[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.716645][ T32] audit: type=1800 audit(1569580744.783:25): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.739897][ T32] audit: type=1800 audit(1569580744.803:26): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.777145][ T32] audit: type=1800 audit(1569580744.833:27): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts. 2019/09/27 10:39:17 fuzzer started 2019/09/27 10:39:22 dialing manager at 10.128.0.26:42599 2019/09/27 10:39:24 syscalls: 2382 2019/09/27 10:39:24 code coverage: enabled 2019/09/27 10:39:24 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/27 10:39:24 extra coverage: enabled 2019/09/27 10:39:24 setuid sandbox: enabled 2019/09/27 10:39:24 namespace sandbox: enabled 2019/09/27 10:39:24 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/27 10:39:24 fault injection: enabled 2019/09/27 10:39:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/27 10:39:24 net packet injection: enabled 2019/09/27 10:39:24 net device setup: enabled 10:41:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) syzkaller login: [ 222.644377][T12464] IPVS: ftp: loaded support on port[0] = 21 [ 222.787351][T12464] chnl_net:caif_netlink_parms(): no params data found [ 222.845471][T12464] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.853037][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.861999][T12464] device bridge_slave_0 entered promiscuous mode [ 222.872935][T12464] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.880904][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.891335][T12464] device bridge_slave_1 entered promiscuous mode [ 222.925404][T12464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.939345][T12464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.973367][T12464] team0: Port device team_slave_0 added [ 222.984812][T12464] team0: Port device team_slave_1 added [ 223.178830][T12464] device hsr_slave_0 entered promiscuous mode [ 223.434953][T12464] device hsr_slave_1 entered promiscuous mode [ 223.634936][T12464] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.642839][T12464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.651177][T12464] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.659005][T12464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.740304][T12464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.761713][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.778315][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.789845][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.805052][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 223.826636][T12464] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.842829][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.853138][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.863088][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.870509][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.915254][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.925125][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.935262][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.943009][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.952751][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.963212][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.973685][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.983838][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.994013][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.004268][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.014617][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.025540][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.039343][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.049143][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.059338][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.073799][T12464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.123251][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0 10:41:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 10:41:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 10:41:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) 10:41:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) 10:41:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) 10:41:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) 10:41:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) 10:41:26 executing program 0: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)={0x18, 0x4, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2000000000000001, 0x1c}, 0x3c) 10:41:26 executing program 0: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)={0x18, 0x4, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2000000000000001, 0x1c}, 0x3c) 10:41:26 executing program 0: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)={0x18, 0x4, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2000000000000001, 0x1c}, 0x3c) 10:41:26 executing program 0: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)={0x18, 0x4, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12000000], 0x0, 0xffffffffffffffff, 0x2000000000000001, 0x1c}, 0x3c) 10:41:26 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 