[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.810647] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.515475] random: sshd: uninitialized urandom read (32 bytes read) [ 21.760389] random: sshd: uninitialized urandom read (32 bytes read) [ 22.758482] sshd (4389) used greatest stack depth: 16984 bytes left [ 22.777328] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. [ 28.276255] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/25 02:20:20 fuzzer started [ 29.876239] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/25 02:20:23 dialing manager at 10.128.0.26:35555 2018/07/25 02:20:24 syscalls: 1808 2018/07/25 02:20:24 code coverage: enabled 2018/07/25 02:20:24 comparison tracing: enabled 2018/07/25 02:20:24 setuid sandbox: enabled 2018/07/25 02:20:24 namespace sandbox: enabled 2018/07/25 02:20:24 fault injection: enabled 2018/07/25 02:20:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/25 02:20:24 net packed injection: enabled 2018/07/25 02:20:24 net device setup: enabled [ 34.589440] random: crng init done 02:20:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:20:50 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 02:20:50 executing program 7: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 02:20:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x11, 0x0, @dev, @local={0xfe, 0x4600}, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000001780)) 02:20:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:20:50 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) 02:20:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0xc0bc5351, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 02:20:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x2) accept$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) shutdown(r1, 0x0) [ 57.760938] IPVS: ftp: loaded support on port[0] = 21 [ 57.783828] IPVS: ftp: loaded support on port[0] = 21 [ 57.817490] IPVS: ftp: loaded support on port[0] = 21 [ 57.836376] IPVS: ftp: loaded support on port[0] = 21 [ 57.839959] IPVS: ftp: loaded support on port[0] = 21 [ 57.851404] IPVS: ftp: loaded support on port[0] = 21 [ 57.857313] IPVS: ftp: loaded support on port[0] = 21 [ 57.880913] IPVS: ftp: loaded support on port[0] = 21 [ 60.072809] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.079406] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.102468] device bridge_slave_0 entered promiscuous mode [ 60.112722] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.119294] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.133893] device bridge_slave_0 entered promiscuous mode [ 60.150571] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.157078] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.164996] device bridge_slave_0 entered promiscuous mode [ 60.186085] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.192630] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.201769] device bridge_slave_0 entered promiscuous mode [ 60.220794] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.227368] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.256954] device bridge_slave_0 entered promiscuous mode [ 60.265898] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.272342] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.280208] device bridge_slave_0 entered promiscuous mode [ 60.289488] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.296059] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.304579] device bridge_slave_1 entered promiscuous mode [ 60.311639] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.318066] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.332822] device bridge_slave_1 entered promiscuous mode [ 60.341383] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.347816] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.357390] device bridge_slave_0 entered promiscuous mode [ 60.371339] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.377937] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.397590] device bridge_slave_1 entered promiscuous mode [ 60.404910] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.411400] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.419510] device bridge_slave_1 entered promiscuous mode [ 60.426718] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.433120] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.441906] device bridge_slave_1 entered promiscuous mode [ 60.450522] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.456920] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.471869] device bridge_slave_0 entered promiscuous mode [ 60.485326] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.491803] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.499567] device bridge_slave_1 entered promiscuous mode [ 60.509138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.520725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.528187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.534590] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.573133] device bridge_slave_1 entered promiscuous mode [ 60.585814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.597495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.607256] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.613809] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.626695] device bridge_slave_1 entered promiscuous mode [ 60.633310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.642556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.651680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.663112] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.725298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.734594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.746137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.754911] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.782987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.804521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.890140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.922321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.085309] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.096891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.150906] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.160322] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.213549] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.232183] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.260990] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.274186] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.285725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.295191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.317461] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.326939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.371877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.417429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.454993] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.476666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.483652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.504817] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.519471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.526429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.546515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.556392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.563367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.594308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.623351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.632218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.640843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.650587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.657639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.676257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.693706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.711621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.733734] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.742205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.749844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.758180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.794534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.801587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.820948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.827899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.857394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.885526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.009243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.033182] team0: Port device team_slave_0 added [ 62.080161] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.094277] team0: Port device team_slave_0 added [ 62.132855] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.153957] team0: Port device team_slave_0 added [ 62.186215] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.201527] team0: Port device team_slave_1 added [ 62.209643] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.219286] team0: Port device team_slave_0 added [ 62.225864] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.240405] team0: Port device team_slave_0 added [ 62.249695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.264600] team0: Port device team_slave_0 added [ 62.276327] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.287091] team0: Port device team_slave_0 added [ 62.295338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.304850] team0: Port device team_slave_1 added [ 62.311602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.322365] team0: Port device team_slave_0 added [ 62.334123] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.345719] team0: Port device team_slave_1 added [ 62.367288] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.384721] team0: Port device team_slave_1 added [ 62.400295] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.415554] team0: Port device team_slave_1 added [ 62.427074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.448657] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.457721] team0: Port device team_slave_1 added [ 62.465539] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.475078] team0: Port device team_slave_1 added [ 62.487519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.502392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.517654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.525340] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.538493] team0: Port device team_slave_1 added [ 62.555687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.563540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.579893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.606473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.618687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.629236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.638223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.647379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.654343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.672441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.688606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.697110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.704885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.713351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.721311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.728451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.738891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.747999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.757654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.768256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.775959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.788998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.808747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.834927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.853451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.862964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.870671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.878641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.886494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.894327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.901794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.909745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.917612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.924739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.933168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.942558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.949626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.958285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.974661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.983947] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.992981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.002520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.012650] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.020737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.055720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.079506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.093477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.101448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.109548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.117508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.125334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.132844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.140718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.148737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.158894] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.167084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.188474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.203509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.211549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.221754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.231302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.238639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.247938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.266882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.283728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.292643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.304197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.338952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.369553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.391438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.399613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.407503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.415352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.423210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.430971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.439066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.446845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.454869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.462727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.470525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.498857] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.508403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.517388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.541170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.578091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.611851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.771959] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.778573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.785716] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.792140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.810964] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.817628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.834807] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.841218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.847863] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.854268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.861963] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.876638] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.883079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.889755] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.896159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.904668] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.919194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.925621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.932301] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.938701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.986521] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.995263] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.001686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.008383] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