[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.279632] kauditd_printk_skb: 4 callbacks suppressed [ 54.279659] audit: type=1800 audit(1545337643.345:29): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 54.304453] audit: type=1800 audit(1545337643.355:30): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. 2018/12/20 20:27:35 fuzzer started 2018/12/20 20:27:40 dialing manager at 10.128.0.26:46613 2018/12/20 20:27:40 syscalls: 1 2018/12/20 20:27:40 code coverage: enabled 2018/12/20 20:27:40 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 20:27:40 setuid sandbox: enabled 2018/12/20 20:27:40 namespace sandbox: enabled 2018/12/20 20:27:40 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 20:27:40 fault injection: enabled 2018/12/20 20:27:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 20:27:40 net packet injection: enabled 2018/12/20 20:27:40 net device setup: enabled 20:30:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x50323234, 0x0, @stepwise}) syzkaller login: [ 228.629674] IPVS: ftp: loaded support on port[0] = 21 [ 230.025291] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.031894] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.040225] device bridge_slave_0 entered promiscuous mode [ 230.123836] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.130385] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.138857] device bridge_slave_1 entered promiscuous mode [ 230.220753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.302702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.560669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.653129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.744384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.751399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.837657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.844712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.111891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.120515] team0: Port device team_slave_0 added [ 231.203435] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.212100] team0: Port device team_slave_1 added [ 231.295301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.385298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.472213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.479849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.489196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.574268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.581973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.591202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 20:30:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000240)={0x8}) close(r0) [ 232.372299] IPVS: ftp: loaded support on port[0] = 21 [ 232.953456] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.960027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.967306] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.973887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.983245] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.989755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.929153] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.935795] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.944221] device bridge_slave_0 entered promiscuous mode [ 235.076219] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.082893] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.091106] device bridge_slave_1 entered promiscuous mode [ 235.234253] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 235.354716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.811960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 235.897771] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 236.482034] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 236.490613] team0: Port device team_slave_0 added [ 236.665535] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 236.674252] team0: Port device team_slave_1 added [ 236.844300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 20:30:26 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x200400, 0xf, 0x3}) [ 237.032463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.054215] ip (6771) used greatest stack depth: 53736 bytes left [ 237.173456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 237.181116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.190228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.369140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 237.376941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.386284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.602807] IPVS: ftp: loaded support on port[0] = 21 [ 238.926119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.305492] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.312129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.319266] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.325905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.335961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.547648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.028814] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.035537] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.044032] device bridge_slave_0 entered promiscuous mode [ 240.145157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.151488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.159752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.202615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.222309] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.228885] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.239774] device bridge_slave_1 entered promiscuous mode [ 240.386811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.466978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.877486] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.013440] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 241.203525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 241.352120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.359138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.514124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.521129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.069029] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 242.077761] team0: Port device team_slave_0 added [ 242.233707] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 242.242971] team0: Port device team_slave_1 added [ 242.419249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.426468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.435495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.630744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 242.637854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.647371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.801497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.809489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.818703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.019610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 243.027312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.036558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.536164] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.542790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.549910] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.556547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.565763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.572373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:30:33 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x50323234, 0x0, @stepwise}) 20:30:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x50323234, 0x0, @stepwise}) 20:30:34 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x50323234, 0x0, @stepwise}) 20:30:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 20:30:34 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='cpu&0xa\x00\x00\x00\x01\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xf8.