10:41:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)={0x20, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x5, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 10:41:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)={0x20, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x5, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 10:41:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)={0x20, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x5, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 10:41:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)={0x20, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x5, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 10:41:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) [ 225.785058][T12524] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 10:41:26 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setpgid(r7, 0x0) 10:41:27 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setpgid(r7, 0x0) 10:41:27 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setpgid(r7, 0x0) 10:41:27 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setpgid(r7, 0x0) 10:41:27 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 10:41:27 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setpgid(r7, 0x0) 10:41:28 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 227.147545][T12564] IPVS: ftp: loaded support on port[0] = 21 [ 227.366153][T12564] chnl_net:caif_netlink_parms(): no params data found 10:41:28 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) [ 227.451949][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.459546][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.468351][T12564] device bridge_slave_0 entered promiscuous mode [ 227.496891][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.504332][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.513091][T12564] device bridge_slave_1 entered promiscuous mode [ 227.545940][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.559552][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.607995][T12564] team0: Port device team_slave_0 added [ 227.618059][T12564] team0: Port device team_slave_1 added 10:41:28 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) pkey_alloc(0x0, 0x0) [ 227.667982][T12564] device hsr_slave_0 entered promiscuous mode [ 227.705063][T12564] device hsr_slave_1 entered promiscuous mode [ 227.735588][T12564] debugfs: Directory 'hsr0' with parent '/' already present! [ 227.775365][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.782624][T12564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.790440][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.797911][T12564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.922340][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.949418][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.960528][ T31] bridge0: port 1(bridge_slave_0) entered disabled state 10:41:29 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) [ 227.987170][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.000937][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 228.037383][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.063042][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.073008][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.080992][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.146898][T12564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.157634][T12564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.177227][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.187109][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.194674][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.205088][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.215067][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.224955][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.234594][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.289439][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 10:41:29 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) [ 228.347804][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.356916][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:41:29 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") gettid() 10:41:29 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") r7 = gettid() prctl$PR_SET_FPEXC(0xc, 0x20000) tkill(r7, 0x26) r8 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 10:41:30 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") 10:41:30 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") gettid() 10:41:30 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:41:30 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000001380)="9315d243ad0367d629228b1541da3b807e08ad28962a368e822404807317c5f9bed45cda11230acd74044430706f44e708dccf38a8b680f28a943746302fbe58fc7a37ec084274fb010955e2e89483dbbef79d5796f454154675eda90e3cc02dc4c8397614ae7904ef") gettid() 10:41:30 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)) 10:41:30 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 10:41:30 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) 10:41:31 executing program 1: r0 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x0, 