.014785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.028273] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.036894] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.043383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.050126] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.056530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.076509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.089563] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.095958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.102641] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.109054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.121241] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.135521] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.141964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.148642] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.155079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.170759] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.824269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.835617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.867296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.884737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.892677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.900476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.907920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.227253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.265099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.301493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.331926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.362270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.380244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.398186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.496244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.740087] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.770886] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.795396] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.809636] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.828659] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.850760] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 70.885263] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.008667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 71.252827] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.259234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.273656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.298343] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.304724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.316372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.342865] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.351870] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.359346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.365713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.380754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.403237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.420608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.432578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.439794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.450844] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.471157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.480438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.508876] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.517548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.552941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.583881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 71.590293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.600441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.834817] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.857937] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.887957] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.902653] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.926168] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.044194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.066754] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.105177] 8021q: adding VLAN 0 to HW filter on device team0 02:21:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0xc0bc5351, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 02:21:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) [ 74.862112] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 02:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0xc0bc5351, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 02:21:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:21:07 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) [ 74.988303] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 02:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0xc0bc5351, &(0x7f0000000100)={0x12, @time={0x0, 0x989680}}) 02:21:07 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) [ 75.124049] hrtimer: interrupt took 61476 ns [ 75.156517] IPVS: length: 193 != 8 [ 75.260260] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 75.285449] IPVS: length: 193 != 8 02:21:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:21:07 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 02:21:07 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:21:07 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:21:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x491]}) [ 75.444878] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 02:21:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:21:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c44f31c96a0a214dcc48e245d05ed484b50044305bd123000f1f400ebff42b179e669d9372608866ef09be01e68ab78544be3cbbcf631a906ecfc7f9cf63b8b00d6f7e873002a38936fb02709008b1eb7f7923c1b761c15a94361bc7c42f335e7f9e534b913bb543cbfc8b916204e865d2d6fe0d931589e86712cf91e33a3357837ac71bb3cca2b3f3cb700b3c76b35b05c3c953a0500000000100000292594e6b7169ec163a03229937902ef894d34c47e9cfc10a57bbf5651aa95cf9a3c9abb3ada2dbf7815fd2c0f529dbce7834af3694e2bc9a54f1c622fc16d2ec79a38835279aae59524f510cf2cfdc9e870a3b1ee805af33e4841fa98efba84d50100f10eafef2ffa5b6c6fb7ce8be90353d04ad82daf28849cb9b91daa5d0b929dab3301c44e9cdb8f72ab1c3c2e9bf7c2374a0f0a997318b0fe000000000000004932176db3acadbbfcae7eaebca9323c58a110ee55ff7c8b7c7d67c7e2ee2ccbd7273fe758ae2ed912d8310375de1049b2c16e9d0f8d1f78c1e99cec96547548778772fa9cc8f9a44685d1c07990bfd435fef575cc077f9be83c1a180efca81dfca5be6d079fc99a176509f4cbc7444ff57082d29155891ec05be90a5671d19292ef6c5a22bbd15be007ea364f8b67034348a772d0f7c1229fc4a004d72001e35536fa26452fba424c81558fcbe5e9b602d22b93c100000000000000"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) 02:21:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x2) accept$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) shutdown(r1, 0x0) 02:21:08 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 02:21:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) 02:21:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:21:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 02:21:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x491]}) 02:21:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) dup2(r5, r3) [ 75.731638] IPVS: length: 193 != 8 02:21:08 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) 02:21:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:21:08 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) [ 75.833991] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 75.857701] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 02:21:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:21:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x491]}) 02:21:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 02:21:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) [ 76.022398] IPVS: length: 193 != 8 02:21:08 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000380)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x3400c, &(0x7f0000000140)}) mkdirat(r0, &(0x7f0000000400)='./file0\x00', 0x0) 02:21:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) [ 76.090585] IPVS: length: 193 != 8 [ 76.176687] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 76.197086] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 02:21:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x2) accept$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) shutdown(r1, 0x0) 02:21:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:21:09 executing program 