- \x00|\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') 20:30:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x38}}, 0x0) [ 245.864251] IPVS: ftp: loaded support on port[0] = 21 20:30:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xffff800000000000, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180), 0x8) [ 246.664652] 8021q: adding VLAN 0 to HW filter on device bond0 20:30:36 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x2, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x1011, 0xa, 0x0) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x4e23, 0x8a, @dev={0xfe, 0x80, [], 0x1d}, 0x4}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x4}]]}}}]}, 0x3c}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)={{0xcc, 0x3, 0x1, 0x11c, 0x366, 0x80000000, 0x3ce, 0x53c5}, "b0239978ce3f3cfea46ecb0626b8c96e1dbd2730e8afa6909dce9fe28eca7da4809d281239cb7c5bcf5af9caeeea1a1a24396561a198ff5112b604718625de88397d85912c8266ae4653c8c48aaa3326b670d454f5016d30b7d5e72e348012f133fe2d87d038209885ef897b4312d6569a92f5eebd0fd98d1abd791a2956474a972db0e041a44a94ea6cae325cdd269efa408c2506d756925f3d3442a1cca68fff394e82feb360edfe49b04847d6f8ead9d5aa3c6aa9dcd6f2", [[], [], [], [], [], [], []]}, 0x7d9) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:30:36 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x15}, 0x4}, 0x1c) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x82ccae36392e6153, r0}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000300)=""/89) socket$inet6(0xa, 0x80807, 0x80000001) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000002c0)=0x8, 0x4) write$P9_RCLUNK(r0, &(0x7f00000001c0)={0x7, 0x79, 0x2}, 0x7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r1, 0x80000, r0}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x0, 0x1, [0x0]}, &(0x7f0000000140)=0xa) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2f5}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) ioctl$BLKRRPART(r0, 0x125f, 0x0) 20:30:36 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/17, 0x11) [ 247.544436] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.265212] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.271536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.279478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.925960] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.029671] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.036315] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.044591] device bridge_slave_0 entered promiscuous mode [ 249.243394] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.249964] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.258262] device bridge_slave_1 entered promiscuous mode [ 249.400118] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 249.587277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 250.036486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 250.200365] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 250.371108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 250.378488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.610141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 250.617209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.076009] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 251.084803] team0: Port device team_slave_0 added [ 251.199196] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 251.207918] team0: Port device team_slave_1 added [ 251.411476] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 251.418552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.427456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.615600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 251.622763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.631551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.791142] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 251.798878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.808144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.053995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.061593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.070693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.127054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.682262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:30:42 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0)="99f39c094567f98108e8194336a3b54c2bfe32f2ac957804a23c9b091b542683937233d0c5f59e79b5b2af9a12a8eb5fbbbb052f34b299306d018133ed8955ca6d6d8dbf663306a89ab9702d67d79dff098fa57e75d3806951ce527e11a444d645b987e12a454c32307f64a3cc655e669e8721bb45f465a3dc79e9cd539d50e38276e1dcf3d9e70d89333afe6154cfeed435bfc3c07e04af2d462112", 0x9c, r0}, 0x68) getgid() ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000140)=""/136, 0xc8, &(0x7f0000000280)=""/200}) [ 253.432482] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 253.438817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.446808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.708310] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.714957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.722167] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.728739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.737931] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 254.120315] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.483484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:30:46 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt(r0, 0x114, 0x2713, 0x0, &(0x7f000033bffc)) 20:30:46 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) r2 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000740)={0xa0, 0x0, 0x1, {{0x0, 0x3, 0x69, 0x5, 0x2, 0x7fffffff, {0x6, 0x81, 0x2, 0x1, 0x5, 0x5fc9, 0x2, 0x0, 0x68, 0x2, 0x1, r1, r2, 0x9f36, 0x5}}, {0x0, 0x4}}}, 0xa0) r3 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x40800) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000300)={0x8, 0x5, 0x69dd0e55, 0xc8b, '\x00', 