0x400}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000080)=0x3ff) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) 10:41:31 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 10:41:31 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) 10:41:31 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:41:31 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) [ 230.714586][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.715027][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 230.721732][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.728235][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:41:31 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) 10:41:32 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) read$FUSE(r4, &(0x7f00000011c0), 0x1000) getsockopt$inet_tcp_buf(r4, 0x6, 0x3d, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) clone(0xa047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x26}, r5}, 0x14) 10:41:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000006910440000000000d60000000000000095000000000000000deee6282a2c8e20bd270224de47317c59e63c3e8e6bb6667903fefff3fb195fc7f3ce18cf98758b2688efe58f9229884588e5e4bda7af049dbf794ad23fae68de79898e1e95eb926ad2e65c11c25b8c7c8bd66c8e4ba34da63e3c072ea5f2ff282dfb3ab4a9e0d4f7ff7f0000000000009a8310f52dc3db14afabbca70ebb393ecc21eb1ac5edf2948deda72411722b3fdbed6f28cd5417b2fcaa1b"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 10:41:32 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) read$FUSE(r4, &(0x7f00000001c0), 0x1000) 10:41:32 executing program 1: 10:41:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x100000001) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0x40, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080001000500000008003e1bc4b62c5d1c7f2cdd94a31dcebc6fb88cdcf6722bc18f854a2ab876b21eb80ae3f2497aa8df0ff22b0086f02d0d10384a822e88e5f159f9638eda515f9c6b4a93f33075be41a7204330db687333c3e869da8cd3ec3295c138c8f545238c392248af8cb1d03f03153d01939c0adbbbb9d2194c4a1f2d737a45be2403520cc2705a93b56853cf5e74290b3c784f355476f665d380deed2a8074ec56a00eb9490d348a8f2c2cfd71fc", @ANYRES32, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) 10:41:32 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x0) [ 231.654620][T12735] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 231.665214][T12735] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 231.673736][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 10:41:32 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) [ 231.874654][ T966] Bluetooth: Error in BCSP hdr checksum 10:41:33 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100), 0x8) [ 232.136477][ T966] Bluetooth: Error in BCSP hdr checksum 10:41:33 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001400)=ANY=[], &(0x7f0000001440)) 10:41:33 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) 10:41:33 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 10:41:34 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) r3 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 10:41:34 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x80000000000000, 0x4, 0x100000001, 0x6, 0xa}) rt_sigpending(&(0x7f0000000080), 0x8) r1 = geteuid() r2 = getegid() write$FUSE_ATTR(r0, &(0x7f00000000c0)={0x78, 0x0, 0x3, {0x33f9, 0x8000, 0x0, {0x3, 0x6, 0xffffffffffff0001, 0x4, 0x1000, 0x4, 0xffff, 0x952, 0x80000001, 0x81, 0x101, r1, r2, 0x8, 0xc3d}}}, 0x78) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x8001, 0x200) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0), 0x10) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0xa9) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000280)=""/152) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x1, 0x3}, 0x10) r7 = open(&(0x7f00000003c0)='./file0\x00', 0x40, 0x10) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000400)=0x3) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xfffffffffffffff7, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000480)={0xe0e, r9}) r10 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4000) ioctl$DRM_IOCTL_IRQ_BUSID(r10, 0xc0106403, &(0x7f0000000500)={0xfffffff8, 0x3, 0x7f, 0x3}) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000540)='/dev/audio\x00', 0x0, 0x0) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm-control\x00', 0x10100, 0x0) r13 = syz_open_dev$mouse(&(0x7f00000008c0)='/dev/input/mouse#\x00', 0x4, 0x400) r14 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r16 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/attr/exec\x00', 0x2, 0x0) r20 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x80000) r21 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/ppp\x00', 0xc6588ca0507470d7, 0x0) r22 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000b00)='cpu.weight.nice\x00', 0x2, 0x0) sendmsg$unix(r11, &(0x7f0000000c00)={&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000600)="6a28198223d4318344e2c73d93cf52c47b924dbb942bc860d82a1672390e", 0x1e}, {&(0x7f0000000640)="f907afc8ea21aae3632ddd760d2703fb80f5a6eef57cc5407e9c7752c858f656ddbb91bfd2b2fb8aa8da4880c88250027668157a807f", 