing program 0: r0 = socket(0x11, 0x80003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x3, r1) 14:12:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x2c2000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 14:12:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:34 executing program 0: r0 = socket(0x11, 0x80003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x3, r1) 14:12:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xffffffff}, {{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000000700)=""/7, 0x7}], 0x7, &(0x7f00000007c0)=""/237, 0xed}}, {{&(0x7f00000008c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/30, 0x1e}, {&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000f40)=""/183, 0xb7}], 0xa, &(0x7f00000012c0)=""/174, 0xae}, 0x400}, {{&(0x7f0000001000)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)=""/164, 0xa4}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/141, 0x8d}, {&(0x7f00000015c0)=""/7, 0x7}], 0x4, &(0x7f0000001640)=""/4096, 0x1000}, 0xc1b4}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/128, 0x80}, {&(0x7f0000002b40)=""/119, 0x77}, {&(0x7f0000002bc0)=""/253, 0xfd}], 0x3, &(0x7f0000002d00)=""/42, 0x2a}}], 0x5, 0x0, 0x0) 14:12:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x2c2000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 14:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x84, 0x0, &(0x7f000000d000)={0x0, 0x7f}, 0x0, 0x0) 14:12:35 executing program 0: r0 = socket(0x11, 0x80003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x3, r1) 14:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x2c2000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 14:12:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x3, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 14:12:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x2c2000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 14:12:35 executing program 0: r0 = socket(0x11, 0x80003, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) ioprio_get$uid(0x3, r1) 14:12:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:35 executing program 2: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0x1000000040a) 14:12:35 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:36 executing program 2: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0x1000000040a) 14:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1457420000000000000007ff000000000300de56b500000000000000000008000000fe00ebff08000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) setxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:36 executing program 2: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0x1000000040a) 14:12:36 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x84, 0x0, &(0x7f000000d000)={0x0, 0x7f}, 0x0, 0x0) 14:12:36 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:36 executing program 2: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0x1000000040a) 14:12:36 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:36 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:37 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:37 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)) 14:12:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x84, 0x0, &(0x7f000000d000)={0x0, 0x7f}, 0x0, 0x0) 14:12:37 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/205) 14:12:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/205) 14:12:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)) 14:12:37 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)) 14:12:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/205) 14:12:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/205) 14:12:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)) 14:12:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x84, 0x0, &(0x7f000000d000)={0x0, 0x7f}, 0x0, 0x0) 14:12:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y.swaS.current\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0xfffffd1c}], 0x1, 0x20001000) pkey_free(0xffffffffffffffff) 14:12:38 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 14:12:38 executing program 4: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x800000000114, 0x80000000000271b, 0x0, &(0x7f00000000c0)) 14:12:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7, 0x2000000000b, 0x3}, 0x1fd) 14:12:38 executing program 4: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x800000000114, 0x80000000000271b, 0x0, &(0x7f00000000c0)) 14:12:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7, 0x2000000000b, 0x3}, 0x1fd) 14:12:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) 14:12:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7, 0x2000000000b, 0x3}, 0x1fd) 14:12:39 executing program 4: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x800000000114, 0x80000000000271b, 0x0, &(0x7f00000000c0)) 14:12:39 executing program 4: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x800000000114, 0x80000000000271b, 0x0, &(0x7f00000000c0)) 14:12:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) 14:12:39 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c85000)={0x1ffd}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x1}) 14:12:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7, 0x2000000000b, 0x3}, 0x1fd) 14:12:39 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000000040)) 