0xffff}) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000640)=0x18000) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x11c, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc39}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x184}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10f4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x50}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}]}, 0x11c}}, 0x20000004) write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0x9) ftruncate(r4, 0x1) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000001c0)=""/223) fsetxattr(r3, &(0x7f00000003c0)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)='TIPCv2\x00', 0x7, 0x1) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000800)=""/236, 0x1000, 0x1800, 0x9}, 0x18) truncate(&(0x7f0000000100)='./bus\x00', 0x0) 20:30:46 executing program 1: r0 = inotify_init() fcntl$setpipe(r0, 0x407, 0x1f) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x105040, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0xffffffffffffff7f) accept$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) r2 = socket$inet6(0xa, 0x3, 0x3c) write(r2, &(0x7f0000000280)="331904020037f3c38915a97b9f89a1e5d197746e399eb35a0ad1627c9870b9f91b3878523e6238401579a755187b93058048be44e8bab37b665697f253670bdca6a28eeb22e9ee4ae4bd6df40370284be397c52ed6a5cef2e8f1e0ea6ffbdd75a82d87b3bad6c54130c4fc934f8a632e43325e3e13bd86ae7a15840ef282eabfda4353ba6bed5bd074c4961eb7ba3e7e5d6da5c787bef8ffff64834afe124dcbc034b138b09612f8d5a57f898aeae51b040200000000000000ee1525040800000000000000e5cba9f75bc74c08544b1ac35afaefedeb994a1de2e21ed78c3164076206febd0d069e5b3940f3fb9c6a0e4b9b7e8df8b825370700f79f95b4b8d751bebd3f99d37da678e84c2771ac517662677b20c3ad7fdf59410ad6762d8f9756f52def6f4c502de6aa33d12e7c9107e3c7f1558f4c58c315bfed937da918c6d911203ec763068d71509157e14c7c04617fbf1cc63a312fa9c80b634cd501a9fb5c1736214049736724d079eca5d18c0f8b6cdcfad59a80cafe4d1e321d73e46100eb6cf327820e76a1ff86395fe4bfe6a530dbef545ef0f47b77f16328ac05", 0x1a0) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000140)={0x6, 0x7, 0x5, 0x2, '\x00', 0xc660}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 20:30:46 executing program 4: r0 = memfd_create(&(0x7f0000000000)='system+\'\x00', 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x8, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x7}, 0x8) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000180)={0x9ea8, "096f770f991f2537b6330b6e4f226ec7263effbf2ec9d83a3a880a4f53d3fb5f", 0x2, 0x7fffffff, 0x1, 0x10, 0x2, 0x4}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x40000000, 0x5, "e7c1f1bdd946b4e1009e2df5b84d64594b07cb95876a89c0d389505909271744", 0x1ff, 0x4, 0x3b68, 0x2cb1d724, 0x5, 0x5, 0x9, 0xfff, [0x6, 0xd80, 0x1, 0x724]}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xf9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000440)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x69e, 0x7, 0x0, 0xffff, 0x1f, 0x3, 0x3e, 0x1, 0x16a, 0x38, 0x106, 0xfffffffffffffffd, 0x6, 0x20, 0x1, 0x5, 0xfffffffffffffffd, 0x1}, [{0x5, 0x8, 0x8000, 0x8, 0x7ff, 0x100000000000, 0x44dbb49d, 0x8000}, {0x7474e551, 0x1, 0x9, 0x9, 0x6, 0xf2, 0x3ff, 0x72}], "f9a9fb1b9e87", [[], [], [], [], [], [], [], [], [], []]}, 0xa7e) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000f00)={0x1ff, 0x4, 0x7fffffff, 0x34, 0x0, 0x8, 0x5, 0x401, 0x4, 0x0, 0x7}, 0xb) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000f40)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0x3, @empty, 0x101}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @broadcast}], 0x7c) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000fc0)=0xfffffffffffffff8, 0x4) readv(r0, &(0x7f0000001180)=[{&(0x7f0000001000)=""/9, 0x9}, {&(0x7f0000001040)=""/24, 0x18}, {&(0x7f0000001080)=""/221, 0xdd}], 0x3) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xd7) open_by_handle_at(r0, &(0x7f00000011c0)={0xdf, 0x4, "0cf2d8fa118f470daa689f102c1a12becf7b1406eeac3ec4089a7e7676736e6375f9594af02b2af2d6827ed14cceed7da0af68f8e7bd4e9fe0650aafc8c588197dc02dbda399a344480c30ec35654d9f9aac5b8f4ffdcf6c6c5e58ee60c9ec0a7e6e04fa773803abd12ef89e2f297328141f6a9676fa0af7f02e35f94cf716e1a007eb9c9d8cb215d9e53050e3b7bc66b88df34533215d3e7c857fa4bd76a714b432e2d721b512e4570f4bc8902728c78ea6bc3af1686c0c80e64012ac225eb48b40a607e63ec7bae0830c7d932aea190e59c4ef5d059f"}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001300)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001340)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001440)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000002cc0)={@dev, 0x0}, &(0x7f0000002d00)=0x14) clock_gettime(0x0, &(0x7f00000033c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f0000002d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002dc0)=""/160, 0xa0}, {&(0x7f0000002e80)=""/63, 0x3f}, {&(0x7f0000002ec0)=""/44, 0x2c}, {&(0x7f0000002f00)=""/174, 0xae}, {&(0x7f0000002fc0)=""/203, 0xcb}, {&(0x7f00000030c0)=""/31, 0x1f}, {&(0x7f0000003100)=""/214, 0xd6}], 0x7, &(0x7f0000003280)=""/220, 0xdc}, 0x80000001}], 0x1, 0x60, &(0x7f0000003400)={r7, r8+10000000}) getsockname$packet(r0, &(0x7f0000003480)={0x11, 0x0, 0x0}, &(0x7f00000034c0)=0x14) accept$packet(r0, &(0x7f0000003900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003940)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003a40)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000003b40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003b80)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000003c80)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003cc0)={'bpq0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000006340)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006180)=[{{&(0x7f0000003d40)=@ax25, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003dc0)=""/15, 0xf}], 0x1}, 0x1ff}, {{&(0x7f0000003e40)=@nl=@unspec, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003ec0)=""/168, 0xa8}], 0x1, &(0x7f0000003fc0)=""/68, 0x44}, 0x5}, {{&(0x7f0000004040)=@can, 0x80, &(0x7f0000004300)=[{&(0x7f00000040c0)=""/202, 0xca}, {&(0x7f00000041c0)=""/142, 0x8e}, {&(0x7f0000004280)=""/19, 0x13}, {&(0x7f00000042c0)=""/32, 0x20}], 0x4, &(0x7f0000004340)=""/211, 0xd3}, 0x80000001}, {{&(0x7f0000004440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000005740)=[{&(0x7f00000044c0)=""/59, 0x3b}, {&(0x7f0000004500)=""/121, 0x79}, {&(0x7f0000004580)=""/139, 0x8b}, {&(0x7f0000004640)=""/115, 0x73}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/76, 0x4c}], 0x6, &(0x7f00000057c0)=""/115, 0x73}, 0x100000001}, {{&(0x7f0000005840)=@can, 0x80, &(0x7f00000059c0)=[{&(0x7f00000058c0)=""/197, 0xc5}], 0x1, &(0x7f0000005a00)=""/107, 0x6b}, 0xf27}, {{&(0x7f0000005a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005b00)=""/98, 0x62}, {&(0x7f0000005b80)=""/107, 0x6b}, {&(0x7f0000005c00)=""/224, 0xe0}, {&(0x7f0000005d00)=""/198, 0xc6}, {&(0x7f0000005e00)=""/188, 0xbc}, {&(0x7f0000005ec0)=""/139, 0x8b}], 0x6}, 0x7}, {{&(0x7f0000006000)=@generic, 0x80, &(0x7f0000006080), 0x0, &(0x7f00000060c0)=""/129, 