0x36}, {&(0x7f0000000680)="26950732fdc799045c563b041c280661aefc5f1c4f649486081c8aca70903eebb1749c7f704ccb00bdf439421221fd2eee3282b46c1b234adc3ce09956d435e6575c02b219914a9a470761e19d562690ef47749a2af16fb8b2a218daa5e2c8e45f54de472b36b21127", 0x69}, {&(0x7f0000000700)="2c8028fe74e0c4241e7a063e3f95d82083bd133bf6b00e47facc43473e3b02a5bf9b7a4fc43c69f6a93d22e16c3965f63e2aa7bda68238e5fd799276a1ea5ba136a3e9227ba98c0a6e7ee0fe3fcf9f3669eb83829dded73e0f0007ad5786c91332422a50b9ab107d1f3ce74894b8f0b045bd30cb22d2bc541f17d47ccbcce273cc80390f2689f3e73dba7a78b6a59cd0bc84e422db54f6229ecd49abf9b9c1e931", 0xa1}], 0x4, &(0x7f0000000b40)=[@rights={{0x24, 0x1, 0x1, [r12, r6, r13, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r14, r1, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [r19, r20, r21, r22, 0xffffffffffffffff]}}], 0x90, 0x80}, 0x40000) 10:41:34 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) socket$inet6(0xa, 0x100000000000001, 0x84) 10:41:34 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x4, 0x1) [ 233.578892][T12787] IPVS: ftp: loaded support on port[0] = 21 [ 233.674710][ T2870] Bluetooth: hci1: command 0x1003 tx timeout [ 233.684652][T12734] Bluetooth: hci1: sending frame failed (-49) [ 233.693634][ T2870] Bluetooth: hci0: command 0x1003 tx timeout [ 233.701495][T12734] Bluetooth: hci0: sending frame failed (-49) [ 233.756523][T12787] chnl_net:caif_netlink_parms(): no params data found [ 233.816811][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.825227][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.834717][T12787] device bridge_slave_0 entered promiscuous mode [ 233.860091][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.868586][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.878180][T12787] device bridge_slave_1 entered promiscuous mode 10:41:35 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000200000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7fff, 0x480) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x131, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$inet6(0xa, 0x100000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x6c, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) [ 233.944957][T12787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.971091][T12787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.037329][T12787] team0: Port device team_slave_0 added [ 234.055099][T12787] team0: Port device team_slave_1 added [ 234.091392][T12787] device hsr_slave_0 entered promiscuous mode [ 234.124624][T12787] device hsr_slave_1 entered promiscuous mode [ 234.135749][T12787] debugfs: Directory 'hsr0' with parent '/' already present! [ 234.201944][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.209743][T12787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.218132][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.225788][T12787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.325278][T12787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.348192][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.359793][ T2870] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.371594][ T2870] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.389419][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 234.412887][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.433553][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.443425][ T2870] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.451423][ T2870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.516274][T12787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.529304][T12787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.550060][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.561349][ T2870] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.570294][ T2870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.581770][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.592595][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.605573][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.616767][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.627962][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.638132][ T2870] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.688966][T12787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.755673][ T2870] Bluetooth: hci0: command 0x1001 tx timeout [ 235.763069][T12734] Bluetooth: hci0: sending frame failed (-49) [ 235.772618][ T2870] Bluetooth: hci1: command 0x1001 tx timeout [ 235.779779][T12734] Bluetooth: hci1: sending frame failed (-49) [ 237.834483][ T2870] Bluetooth: hci1: command 0x1009 tx timeout [ 237.842481][ T2870] Bluetooth: hci0: command 0x1009 tx timeout [ 241.677003][T12729] ================================================================== [ 241.686064][T12729] BUG: KMSAN: uninit-value in kfree_skb+0x23c/0x4c0 [ 241.693249][T12729] CPU: 0 PID: 12729 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 241.701171][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.711864][T12729] Call Trace: [ 241.715404][T12729] dump_stack+0x191/0x1f0 [ 241.720011][T12729] kmsan_report+0x162/0x2d0 [ 241.724529][T12729] __msan_warning+0x75/0xe0 [ 241.730103][T12729] kfree_skb+0x23c/0x4c0 [ 241.734620][T12729] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 241.741999][T12729] bcsp_close+0x127/0x1e0 [ 241.746425][T12729] ? bcsp_open+0x5d0/0x5d0 [ 241.750829][T12729] hci_uart_tty_close+0x385/0x410 [ 241.755854][T12729] ? hci_uart_tty_open+0x5a0/0x5a0 [ 241.761125][T12729] tty_ldisc_release+0x5dd/0xdb0 [ 241.766660][T12729] tty_release_struct+0x4f/0x1d0 [ 241.771810][T12729] ? tty_unlock+0x82/0x100 [ 241.776416][T12729] tty_release+0x1be2/0x1e80 [ 241.781018][T12729] ? tty_release_struct+0x1d0/0x1d0 [ 241.786450][T12729] __fput+0x4c9/0xba0 [ 241.790514][T12729] ____fput+0x37/0x40 [ 241.794845][T12729] ? fput_many+0x2a0/0x2a0 [ 241.799344][T12729] task_work_run+0x22e/0x2a0 [ 241.803954][T12729] prepare_exit_to_usermode+0x39d/0x4d0 [ 241.809901][T12729] syscall_return_slowpath+0x90/0x610 [ 241.815778][T12729] do_syscall_64+0xe2/0xf0 [ 241.820477][T12729] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 241.828996][T12729] RIP: 0033:0x413711 [ 241.833205][T12729] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 241.854235][T12729] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 241.863570][T12729] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413711 [ 241.871680][T12729] RDX: 0000000000000000 RSI: 000000000000021d RDI: 0000000000000004 [ 241.879679][T12729] RBP: 0000000000000001 R08: 000000001473c21d R09: 000000001473c221 [ 241.888065][T12729] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0 [ 241.896044][T12729] R13: 000000000075c9a0 R14: 0000000000760c60 R15: 000000000075c07c [ 241.904038][T12729] [ 241.906550][T12729] Uninit was created at: [ 241.910795][T12729] kmsan_internal_poison_shadow+0x58/0xb0 [ 241.916528][T12729] kmsan_slab_free+0x8d/0x100 [ 241.921349][T12729] kmem_cache_free+0x2d1/0x2b70 [ 241.926206][T12729] kfree_skb+0x473/0x4c0 [ 241.930619][T12729] __netif_receive_skb_core+0x4a5a/0x51a0 [ 241.936900][T12729] process_backlog+0x612/0x1410 [ 241.942220][T12729] net_rx_action+0x74b/0x1950 [ 241.947027][T12729] __do_softirq+0x4a1/0x83a [ 241.951669][T12729] irq_exit+0x230/0x280 [ 241.956149][T12729] exiting_irq+0xe/0x10 [ 241.960665][T12729] smp_apic_timer_interrupt+0x48/0x70 [ 241.966237][T12729] apic_timer_interrupt+0x2e/0x40 [ 241.971340][T12729] kmsan_get_shadow_origin_ptr+0x0/0x4c0 [ 241.977062][T12729] sha256_generic_block_fn+0x278f/0x8870 [ 241.983262][T12729] crypto_sha256_update+0x3f6/0x480 [ 241.988463][T12729] crypto_shash_update+0x4eb/0x550 [ 241.993568][T12729] ima_calc_file_hash+0x170a/0x3240 [ 241.998843][T12729] ima_collect_measurement+0x4a5/0x9e0 [ 242.004546][T12729] process_measurement+0x1a7d/0x2ba0 [ 242.009815][T12729] ima_file_check+0x131/0x170 [ 242.014497][T12729] path_openat+0x4b09/0x6bb0 [ 242.019103][T12729] do_filp_open+0x2b8/0x710 [ 242.023626][T12729] do_sys_open+0x642/0xa30 [ 242.028190][T12729] __se_sys_openat+0xcb/0xe0 [ 242.032768][T12729] __x64_sys_openat+0x56/0x70 [ 242.037801][T12729] do_syscall_64+0xbc/0xf0 [ 242.042433][T12729] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 242.048322][T12729] ================================================================== [ 242.056696][T12729] Disabling lock debugging due to kernel taint [ 242.063314][T12729] Kernel panic - not syncing: panic_on_warn set ... [ 242.070024][T12729] CPU: 0 PID: 12729 Comm: syz-executor.1 Tainted: G B 5.3.0-rc7+ #0 [ 242.079408][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.089683][T12729] Call Trace: [ 242.093550][T12729] dump_stack+0x191/0x1f0 [ 242.097888][T12729] panic+0x3c9/0xc1e [ 242.102036][T12729] kmsan_report+0x2ca/0x2d0 [ 242.106841][T12729] __msan_warning+0x75/0xe0 [ 242.111893][T12729] kfree_skb+0x23c/0x4c0 [ 242.116702][T12729] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 242.122682][T12729] bcsp_close+0x127/0x1e0 [ 242.127165][T12729] ? bcsp_open+0x5d0/0x5d0 [ 242.131711][T12729] hci_uart_tty_close+0x385/0x410 [ 242.137347][T12729] ? hci_uart_tty_open+0x5a0/0x5a0 [ 242.142845][T12729] tty_ldisc_release+0x5dd/0xdb0 [ 242.147989][T12729] tty_release_struct+0x4f/0x1d0 [ 242.153017][T12729] ? tty_unlock+0x82/0x100 [ 242.157679][T12729] tty_release+0x1be2/0x1e80 [ 242.162468][T12729] ? tty_release_struct+0x1d0/0x1d0 [ 242.167747][T12729] __fput+0x4c9/0xba0 [ 242.171730][T12729] ____fput+0x37/0x40 [ 242.175707][T12729] ? fput_many+0x2a0/0x2a0 [ 242.180221][T12729] task_work_run+0x22e/0x2a0 [ 242.184827][T12729] prepare_exit_to_usermode+0x39d/0x4d0 [ 242.190367][T12729] syscall_return_slowpath+0x90/0x610 [ 242.195758][T12729] do_syscall_64+0xe2/0xf0 [ 242.200186][T12729] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 242.206072][T12729] RIP: 0033:0x413711 [ 242.209955][T12729] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 242.230393][T12729] RSP: 002b:0000000000a6fbf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 242.238826][T12729] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000413711 [ 242.247243][T12729] RDX: 0000000000000000 RSI: 000000000000021d RDI: 0000000000000004 [ 242.255207][T12729] RBP: 0000000000000001 R08: 000000001473c21d R09: 000000001473c221 [ 242.263586][T12729] R10: 0000000000a6fcd0 R11: 0000000000000293 R12: 000000000075c9a0 [ 242.271846][T12729] R13: 000000000075c9a0 R14: 0000000000760c60 R15: 000000000075c07c [ 242.282586][T12729] Kernel Offset: disabled [ 242.286965][T12729] Rebooting in 86400 seconds..