1: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) 02:21:09 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) 02:21:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) 02:21:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:09 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000001140)=0x18) 02:21:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x491]}) 02:21:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) [ 76.754900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:21:09 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000001140)=0x18) 02:21:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r1, r0) [ 76.814305] IPVS: length: 193 != 8 [ 76.831940] IPVS: length: 193 != 8 02:21:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 02:21:09 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000001140)=0x18) 02:21:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000300)={@multicast1, @multicast2}, &(0x7f0000000340)=0xc) 02:21:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) 02:21:09 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x1, {0x2, 0x4e20, @rand_addr}, {0x2, 0x4e23}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x44, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000480)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22, @rand_addr}, {0x2, 0x4e1f, @dev}, {0x2, 0x4e21, @broadcast}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000ac0)=""/193, &(0x7f0000000200)=0xc1) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x3c2) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x3f, 0x0, 0xff, 0x1, 0x1}, 0x33a) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000007c0)=0xe8) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c44f31c96a0a214dcc48e245d05ed484b50044305bd123000f1f400ebff42b179e669d9372608866ef09be01e68ab78544be3cbbcf631a906ecfc7f9cf63b8b00d6f7e873002a38936fb02709008b1eb7f7923c1b761c15a94361bc7c42f335e7f9e534b913bb543cbfc8b916204e865d2d6fe0d931589e86712cf91e33a3357837ac71bb3cca2b3f3cb700b3c76b35b05c3c953a0500000000100000292594e6b7169ec163a03229937902ef894d34c47e9cfc10a57bbf5651aa95cf9a3c9abb3ada2dbf7815fd2c0f529dbce7834af3694e2bc9a54f1c622fc16d2ec79a38835279aae59524f510cf2cfdc9e870a3b1ee805af33e4841fa98efba84d50100f10eafef2ffa5b6c6fb7ce8be90353d04ad82daf28849cb9b91daa5d0b929dab3301c44e9cdb8f72ab1c3c2e9bf7c2374a0f0a997318b0fe000000000000004932176db3acadbbfcae7eaebca9323c58a110ee55ff7c8b7c7d67c7e2ee2ccbd7273fe758ae2ed912d8310375de1049b2c16e9d0f8d1f78c1e99cec96547548778772fa9cc8f9a44685d1c07990bfd435fef575cc077f9be83c1a180efca81dfca5be6d079fc99a176509f4cbc7444ff57082d29155891ec05be90a5671d19292ef6c5a22bbd15be007ea364f8b67034348a772d0f7c1229fc4a004d72001e35536fa26452fba424c81558fcbe5e9b602d22b93c100000000000000"], 0x1fb}}], 0x1, 0x0) r6 = geteuid() getpeername$packet(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0xfffffffffffffff2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@ipv4={[], [], @remote}, @empty, @ipv4={[], [], @multicast1}, 0x5ec7, 0x20, 0x2, 0x0, 0x2, 0x1400000, r7}) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl(r8, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000680)='map_files\x00') getdents(r10, &(0x7f00000002c0)=""/127, 0x7f) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@dev, @in6=@dev}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x1db) setresuid(r6, r11, r4) sendto$inet(r2, &(0x7f00000008c0)="2f991461c8eac6571e27d9da8e9f983ba2f888dd28b4e928d1434006fdd37213214185ab884b00dd178dfe0979d18c26c47f1fb021eaeb2b5d08ca3b719bc02c50800a50da9e7a6a3eb21bb33baeafd549ea7cf54035792d707a3f6d793e0473b50e4adef35303074394687440b9bfd217288e04ea55fd9d43218a1630333c89b564b0facf702e244861929588cd72b6cb27a00b3e6ccefc893fb094d4f1641488bf1d600e1e58632bae386aa02b283c5c3de75b19399b61557df2a1580232b080e637ea31ca2a1ec9d93637f4685ff91760c90e8c5f0fefa01c2880538de8f78b5e738cd32ba48d0841b0", 0xeb, 0x4008000, &(0x7f0000000400)={0x2, 0x14e23}, 0x10) socket(0x200000000010, 0x2, 0x0) 02:21:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x100, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) [ 77.093765] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.145307] IPVS: length: 193 != 8 02:21:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x2) accept$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) shutdown(r1, 0x0) 02:21:10 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000001140)=0x18) 02:21:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000300)={@multicast1, @multicast2}, &(0x7f0000000340)=0xc) 02:21:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) 02:21:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 02:21:10 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 02:21:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x100, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 02:21:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:10 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000300)={@multicast1, @multicast2}, &(0x7f0000000340)=0xc) 02:21:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @loopback, @loopback}, 0xc) 02:21:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 02:21:10 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 02:21:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x100, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 02:21:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:10 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) [ 77.937883] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:21:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:11 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3}) 02:21:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000300)={@multicast1, @multicast2}, &(0x7f0000000340)=0xc) 02:21:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x100, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 02:21:11 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r3) dup3(r1, r2, 0x0) 02:21:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:11 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:11 executing program 1: prctl$void(0x21) 02:21:11 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:11 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 02:21:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:11 executing program 1: prctl$void(0x21) 02:21:11 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)=':em1{systemmd5sumcgroup\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='md5sum!^(*-,\x00', 0xd, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0)='md5sum!^(*-,\x00', 0xd, 0x0) 02:21:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:12 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 02:21:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:12 executing program 1: prctl$void(0x21) 02:21:12 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r3) dup3(r1, r2, 0x0) 02:21:12 executing program 1: prctl$void(0x21) 02:21:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:12 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:12 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 02:21:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/101, 0xffaa, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 02:21:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:12 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/53, 0x35}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b40), 0x0, 0xfffffffffffffffc) 02:21:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r3) dup3(r1, r2, 0x0) 02:21:13 executing program 0: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 02:21:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0x10, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 02:21:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:13 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peekuser(0x3, r1, 0x0) 02:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:13 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000), 0x1d) 02:21:13 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peekuser(0x3, r1, 0x0) 02:21:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={&(0x7f00000001c0), 0xc, &(0x7f00000013c0)={&(0x7f0000004b00)=@ipv4_getnetconf={0x14, 0x52, 0x303}, 0x14}}, 0x0) read(r0, &(0x7f00000000c0)=""/144, 0x90) 02:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0x10, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 02:21:13 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peekuser(0x3, r1, 0x0) 02:21:13 executing program 7: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10f, 0x82, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 02:21:13 