0x81}, 0xa4}], 0x7, 0x10100, &(0x7f0000006380)={r15, r16+10000000}) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000063c0)={@local, 0x0}, &(0x7f0000006400)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006440)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000006540)=0xe8) accept$packet(r0, &(0x7f000000a680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a6c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000a700)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000a740)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f000000a840)=0xe8) getsockname$packet(r0, &(0x7f000000a8c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000a900)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f000000a940)={@ipv4={[], [], @empty}, 0x0}, &(0x7f000000a980)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f000000a9c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000aa00)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000b100)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0xc2190000}, 0xc, &(0x7f000000b0c0)={&(0x7f000000aa40)={0x64c, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1ac, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7e1, 0xf3, 0x3, 0x401}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x4}}, {{0x8, 0x1, r12}, {0x230, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6ce}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x16c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xd7}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x42}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r25}, {0xc4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xe6}}, {0x8}}}]}}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) [ 258.377108] IPVS: ftp: loaded support on port[0] = 21 [ 259.099782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.403660] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.704484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.710814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.718799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.751219] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.757881] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.766152] device bridge_slave_0 entered promiscuous mode [ 259.846089] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.852721] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.860947] device bridge_slave_1 entered promiscuous mode [ 259.940894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 260.028832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 260.041873] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.277849] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 260.366716] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 260.453997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 260.463069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.545356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 260.552478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.799947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 260.808605] team0: Port device team_slave_0 added [ 260.888707] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 260.897507] team0: Port device team_slave_1 added [ 260.980788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.072062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.155754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 261.163655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.172796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.258113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 261.265787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.274956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 20:30:51 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 20:30:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x89c}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0xf, 0xfa00, {&(0x7f00000000c0)}}, 0x2) close(r0) 20:30:51 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x260, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x0, &(0x7f0000000000), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', '\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'ip6_vti0\x00', 'bcsf0\x00', 'bond0\x00', @broadcast, [], @broadcast, [], 0xe0, 0xe0, 0x130, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local, [], 0x0, 0x0, 0x0, 0x0, @dev}}}}]}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffdffffffffc}]}, 0x2d8) 20:30:51 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @rand_addr=0x44163588}], 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) 20:30:51 executing program 5: personality(0x400000d) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @local, 0x5}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @local}, 0x9cf}, @in6={0xa, 0x4e23, 0x3, @loopback, 0xfd73}, @in6={0xa, 0x4e21, 0x4, @remote, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x81}, @in6={0xa, 0x4e22, 0x100000000, @local, 0x100000000000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e21, @multicast1}], 0xdc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r1}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) fstatfs(r0, &(0x7f0000000380)=""/105) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000400)=0xa26e, 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000480)={0x2f, 0x26, 0x6, 0x7, 0x6, 0x1f000, 0x0, 0xc3, 0x1}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x176) signalfd4(r0, &(0x7f00000004c0)={0x2}, 0x8, 0x80000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000500)={0xb681, 0x0, 0x1, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000540)={r4, 0x100000000}) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000580)) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000005c0)={0xa0000, 0x0, [0x5, 0x8cd, 0x8, 0x401, 0xa5cbc0e, 0x1f, 0xe, 0xe1]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1848240}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x128, r5, 0x835, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x344}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf000000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x31}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000018c0)={@can={0x1d, r1}, {&(0x7f0000000880)=""/4096, 0x1000}, &(0x7f0000001880), 0x11}, 0xa0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000001980)={0x0, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0xd, 0x8, 0x7d}, 0x2c) lstat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001b80)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001c80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001cc0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000001dc0)=0xe8) r10 = getuid() lstat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0}, &(0x7f0000001f00)=0xc) getresgid(&(0x7f0000001f40), &(0x7f0000001f80), &(0x7f0000001fc0)=0x0) getresgid(&(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080)=0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000019c0)='system.posix_acl_default\x00', &(0x7f00000020c0)={{}, {0x1, 