[ 53.729006] audit: type=1800 audit(1545322043.773:25): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.370359] kauditd_printk_skb: 3 callbacks suppressed [ 55.370388] audit: type=1800 audit(1545322045.413:29): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 55.395302] audit: type=1800 audit(1545322045.433:30): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2018/12/20 16:07:37 fuzzer started 2018/12/20 16:07:41 dialing manager at 10.128.0.26:46613 2018/12/20 16:07:42 syscalls: 1 2018/12/20 16:07:42 code coverage: enabled 2018/12/20 16:07:42 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 16:07:42 setuid sandbox: enabled 2018/12/20 16:07:42 namespace sandbox: enabled 2018/12/20 16:07:42 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 16:07:42 fault injection: enabled 2018/12/20 16:07:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 16:07:42 net packet injection: enabled 2018/12/20 16:07:42 net device setup: enabled 16:08:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0xaead, 0x0) syzkaller login: [ 142.395951] IPVS: ftp: loaded support on port[0] = 21 [ 143.763465] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.770024] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.778558] device bridge_slave_0 entered promiscuous mode [ 143.869416] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.875991] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.884275] device bridge_slave_1 entered promiscuous mode [ 143.965784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.047389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.301205] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.386879] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.474298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.481298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.567541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.574741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.839128] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 144.847999] team0: Port device team_slave_0 added [ 144.934909] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.943607] team0: Port device team_slave_1 added [ 145.030497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.124155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.214398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 145.222262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.231631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.321185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 145.329108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.338604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:08:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x25b, 0x200000000008009, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xf2d4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 146.190296] IPVS: ftp: loaded support on port[0] = 21 [ 146.656182] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.662904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.670121] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.676754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.685970] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 146.692571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.356988] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.363685] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.372254] device bridge_slave_0 entered promiscuous mode [ 148.455915] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.462542] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.470909] device bridge_slave_1 entered promiscuous mode [ 148.624354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 148.764250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 149.254192] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 149.393787] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 149.963037] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.971934] team0: Port device team_slave_0 added [ 150.067061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.075786] team0: Port device team_slave_1 added [ 150.233364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.243275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.252527] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.427833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.531482] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.539267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.548705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.691590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.699515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.709338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:09:01 executing program 2: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x101806) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000080)) [ 151.857715] IPVS: ftp: loaded support on port[0] = 21 [ 152.483367] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.489928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.497158] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.503773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.513164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 152.519648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.758973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.443036] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 154.056215] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 154.062662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.070922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.519521] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.526172] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.534603] device bridge_slave_0 entered promiscuous mode [ 154.619657] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.626361] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.634762] device bridge_slave_1 entered promiscuous mode [ 154.861604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 154.883836] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.984412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.407624] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 155.555680] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 155.750156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.757293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.948944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.956354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.535913] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 156.544808] team0: Port device team_slave_0 added [ 156.744004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 156.752777] team0: Port device team_slave_1 added [ 156.988563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 156.995738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.004793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.099955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 157.107168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.116514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.299873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.307699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.316807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.543160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.550849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.560146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.822984] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 16:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0xaead, 0x0) 16:09:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)) 16:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0xaead, 0x0) [ 159.419169] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.425831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.432966] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.439528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.448706] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.455564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:09:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_SET_XCRS(r3, 0xaead, 0x0) 16:09:09 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) [ 159.867458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.945718] IPVS: ftp: loaded support on port[0] = 21 16:09:10 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 16:09:10 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 16:09:10 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) [ 160.698232] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 16:09:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='loginuid\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 16:09:11 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='loginuid\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 161.532299] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 161.538693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.546771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.196132] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.925897] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.932568] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.940705] device bridge_slave_0 entered promiscuous mode [ 163.115988] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.122717] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.130887] device bridge_slave_1 entered promiscuous mode [ 163.362780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.536438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 163.851095] ip (7278) used greatest stack depth: 53624 bytes left [ 163.958955] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.107644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.972787] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.981563] team0: Port device team_slave_0 added [ 165.101078] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.109827] team0: Port device team_slave_1 added [ 165.253939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.277003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.286051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.431271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.619579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.627483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.636759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.810402] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.818150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.827216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.193461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:09:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x25b, 0x200000000008009, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xf2d4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) [ 166.829245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.396665] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.403298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.410446] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.417093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.426220] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 167.432953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.458858] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.934124] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.940453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.948456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.345595] 8021q: adding VLAN 0 to HW filter on device team0 16:09:22 executing program 2: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x101806) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000080)) 16:09:22 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='loginuid\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 172.826211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.003364] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.186504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.192914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.200682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.378530] 8021q: adding VLAN 0 to HW filter on device team0 16:09:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)) 16:09:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x25b, 0x200000000008009, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xf2d4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 16:09:24 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @broadcast}, 0x9}], 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x22800, 0x0) socketpair(0x9, 0x2, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000001c0)=""/147) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000280)) lsetxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x3) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000003c0)={0x6, 0xc6, 0xfffffffffffffbff, 0x8, 0x6, 0x9583}) r3 = syz_open_dev$cec(&(0x7f0000000400)='/dev/cec#\x00', 0x2, 0x2) fcntl$notify(r0, 0x402, 0x20) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000440)={0x1, 0x2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x422, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000005c0)={0xb, @raw_data="c7505933f4654303bac0aaa0f861383325cd1af1ce91c2e777a9142e2a5e2275aed399c918eebf9b369499bcaeef1f7f4fd2becee2197e1478ecac8964640adfc28566934acb883f5238bba91e52d7ba3aa45a5510a74a0fd4dfee4c4fc4fbbf2def7e09f05dba4395e08070fb659f9e9c6c89cb8d83947f3a0fe531aceb5913cdce47c46718456f14f7d3db695736b115eca0f47f71d57f55c9222e23f1b002eb041b8ab11e30ce41509a27bb55b9a65a432a7d448b4b95840b5586a7caf75d492ee44bad6fd691"}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = semget(0x2, 0x4, 0x200) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f0000000780)=""/12) r8 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0x40, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000800)={0x18, 0x0, 0x1, {0x3ff}}, 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x7) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000840)={0x1, {0x0, 0x1c9c380}, 0xc384, 0x4}) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000880)="2f544ad57a71cda92e1f1f59bdb1ff978ee2e04bb2de5db27fb8c426749dc9f3271fdb6202e075fd634a55c4e85cdb695c7c290f19390838d40a60fea656114a262dc67ee01724ffa754c5fdcd984ac899fe8b2eedc87fcfee0f92b4184a685b0bef7b9482966f829332d46fe38dc9d8dd9868fb67029a490ff54e84bbadb86a6634ec5abf08147834a2e906204f1efce963045de592102676b3b426d8962ee6b92bf1", 