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 02:21:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r3) dup3(r1, r2, 0x0) 02:21:14 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000), 0x1d) 02:21:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0x10, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 02:21:14 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$peekuser(0x3, r1, 0x0) 02:21:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 02:21:14 executing program 7: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10f, 0x82, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 02:21:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 02:21:14 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000), 0x1d) 02:21:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000faffffffffffffff00000000000000000000000038000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000010000"], 0xa0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001640)=""/116, 0x74}, {&(0x7f00000016c0)=""/209, 0xd1}], 0x2, &(0x7f00000002c0)=""/201, 0xc9}, 0x0) 02:21:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0x10, 0x1, 'erspan\x00'}, {0x4}}}]}, 0x34}}, 0x0) 02:21:14 executing program 7: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10f, 0x82, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 02:21:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 02:21:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000faffffffffffffff00000000000000000000000038000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000010000"], 0xa0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001640)=""/116, 0x74}, {&(0x7f00000016c0)=""/209, 0xd1}], 0x2, &(0x7f00000002c0)=""/201, 0xc9}, 0x0) 02:21:15 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000000), 0x1d) 02:21:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) 02:21:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 02:21:15 executing program 7: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000001ff8)={0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x10f, 0x82, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 02:21:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0)=[@cr4={0x1, 0xb987a233691e0619}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:21:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffdfd, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000001c0)) 02:21:15 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 02:21:15 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 02:21:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 02:21:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000faffffffffffffff00000000000000000000000038000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000010000"], 0xa0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001640)=""/116, 0x74}, {&(0x7f00000016c0)=""/209, 0xd1}], 0x2, &(0x7f00000002c0)=""/201, 0xc9}, 0x0) 02:21:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x11}, 0x20) [ 82.525543] XFS (loop1): Invalid superblock magic number 02:21:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) 02:21:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 02:21:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 02:21:15 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 02:21:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) 02:21:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x11}, 0x20) [ 82.675418] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 02:21:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="f20fbcbd0080000066b81f008ec8c4e205bcab27000000b8d13200000f23d80f21f835000000900f23f8c4e2fdb80d0b00000066baf80cb8bc068586ef66bafc0cec660f38820265f2af0fd2c9b8000001000f23c80f21f8350000b0000f23f8", 0x60}], 0x1, 0x80000037, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{}, {0x0, 0x0, 0x0, 0x0, 0x5}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:21:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) 02:21:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000faffffffffffffff00000000000000000000000038000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000010000"], 0xa0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001640)=""/116, 0x74}, {&(0x7f00000016c0)=""/209, 0xd1}], 0x2, &(0x7f00000002c0)=""/201, 0xc9}, 0x0) 02:21:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 02:21:15 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x49, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 02:21:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x11}, 0x20) 02:21:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 02:21:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) 02:21:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) [ 82.934550] *** Guest State *** [ 82.938133] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 82.947066] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 82.955973] CR3 = 0x0000000000000000 [ 82.959767] RSP = 0x0000000000000f80 RIP = 0x0000000000008000 [ 82.965788] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 82.971806] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 82.978512] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 82.986537] DS: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 82.994619] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 83.002640] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 83.010662] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 83.018700] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 83.026720] GDTR: limit=0x00000000, base=0x0000000000000000 [ 83.034749] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 83.042765] IDTR: limit=0x00000000, base=0x0000000000000000 [ 83.050838] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 83.058878] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 83.065333] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 83.072861] Interruptibility = 00000008 ActivityState = 00000000 [ 83.079254] *** Host State *** 02:21:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x11}, 0x20) 02:21:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) [ 83.082505] RIP = 0xffffffff811f3d34 RSP = 0xffff88019c747350 [ 83.088522] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 83.094992] FSBase=00007f7207772700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 83.102882] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 83.108834] CR0=0000000080050033 CR3=00000001ac284000 CR4=00000000001426e0 [ 83.115894] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 83.122971] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 83.129071] *** Control State *** 02:21:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x812, r1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400003, 0x8032, 0xffffffffffffffff, 0x0) 02:21:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x65, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x3f8, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)="6e76004ee6d8fc4396cfbcbf929fcd456fa6ac054ba9043a13484265f6da610b85a725457a29c09cdbadaf488bf8dd700ad0d5b599f94becd6bcaed57fadd2b8a94c4480979472b77f977f85284901aeb5e4c56b5562b198", 0x57) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) [ 83.132579] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 83.139281] EntryControls=0000d1ff ExitControls=0023efff [ 83.144782] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 83.151754] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 83.158474] VMExit: intr_info=00000000 errcode=00000000 ilen=00000006 [ 83.165087] reason=80000021 qualification=0000000000000000 [ 83.171488] IDTVectoring: info=00000000 errcode=00000000 [ 83.177006] TSC Offset = 0xffffffd0d706d9ea [ 83.181385] EPT pointer = 0x00000001a936501e 02:21:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) ftruncate(r1, 0x7) 02:21:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x200000002f, 0x2) 02:21:15 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000100), 0xd, &(0x7f0000017ff0)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5cb2bd000000ff000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) [ 83.309463] WARNING: kernel stack regs at 000000002546cb50 in syz-executor2:7023 has bad 'bp' value 00000000a7a8faf1 [ 83.309473] unwind stack type:0 next_sp:000000008be51533 mask:0x20 graph_idx:0 [ 83.309485] 00000000d57297fd: fffffe0000039740 (0xfffffe0000039740) [ 83.309503] 00000000dcbbc84e: ffffffff812d399d (__save_stack_trace+0x7d/0xf0) [ 83.309508] 00000000010d430a: 0000000000000000 ... [ 83.309517] 000000004ea50471: fffffe0000038000 (0xfffffe0000038000) [ 83.309525] 000000002589c2d4: fffffe000003a000 (0xfffffe000003a000