0x2}, [{0x2, 0x6, r6}, {0x2, 0x4, r7}, {0x2, 0x4, r8}, {0x2, 0x4, r9}, {0x2, 0x5, r10}, {0x2, 0x1, r11}, {0x2, 0x2, r12}], {0x4, 0x2}, [{0x8, 0x1, r13}, {0x8, 0x1, r14}], {0x10, 0x4}, {0x20, 0x2}}, 0x6c, 0x2) [ 262.170781] misc userio: No port type given on /dev/userio [ 262.202898] mmap: syz-executor3 (7738) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:30:51 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07021dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 20:30:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000939000)=0x400000019) read(r0, 0x0, 0x0) 20:30:51 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x1, r1}) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01454c4600000000"], 0x8) [ 262.351278] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.357902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.365085] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.371654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.380679] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 262.387318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.532723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 20:30:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002880)={0x1, @win={{0x0, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 20:30:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000180)=""/193, &(0x7f0000000600)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af04, &(0x7f0000000900)={0x0, 0xfffffffffffffffd, &(0x7f0000000740)=""/184, &(0x7f0000000800)=""/27, &(0x7f0000000940)=""/129}) [ 262.967940] IPVS: ftp: loaded support on port[0] = 21 [ 264.376156] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.382676] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.390112] device bridge_slave_0 entered promiscuous mode [ 264.474688] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.481225] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.489146] device bridge_slave_1 entered promiscuous mode [ 264.571498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 264.654806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 264.912491] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 264.998621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 265.079671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 265.086733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.169265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 265.176325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.422332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 265.430997] team0: Port device team_slave_0 added [ 265.514483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 265.522790] team0: Port device team_slave_1 added [ 265.605909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.682892] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.762576] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 265.770185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.779441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.851935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 265.859521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.868532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.270966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.574305] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 266.758419] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.765042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.772225] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.778785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.788021] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 266.875905] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 266.882263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.890281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.062697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.200026] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.726579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.916287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:30:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002880)={0x1, @win={{0x0, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 20:30:59 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @raw_data="37eff2653430a431c64fbfa30c2a38dac2bfec391e57a058488681818c09f696cb927986149d147e5bdb188052955e73dbf46d0c32aeefcf9e6d9c6dfa4d837c7d89baad901a0c27dadb0b9776316a2c36b33646115376e3602346de9a65e5d812ecf6eeb88f247ed31abc084429e7d6a0f8935c808ac4a805487b5567ebe45005271260780a78abcf70deaff66bccb36c3d9fb3c831a9e576ad07f3ce722003c54f90a4dfba0e81095ad2f4c1089003cdd592bb47b86b4224fee36fbe35865d14833c4094de11b3"}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x24000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5be8728"}, 0x0, 0x0, @fd, 0x4}) 20:30:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000939000)=0x400000019) read(r0, 0x0, 0x0) 20:30:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x0) 20:30:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0x3, &(0x7f0000000100)) 20:30:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002880)={0x1, @win={{0x0, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 270.411102] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 270.417570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.425496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.678371] 8021q: adding VLAN 0 to HW filter on device team0 20:31:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2180, 0x0) ioctl$TUNSETVNETBE(r0, 0x5452, &(0x7f0000000000)) 20:31:00 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @raw_data="37eff2653430a431c64fbfa30c2a38dac2bfec391e57a058488681818c09f696cb927986149d147e5bdb188052955e73dbf46d0c32aeefcf9e6d9c6dfa4d837c7d89baad901a0c27dadb0b9776316a2c36b33646115376e3602346de9a65e5d812ecf6eeb88f247ed31abc084429e7d6a0f8935c808ac4a805487b5567ebe45005271260780a78abcf70deaff66bccb36c3d9fb3c831a9e576ad07f3ce722003c54f90a4dfba0e81095ad2f4c1089003cdd592bb47b86b4224fee36fbe35865d14833c4094de11b3"}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x24000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5be8728"}, 0x0, 0x0, @fd, 0x4}) 20:31:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000939000)=0x400000019) read(r0, 0x0, 0x0) 20:31:00 executing program 2: r0 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa048b5bdb4cb904e473730e55cff26d1b0e001d80fffffff05e510befccd7", 0x2e}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/97, 0x61}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/202, 0xca}, {&(0x7f0000001700)=""/76, 0x4c}], 0x7}, 0x0) 20:31:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0), 0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20008800, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 20:31:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000002880)={0x1, @win={{0x0, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 271.856048] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 271.863817] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 271.868098] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.891941] netlink: 'syz-executor2': attribute type 29 has an invalid length. 