0xa3) mount$fuseblk(&(0x7f0000000940)='/dev/loop0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='fuseblk\x00', 0x60, &(0x7f0000000a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1400}}], [{@fowner_lt={'fowner<', r5}}]}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000c00)=0xe8) bind$packet(r2, &(0x7f0000000c40)={0x11, 0x1e, r9, 0x1, 0x10a7, 0x6, @remote}, 0x14) write$FUSE_GETXATTR(r1, &(0x7f0000000c80)={0x18, 0x0, 0x1, {0xfffffffffffffffa}}, 0x18) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000cc0)) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x182113, r1, 0x180000000) 16:09:24 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000040)={0xc72, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000200)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1, &(0x7f0000000300)=""/73, 0x49}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000080)=@raw=[@exit, @alu={0x7, 0x3ff, 0x8, 0x2d7f3727d74faf5a, 0x0, 0x78}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xfa, &(0x7f0000000100)=""/250, 0x41000, 0x1, [], r1, 0x9}, 0x48) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000440)={'\x00', {0x2, 0x4e22, @rand_addr=0x2}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x6) setxattr$security_selinux(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='security.selinux\x00', &(0x7f0000000540)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000580)={0x1, 0x0, [0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000005c0)={0xfffffffffffffffd, 0x1, 'client1\x00', 0xffffffff80000007, "16073ee47a853c48", "1fca002b72f0dff9c2c687efeda6e59c6cc93cca8a8018345e18ef86041b7d62", 0x0, 0x1ff}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000680)=0x8, &(0x7f00000006c0)=0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000700)={0x5fc, 0x0, 0x201c, 0x100, 0x7, {0x2, 0xffffffffffffff7f}, 0x1}) r3 = syz_open_dev$swradio(&(0x7f0000000740)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000780)={r0, r0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dlm-control\x00', 0x200000, 0x0) connect$inet(r3, &(0x7f0000000800)={0x2, 0x4e22, @remote}, 0x10) ioctl$void(r2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000840)={0x5, [0x4, 0x2, 0x4, 0xc912, 0x0]}, 0xe) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000880)={0x0, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000940), 0x4) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vhost-net\x00', 0x2, 0x0) recvfrom$unix(r0, &(0x7f00000009c0)=""/114, 0x72, 0x1, &(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000ac0)=0x1, 0x4) write$tun(r4, &(0x7f0000000b00)={@val={0x0, 0x88fb}, @void, @llc={@llc={0xfd, 0x7e, '\t4', "eb505eca81e8583952c0afc22bfcf561e9ff806a4109e8de363497e91dd05490f1978297b6c6f635ab05d722e2c44a15979d67b21181f64489874c548eaea875ca7b4a46fb44b4d213cd477c2b572df039e017b3f73ddbd8b5e156527dd8d3f31272f878b4c4a2677929341219701bf62839762d09044184e632072440347aa1bec00ed6a1c52268212b480da759bfd69e91cfc5ffbb10da"}}}, 0xa0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4, 0x0, @empty, 0x5a8a}}, 0xff, 0x0, 0x3f, 0xfff, 0x40}, &(0x7f0000000c80)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000cc0)={r6, @in6={{0xa, 0x4e23, 0x100000000, @remote, 0x5}}, [0x3ff, 0xa380, 0x81, 0x9, 0x7, 0x10000, 0xf5, 0x400, 0x3, 0xd4b, 0x8001, 0x4, 0x2800, 0x95f, 0x4]}, &(0x7f0000000dc0)=0x100) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000e00)={0x7, "8ae1291fd54176ee98c1ef3095ebf6190af7933342c46691408446fc20073904", 0x1, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='trusted.overlay.upper\x00', &(0x7f0000000ec0)={0x0, 0xfb, 0x1015, 0x2, 0x7f, "2dac4f8820b0e66cbadb34fbefcdade2", "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"}, 0x1015, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001f00)=""/184, &(0x7f0000001fc0)=0xb8) write$P9_RUNLINKAT(r0, &(0x7f0000002000)={0x7, 0x4d, 0x1}, 0x7) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000002080)=@add_del={0x2, &(0x7f0000002040)='sit0\x00'}) 16:09:24 executing program 2: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x101806) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000080)) 16:09:24 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000800)='loginuid\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 16:09:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x25b, 0x200000000008009, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xf2d4) read(r0, &(0x7f0000000140)=""/165, 0x1000000eb) 16:09:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 16:09:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)) 16:09:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 16:09:25 executing program 2: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x101806) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000080)) 16:09:25 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 16:09:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 16:09:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)) [ 175.694643] IPVS: ftp: loaded support on port[0] = 21 [ 175.766858] IPVS: ftp: loaded support on port[0] = 21 [ 177.032263] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.038796] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.047205] device bridge_slave_0 entered promiscuous mode [ 177.089059] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.095660] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.103988] device bridge_slave_0 entered promiscuous mode [ 177.129896] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.136548] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.144807] device bridge_slave_1 entered promiscuous mode [ 177.184906] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.191479] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.199870] device bridge_slave_1 entered promiscuous mode [ 177.226956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.280914] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.306328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.359425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.553466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.607885] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.641372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.694859] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.727162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.734252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.785020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.792132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.820745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.827917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.878107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.885277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.087545] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.096375] team0: Port device team_slave_0 added [ 178.143658] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.152438] team0: Port device team_slave_0 added [ 178.179311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.188034] team0: Port device team_slave_1 added [ 178.237023] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.245767] team0: Port device team_slave_1 added [ 