14:12:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) 14:12:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/10, 0xd}) 14:12:39 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 14:12:39 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000000040)) 14:12:39 executing program 5: r0 = socket(0x80001040000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4000000001a, 0x0, 0x0) 14:12:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000003c0)) 14:12:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/10, 0xd}) 14:12:39 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c85000)={0x1ffd}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x1}) 14:12:39 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000000040)) 14:12:40 executing program 5: r0 = socket(0x80001040000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4000000001a, 0x0, 0x0) 14:12:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 14:12:40 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x25b}]) 14:12:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/10, 0xd}) 14:12:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c85000)={0x1ffd}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x1}) 14:12:40 executing program 1: socketpair(0x15, 0x5, 0x0, &(0x7f0000000040)) 14:12:40 executing program 5: r0 = socket(0x80001040000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4000000001a, 0x0, 0x0) 14:12:40 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "e5f9fe8eb2df5e42090cca28e845b2eabd7ce740a1468fe351a06e3de92acc3c"}) 14:12:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/10, 0xd}) 14:12:40 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x25b}]) 14:12:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 14:12:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c85000)={0x1ffd}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x1}) 14:12:40 executing program 5: r0 = socket(0x80001040000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4000000001a, 0x0, 0x0) 14:12:40 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "e5f9fe8eb2df5e42090cca28e845b2eabd7ce740a1468fe351a06e3de92acc3c"}) 14:12:40 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:40 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x25b}]) 14:12:40 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:40 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @dev, 0x14}, 0x1c) 14:12:40 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) [ 145.960682] IPVS: ftp: loaded support on port[0] = 21 14:12:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "e5f9fe8eb2df5e42090cca28e845b2eabd7ce740a1468fe351a06e3de92acc3c"}) 14:12:41 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x25b}]) 14:12:41 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @dev, 0x14}, 0x1c) [ 146.270219] IPVS: ftp: loaded support on port[0] = 21 14:12:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:41 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "e5f9fe8eb2df5e42090cca28e845b2eabd7ce740a1468fe351a06e3de92acc3c"}) 14:12:41 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @dev, 0x14}, 0x1c) 14:12:41 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xa, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 14:12:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:41 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 146.763178] sit: non-ECT from 172.20.255.187 with TOS=0x2 [ 146.804515] sit: non-ECT from 172.20.255.187 with TOS=0x2 14:12:41 executing program 5: r0 = socket(0x848000000015, 0x805, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x0, @dev, 0x14}, 0x1c) 14:12:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xa, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 146.966989] IPVS: ftp: loaded support on port[0] = 21 14:12:42 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:42 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:42 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 147.229363] sit: non-ECT from 172.20.255.187 with TOS=0x2 14:12:42 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xa, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 147.418485] IPVS: ftp: loaded support on port[0] = 21 14:12:42 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:42 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x20400) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) 14:12:42 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 147.563759] IPVS: ftp: loaded support on port[0] = 21 [ 147.584878] sit: non-ECT from 172.20.255.187 with TOS=0x2 [ 147.733994] IPVS: ftp: loaded support on port[0] = 21 14:12:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xa, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 147.773124] IPVS: ftp: loaded support on port[0] = 21 14:12:42 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 148.032333] sit: non-ECT from 172.20.255.187 with TOS=0x2 [ 148.066120] IPVS: ftp: loaded support on port[0] = 21 14:12:43 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0a85322, &(0x7f0000000200)={0x83, 0x0, 0x0, 'queue0\x00'}) 14:12:43 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 148.377299] IPVS: ftp: loaded support on port[0] = 21 14:12:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0a85322, &(0x7f0000000200)={0x83, 0x0, 0x0, 'queue0\x00'}) 14:12:43 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 