20:31:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @raw_data="37eff2653430a431c64fbfa30c2a38dac2bfec391e57a058488681818c09f696cb927986149d147e5bdb188052955e73dbf46d0c32aeefcf9e6d9c6dfa4d837c7d89baad901a0c27dadb0b9776316a2c36b33646115376e3602346de9a65e5d812ecf6eeb88f247ed31abc084429e7d6a0f8935c808ac4a805487b5567ebe45005271260780a78abcf70deaff66bccb36c3d9fb3c831a9e576ad07f3ce722003c54f90a4dfba0e81095ad2f4c1089003cdd592bb47b86b4224fee36fbe35865d14833c4094de11b3"}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x24000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5be8728"}, 0x0, 0x0, @fd, 0x4}) 20:31:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) [ 271.962960] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 271.970616] netlink: 'syz-executor2': attribute type 29 has an invalid length. 20:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000939000)=0x400000019) read(r0, 0x0, 0x0) 20:31:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/18, 0x12) 20:31:01 executing program 5: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000500)=0x84) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00'}, &(0x7f00000001c0)}) [ 272.083001] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 272.161170] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 20:31:01 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x100}, r0, 0x0, 0xffffffffffffffff, 0x4) 20:31:01 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x300b}) 20:31:01 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @raw_data="37eff2653430a431c64fbfa30c2a38dac2bfec391e57a058488681818c09f696cb927986149d147e5bdb188052955e73dbf46d0c32aeefcf9e6d9c6dfa4d837c7d89baad901a0c27dadb0b9776316a2c36b33646115376e3602346de9a65e5d812ecf6eeb88f247ed31abc084429e7d6a0f8935c808ac4a805487b5567ebe45005271260780a78abcf70deaff66bccb36c3d9fb3c831a9e576ad07f3ce722003c54f90a4dfba0e81095ad2f4c1089003cdd592bb47b86b4224fee36fbe35865d14833c4094de11b3"}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x24000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5be8728"}, 0x0, 0x0, @fd, 0x4}) 20:31:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) 20:31:01 executing program 5: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000500)=0x84) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00'}, &(0x7f00000001c0)}) 20:31:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x40045431, 0x200000000000002) 20:31:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000000000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) statfs(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 272.620753] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 20:31:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 20:31:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) [ 272.703878] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 20:31:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) 20:31:01 executing program 5: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000500)=0x84) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00'}, &(0x7f00000001c0)}) 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x40045431, 0x200000000000002) [ 272.904626] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 20:31:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) [ 273.101770] hrtimer: interrupt took 203820 ns 20:31:02 executing program 5: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000500)=0x84) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x25c, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'sha3-256-generic\x00'}, &(0x7f00000001c0)}) 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x40045431, 0x200000000000002) 20:31:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000002900000002000000ada3c484fcdf12d3d51aef170000378d0100f500ef511516"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{}], 0xc}}], 0x488, 0x0) [ 273.285515] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x40045431, 0x200000000000002) 20:31:02 executing program 3: io_setup(0x6c, &(0x7f00000002c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00\xff\x1b\x00\x00\x00\x00\x01\x02\x00\x11\x00o\xf1\xc4=', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040), 0xffc3a1fa}]) [ 273.649369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.656285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:31:02 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000300)=""/154) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/246) 20:31:02 executing program 4: clone(0x80ffdfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup2(r0, r0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x1}) 20:31:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000002900000002000000ada3c484fcdf12d3d51aef170000378d0100f500ef511516"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{}], 0xc}}], 0x488, 0x0) [ 273.793728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:31:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000002900000002000000ada3c484fcdf12d3d51aef170000378d0100f500ef511516"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{}], 0xc}}], 0x488, 0x0) 20:31:03 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="15") bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x285) 20:31:03 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x2, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bfdd05dace2e5ea5"}}, 0x48}}, 0x0) 20:31:03 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000840)=""/176, 0xb0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) 20:31:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x28020400) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) 20:31:03 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/170, 0xaa}], 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000100)) 20:31:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000002900000002000000ada3c484fcdf12d3d51aef170000378d0100f500ef511516"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{}], 0xc}}], 0x488, 0x0) 20:31:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xb5, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 20:31:03 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x2, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bfdd05dace2e5ea5"}}, 0x48}}, 0x0) 20:31:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000000180)=""/229, 0xfffffffffffffeec) 20:31:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xb5, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 20:31:03 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/170, 0xaa}], 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000100)) 20:31:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:03 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x2, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bfdd05dace2e5ea5"}}, 0x48}}, 0x0) 20:31:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="23000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0) 20:31:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xb5, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 20:31:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x300b}}) 20:31:04 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x2, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bfdd05dace2e5ea5"}}, 0x48}}, 0x0) 20:31:04 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/170, 0xaa}], 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000100)) 20:31:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0xb5, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 20:31:04 executing program 2: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) 20:31:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:04 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 20:31:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:04 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/170, 0xaa}], 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000100)) 20:31:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x162, &(0x7f0000000000)=[@op={0x18}], 0x19}], 0x49249249249265b, 0x0) 20:31:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:04 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 20:31:04 executing program 2: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) 20:31:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000300)="0f20460f328fe900016d00b93d0a0000b862000000ba000000000f30670fc79e00500f234b2e0f01cb67f40f009100000000440f20c0350a000000440f22c0", 0x3f}], 0x1, 0x60, &(0x7f0000000380), 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) 20:31:05 executing program 3: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$FUSE_ENTRY(r2, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x75fe00fa}}, 0x90) 20:31:05 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0xb, @win={{}, 0x0, 0x0, &(0x7f0000000140)={{}, &(0x7f00000000c0)={{}, &(0x7f0000000040)}}, 0x0, &(0x7f0000000180)}}) 20:31:05 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 20:31:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'\x00 \x00', 0x20000005001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r2, &(0x7f0000000700)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e84b07", 0x0, "31a41c"}}}}, 0x2e) 20:31:05 executing program 2: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) 20:31:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0xcf, &(0x7f0000000100)=""/66, &(0x7f0000000000)=0xfffffebd) [ 276.321966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.328719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:31:05 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="220000002000070700be0000090007010200001e00003c0000fb0404050016008000", 0x22) 20:31:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/242, 0xf2}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000640)=""/22, 0xf}, {&(0x7f0000000680)=""/97, 0x61}], 0x6, &(0x7f00000013c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000004840)) 20:31:05 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 20:31:05 executing program 3: unshare(0x28020400) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x3, 0x0, 0x5}}) 20:31:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount$fuseblk(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 20:31:05 executing program 2: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) [ 276.677498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:31:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, '_eqiv()chainiv(rfc4106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) 20:31:05 executing program 3: unshare(0x28020400) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x3, 0x0, 0x5}}) 20:31:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={0x0, 0x0, &(0x7f0000007ff0)={&(0x7f0000000180)={0x18, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x4}]}, 0x18}}, 0x0) 20:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x2}, [@generic="90"]}, 0x18}}, 0x0) 20:31:06 executing program 1: pselect6(0x40, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0x100000000000000}, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f0000000240), 0x86}) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c2604110, &(0x7f0000000080)) 20:31:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={0x0, 0x0, &(0x7f0000007ff0)={&(0x7f0000000180)={0x18, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x4}]}, 0x18}}, 0x0) 20:31:06 executing program 3: unshare(0x28020400) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x3, 0x0, 0x5}}) 20:31:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f00000004c0)=0x1000000000000000, 0x12) 20:31:06 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000080)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3}, 0x0) r2 = accept(r0, 0x0, 0x0) close(r2) 20:31:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/22, 0x16}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585611, &(0x7f0000000280)={0x0, 0x9, "2a8f588835fd6618fbaf11b15f24f44d1200", 0x0, 0x0, 0x0, 0x70f000, 0x100000001}) 20:31:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003980)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000008c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000040)="9293b470878c87c220e7a991157c72f887a030bbd26fd5c07c44e37b0182ef798d802d72cdd8802c89fd99f4b9d113cca13830f4dcef60047e8c2683347f199974913e3bf568", 0x46, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xe000000}]) 20:31:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={0x0, 0x0, &(0x7f0000007ff0)={&(0x7f0000000180)={0x18, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x4}]}, 0x18}}, 0x0) 20:31:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000340), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x11b, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 20:31:06 executing program 3: unshare(0x28020400) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000080)={{0x3, 0x0, 0x5}}) 20:31:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x17, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0) 20:31:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={0x0, 0x0, &(0x7f0000007ff0)={&(0x7f0000000180)={0x18, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0x4}]}, 0x18}}, 0x0) 20:31:06 executing program 1: r0 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') 20:31:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000340), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x11b, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 20:31:07 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xd4*R6\x84\xfb\xfbU0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x1000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 20:31:07 executing program 2: syz_emit_ethernet(0x3a7, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 