148.578970] IPVS: ftp: loaded support on port[0] = 21 14:12:43 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:43 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) [ 148.908552] IPVS: ftp: loaded support on port[0] = 21 14:12:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0a85322, &(0x7f0000000200)={0x83, 0x0, 0x0, 'queue0\x00'}) [ 148.932545] IPVS: ftp: loaded support on port[0] = 21 [ 149.042579] IPVS: ftp: loaded support on port[0] = 21 14:12:44 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:44 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0xc0a85322, &(0x7f0000000200)={0x83, 0x0, 0x0, 'queue0\x00'}) [ 149.328059] IPVS: ftp: loaded support on port[0] = 21 14:12:44 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x14c}) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x9, 0x100000001}) [ 149.535623] IPVS: ftp: loaded support on port[0] = 21 14:12:44 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='G\t\x00\x1b\x00\x00\x00\x00vents\x00\x00\x00\x00\x00\x00\x00\xac', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@local}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) close(r1) accept$alg(r0, 0x0, 0x0) 14:12:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c) [ 149.753749] ================================================================== [ 149.761208] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 149.767812] CPU: 1 PID: 8884 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #8 [ 149.774919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.784285] Call Trace: [ 149.786901] dump_stack+0x173/0x1d0 [ 149.790559] kmsan_report+0x120/0x290 [ 149.794436] kmsan_internal_check_memory+0x9a7/0xa20 [ 149.799604] __msan_instrument_asm_load+0x8a/0x90 [ 149.804488] __siphash_aligned+0x512/0xae0 [ 149.808796] secure_ipv6_port_ephemeral+0x110/0x220 [ 149.813886] inet6_hash_connect+0x11f/0x1a0 [ 149.818256] tcp_v6_connect+0x20ba/0x2890 [ 149.822452] ? __msan_poison_alloca+0x1e0/0x270 [ 149.827184] ? tcp_v6_pre_connect+0x130/0x130 [ 149.831882] __inet_stream_connect+0x2f9/0x1340 [ 149.836635] inet_stream_connect+0x101/0x180 [ 149.841101] __sys_connect+0x664/0x820 [ 149.845072] ? __inet_stream_connect+0x1340/0x1340 [ 149.850032] ? prepare_exit_to_usermode+0x114/0x420 [ 149.855072] ? syscall_return_slowpath+0x50/0x650 [ 149.859954] __se_sys_connect+0x8d/0xb0 [ 149.863963] __x64_sys_connect+0x4a/0x70 [ 149.868070] do_syscall_64+0xbc/0xf0 [ 149.871821] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 149.877027] RIP: 0033:0x457669 [ 149.880288] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 149.899212] RSP: 002b:00007effac06cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 149.906938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 149.914231] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 149.921536] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 149.928829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effac06d6d4 [ 149.936108] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 149.943411] [ 149.945070] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 149.952531] Variable was created at: [ 149.956280] secure_ipv6_port_ephemeral+0x6a/0x220 [ 149.961233] inet6_hash_connect+0x11f/0x1a0 [ 149.965560] [ 149.967203] Bytes 2-7 of 8 are uninitialized [ 149.971633] Memory access of size 8 starts at ffff88815624f9f0 [ 149.977654] ================================================================== [ 149.985032] Disabling lock debugging due to kernel taint [ 149.990496] Kernel panic - not syncing: panic_on_warn set ... [ 149.996406] CPU: 1 PID: 8884 Comm: syz-executor2 Tainted: G B 4.20.0-rc7+ #8 [ 150.004909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.014279] Call Trace: [ 150.016895] dump_stack+0x173/0x1d0 [ 150.020559] panic+0x3ce/0x961 [ 150.023839] kmsan_report+0x285/0x290 [ 150.024362] IPVS: ftp: loaded support on port[0] = 21 [ 150.027686] kmsan_internal_check_memory+0x9a7/0xa20 [ 150.037999] __msan_instrument_asm_load+0x8a/0x90 [ 150.042870] __siphash_aligned+0x512/0xae0 [ 150.047183] secure_ipv6_port_ephemeral+0x110/0x220 [ 150.052243] inet6_hash_connect+0x11f/0x1a0 [ 150.056640] tcp_v6_connect+0x20ba/0x2890 [ 150.060881] ? __msan_poison_alloca+0x1e0/0x270 [ 150.065592] ? tcp_v6_pre_connect+0x130/0x130 [ 150.070119] __inet_stream_connect+0x2f9/0x1340 [ 150.074859] inet_stream_connect+0x101/0x180 [ 150.079315] __sys_connect+0x664/0x820 [ 150.083242] ? __inet_stream_connect+0x1340/0x1340 [ 150.088200] ? prepare_exit_to_usermode+0x114/0x420 [ 150.093234] ? syscall_return_slowpath+0x50/0x650 [ 150.098114] __se_sys_connect+0x8d/0xb0 [ 150.102170] __x64_sys_connect+0x4a/0x70 [ 150.106280] do_syscall_64+0xbc/0xf0 [ 150.110025] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 150.115233] RIP: 0033:0x457669 [ 150.118449] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 150.137373] RSP: 002b:00007effac06cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.145102] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 150.152393] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 150.159693] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 150.166980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007effac06d6d4 [ 150.174257] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 150.182524] Kernel Offset: disabled [ 150.186167] Rebooting in 86400 seconds..