20:31:07 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) 20:31:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000340), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x11b, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 20:31:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x7ffff000, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) 20:31:07 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup2(r0, r1) 20:31:07 executing program 2: syz_emit_ethernet(0x3a7, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 20:31:07 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x544e, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x100020000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) 20:31:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000340), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x11b, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 20:31:07 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x901) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x323}, 0x312) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="30010000f5ffffff0800000000000000040000000000000009000000001f00001e000000ff0700002f7d6d643573756d706f7369785f6163"], 0x38) 20:31:07 executing program 2: syz_emit_ethernet(0x3a7, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 278.808989] ================================================================== [ 278.816442] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 278.823053] CPU: 0 PID: 8607 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #8 [ 278.830165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.839536] Call Trace: [ 278.842151] dump_stack+0x173/0x1d0 [ 278.845827] kmsan_report+0x120/0x290 [ 278.849735] kmsan_internal_check_memory+0x9a7/0xa20 [ 278.854896] ? __local_bh_enable_ip+0xb3/0x1a0 [ 278.859548] __msan_instrument_asm_load+0x8a/0x90 [ 278.864431] __siphash_aligned+0x512/0xae0 [ 278.868742] secure_tcpv6_seq+0x143/0x2b0 [ 278.872933] ? inet6_hash_connect+0x176/0x1a0 [ 278.877472] tcp_v6_connect+0x242b/0x2890 [ 278.881696] ? __msan_poison_alloca+0x1e0/0x270 [ 278.886425] ? tcp_v6_pre_connect+0x130/0x130 [ 278.890962] __inet_stream_connect+0x2f9/0x1340 [ 278.895696] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 278.900601] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 278.905324] tcp_sendmsg_locked+0x65d5/0x6be0 [ 278.909860] ? aa_label_sk_perm+0xda/0x940 [ 278.914134] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 278.919532] ? aa_label_sk_perm+0x6d6/0x940 [ 278.923898] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 278.929309] ? futex_wait+0x912/0xc40 [ 278.933199] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 278.938648] tcp_sendmsg+0xb2/0x100 [ 278.942335] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 278.947038] inet_sendmsg+0x54a/0x720 [ 278.950876] ? __msan_metadata_ptr_for_load_8+0x10/0x20 20:31:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 278.956263] ? security_socket_sendmsg+0x1bd/0x200 [ 278.961231] ? inet_getname+0x490/0x490 [ 278.965243] __sys_sendto+0x8c4/0xac0 [ 278.969116] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 278.974593] ? prepare_exit_to_usermode+0x114/0x420 [ 278.979633] ? syscall_return_slowpath+0x50/0x650 [ 278.984523] __se_sys_sendto+0x107/0x130 [ 278.988634] __x64_sys_sendto+0x6e/0x90 [ 278.992908] do_syscall_64+0xbc/0xf0 [ 278.996659] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.001873] RIP: 0033:0x457669 [ 279.005092] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.024029] RSP: 002b:00007fe779aa3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 279.031777] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 279.039062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 279.046353] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 279.053637] R10: 0000100020000008 R11: 0000000000000246 R12: 00007fe779aa46d4 [ 279.060954] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 279.068274] [ 279.069917] Local variable description: ----combined@secure_tcpv6_seq [ 279.076514] Variable was created at: [ 279.080251] secure_tcpv6_seq+0x7d/0x2b0 [ 279.084332] tcp_v6_connect+0x242b/0x2890 [ 279.088503] [ 279.090143] Bytes 4-7 of 8 are uninitialized [ 279.094566] Memory access of size 8 starts at ffff8881384af658 [ 279.100551] ================================================================== [ 279.107920] Disabling lock debugging due to kernel taint [ 279.113397] Kernel panic - not syncing: panic_on_warn set ... [ 279.119311] CPU: 0 PID: 8607 Comm: syz-executor3 Tainted: G B 4.20.0-rc7+ #8 [ 279.127953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.137314] Call Trace: [ 279.139921] dump_stack+0x173/0x1d0 [ 279.143583] panic+0x3ce/0x961 [ 279.146835] kmsan_report+0x285/0x290 [ 279.150687] kmsan_internal_check_memory+0x9a7/0xa20 [ 279.155816] ? __local_bh_enable_ip+0xb3/0x1a0 [ 279.160495] __msan_instrument_asm_load+0x8a/0x90 [ 279.165358] __siphash_aligned+0x512/0xae0 [ 279.169640] secure_tcpv6_seq+0x143/0x2b0 [ 279.173820] ? inet6_hash_connect+0x176/0x1a0 [ 279.178344] tcp_v6_connect+0x242b/0x2890 [ 279.182535] ? __msan_poison_alloca+0x1e0/0x270 [ 279.187235] ? tcp_v6_pre_connect+0x130/0x130 [ 279.191753] __inet_stream_connect+0x2f9/0x1340 [ 279.196460] ? kmem_cache_alloc_trace+0x55a/0xb90 [ 279.201321] ? tcp_sendmsg_locked+0x6394/0x6be0 [ 279.206041] tcp_sendmsg_locked+0x65d5/0x6be0 [ 279.210575] ? aa_label_sk_perm+0xda/0x940 [ 279.214834] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 279.220211] ? aa_label_sk_perm+0x6d6/0x940 [ 279.224547] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 279.229932] ? futex_wait+0x912/0xc40 [ 279.233815] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 279.239218] tcp_sendmsg+0xb2/0x100 [ 279.242863] ? tcp_sendmsg_locked+0x6be0/0x6be0 [ 279.247544] inet_sendmsg+0x54a/0x720 [ 279.251365] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 279.256743] ? security_socket_sendmsg+0x1bd/0x200 [ 279.261734] ? inet_getname+0x490/0x490 [ 279.265727] __sys_sendto+0x8c4/0xac0 [ 279.269603] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 279.275065] ? prepare_exit_to_usermode+0x114/0x420 [ 279.280093] ? syscall_return_slowpath+0x50/0x650 [ 279.284972] __se_sys_sendto+0x107/0x130 [ 279.289082] __x64_sys_sendto+0x6e/0x90 [ 279.293080] do_syscall_64+0xbc/0xf0 [ 279.296812] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 279.302010] RIP: 0033:0x457669 [ 279.305219] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.324129] RSP: 002b:00007fe779aa3c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 279.331853] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669 [ 279.339126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 279.346400] RBP: 000000000072bf00 R08: 00000000208d4fe4 R09: 000000000000001c [ 279.353683] R10: 0000100020000008 R11: 0000000000000246 R12: 00007fe779aa46d4 [ 279.360959] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff [ 279.369366] Kernel Offset: disabled [ 279.373002] Rebooting in 86400 seconds..