178.277222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.326259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.369543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.415838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.457261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.465036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.474355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.504199] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.513033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.522285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.567631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.575580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.585060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.614517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.622294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.631614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.525395] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.532006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.539179] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.545837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.555347] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.571516] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.578125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.585422] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.592041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.601431] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.722567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.730603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.967570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.000793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.276974] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.313942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 183.591432] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.597758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.605854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.622485] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 183.628773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.636912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.938085] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.950888] 8021q: adding VLAN 0 to HW filter on device team0 16:09:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 16:09:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x5}], 0x18) 16:09:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 16:09:36 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00', 0xe, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x3) 16:09:36 executing program 4: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) 16:09:36 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x800000004a, 0x0, &(0x7f0000013000)) 16:09:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 16:09:36 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x800000004a, 0x0, &(0x7f0000013000)) 16:09:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x400000000000005, 0x7, 0x6, 0x8000000001}, 0x2c) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="80", 0x0}, 0x18) 16:09:36 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00', 0xe, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x3) [ 186.303240] input: syz1 as /devices/virtual/input/input5 [ 186.337760] input: syz1 as /devices/virtual/input/input6 16:09:36 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xfffffffffffffffd) 16:09:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 16:09:36 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xfffffffffffffffd) 16:09:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x5}], 0x18) 16:09:36 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x800000004a, 0x0, &(0x7f0000013000)) 16:09:36 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00', 0xe, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x3) 16:09:36 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xfffffffffffffffd) 16:09:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x400000000000005, 0x7, 0x6, 0x8000000001}, 0x2c) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="80", 0x0}, 0x18) [ 186.852227] input: syz1 as /devices/virtual/input/input7 16:09:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc004510e, &(0x7f0000a07fff)) 16:09:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x800000004a, 0x0, &(0x7f0000013000)) 16:09:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x5}], 0x18) 16:09:37 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00', 0xe, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x3) 16:09:37 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xfffffffffffffffd) 16:09:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x400000000000005, 0x7, 0x6, 0x8000000001}, 0x2c) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="80", 0x0}, 0x18) [ 187.228482] input: syz1 as /devices/virtual/input/input8 16:09:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc004510e, &(0x7f0000a07fff)) 16:09:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) 16:09:37 executing program 1: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x5}], 0x18) 16:09:37 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x400000000000005, 0x7, 0x6, 0x8000000001}, 0x2c) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040)="80", 0x0}, 0x18) 16:09:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc004510e, &(0x7f0000a07fff)) 16:09:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:37 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) [ 187.670411] input: syz1 as /devices/virtual/input/input9 16:09:37 executing program 1: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:37 executing program 4: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc004510e, &(0x7f0000a07fff)) 16:09:38 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) 16:09:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:38 executing program 1: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:38 executing program 4: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:38 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x88, 0x0, &(0x7f0000013ff4)={@remote}, 0x6) 16:09:38 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x1, r1, 0x0) 16:09:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:38 executing program 1: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:38 executing program 4: add_key(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)='\x00\x04\x00', 0x0) 16:09:38 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x1, r1, 0x0) 16:09:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, 0x0}]) 16:09:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000110000000200000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x4000000000001cb, 0x0) 16:09:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x7}) 16:09:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @remote, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) 16:09:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, 0x0}]) 16:09:39 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x1, r1, 0x0) 16:09:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x40000108, 0x0, 0x40000082], [0xc1]}) 16:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x7}) 16:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @remote, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) 16:09:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, 0x0}]) 16:09:39 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioprio_set$uid(0x1, r1, 0x0) [ 189.429612] kvm [8404]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 16:09:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:39 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) pread64(r0, &(0x7f0000000100), 0x0, 0x0) 16:09:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, 0x0}]) 16:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x7}) 16:09:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @remote, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) 16:09:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="b1f0bffa3e4c160567986d6b332078e18e3cc5bcf760edeb08c4a78fdd83b55dc7fd025550532d57717b7144446e617be2d1182db6129d91d82f6eb8dba850377f76a563e4372e31f6aab775ca8a0de6aaabd304112ef1d56c308b588a6cd2245d044373084c1c74e6b25c3c3a47d8fc64bbc56edab6b4f9ce46fe939531500a40d148aaba28403a9bb84dd577a777ed71017bf8f88346d17a4b9060eb5654a16b9c7bd1752a850f5f6248a631898db15f259ec8d7a81144add02c9fcf48a449758d0358a2fa2e41cd4c218252364fa9507e07223cb058e16a890600e9f87762ebd9f0a8a4ec86f516234079baed275206a834f43861754fb3cd33b1b8ff496a1f7c62abc4dd2519004df61eda41cd0fc4932cba4f02c7adeb358c9809928e92595a6dd6286bdc9350504099e6e80f043d9686f0a123a2596a15c87e9b3a768f8fa008a4c2d740565caf9729d07e12aabba967d1da65a08c68ec4e16e8dfafe8ca51966c52e37f0301912eb4dfe05aa56fea0c805cd17d1770a59cc2971df56892a57c1a0172cfac8a9352b77f767e0207", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:40 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) pread64(r0, &(0x7f0000000100), 0x0, 0x0) 16:09:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 16:09:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="b1f0bffa3e4c160567986d6b332078e18e3cc5bcf760edeb08c4a78fdd83b55dc7fd025550532d57717b7144446e617be2d1182db6129d91d82f6eb8dba850377f76a563e4372e31f6aab775ca8a0de6aaabd304112ef1d56c308b588a6cd2245d044373084c1c74e6b25c3c3a47d8fc64bbc56edab6b4f9ce46fe939531500a40d148aaba28403a9bb84dd577a777ed71017bf8f88346d17a4b9060eb5654a16b9c7bd1752a850f5f6248a631898db15f259ec8d7a81144add02c9fcf48a449758d0358a2fa2e41cd4c218252364fa9507e07223cb058e16a890600e9f87762ebd9f0a8a4ec86f516234079baed275206a834f43861754fb3cd33b1b8ff496a1f7c62abc4dd2519004df61eda41cd0fc4932cba4f02c7adeb358c9809928e92595a6dd6286bdc9350504099e6e80f043d9686f0a123a2596a15c87e9b3a768f8fa008a4c2d740565caf9729d07e12aabba967d1da65a08c68ec4e16e8dfafe8ca51966c52e37f0301912eb4dfe05aa56fea0c805cd17d1770a59cc2971df56892a57c1a0172cfac8a9352b77f767e0207", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @remote, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) 16:09:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x0, 0x7}) 16:09:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 16:09:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth1\x00', 0xb4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x3b2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000680)='2', 0x1}], 0x1}}], 0x1, 0x4000001) sendmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x191}], 0x1}, 0x7}], 0x1, 0x881) 16:09:40 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) pread64(r0, &(0x7f0000000100), 0x0, 0x0) 16:09:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xc, 0x0, "0912521652781098a601803f23b859d8070d5677ec3c12e3dd9316b6a27eb0b6"}) 16:09:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:40 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="2e78b3660f754b100f32b8e1008ee8f30f005480d18fdb00baf80c66b84e61448066efbafc0cb80000ef0f3266b9ad0300000f320f01d1", 0x37}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 16:09:40 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 16:09:40 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xc, 0x0, "0912521652781098a601803f23b859d8070d5677ec3c12e3dd9316b6a27eb0b6"}) 16:09:40 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) pread64(r0, &(0x7f0000000100), 0x0, 0x0) 16:09:40 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000013ff4)={@remote, @loopback}, 0xc) 16:09:40 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xc, 0x0, "0912521652781098a601803f23b859d8070d5677ec3c12e3dd9316b6a27eb0b6"}) 16:09:41 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 16:09:41 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) 16:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x79, 0x0, [0x482]}) 16:09:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:41 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x3, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12"}) 16:09:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:41 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0xc, 0x0, "0912521652781098a601803f23b859d8070d5677ec3c12e3dd9316b6a27eb0b6"}) 16:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x79, 0x0, [0x482]}) 16:09:41 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) 16:09:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:41 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x3, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12"}) 16:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x79, 0x0, [0x482]}) 16:09:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x0, 0x2]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)) 16:09:41 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) 16:09:41 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:41 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x3, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12"}) 16:09:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000340)={0x79, 0x0, [0x482]}) 16:09:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:42 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) 16:09:42 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:42 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x40, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0x3, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12"}) 16:09:42 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:42 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00004ca000)={&(0x7f0000000140)={0xd0, 0x1, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0xbc, 0x0, [@typed={0xb8, 0x5f, @binary="7845098686cee6cec5d3ffef3bec642241f0a9ff939019ab5c8bdf47c1d97623fb72e0e3ea09643cc7d00840cfa054dc22c8bd918e02ce255214ea8d96fe33860a84dc9f17c16a0727d423d222936040b16b2487e87a734f4b15c22eb6d3fc68226880e9239c3d3426bd02a6c69e838bdf1fc91400fcf2e440d00f6bfcb1dcaa292dfdf727bad2358398a7a3b61bedae8fd4aa4d3dd39fb5ece413b303402cea3ca65119edd049c344e6382fee17fc1df9"}]}]}, 0xd0}}, 0x0) 16:09:42 executing program 3: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540)={0xffffffff80000005}) epoll_wait(r0, &(0x7f0000002500)=[{}], 0x1, 0x0) 16:09:42 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:42 executing program 2: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00004ca000)={&(0x7f0000000140)={0xd0, 0x1, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0xbc, 0x0, [@typed={0xb8, 0x5f, @binary="7845098686cee6cec5d3ffef3bec642241f0a9ff939019ab5c8bdf47c1d97623fb72e0e3ea09643cc7d00840cfa054dc22c8bd918e02ce255214ea8d96fe33860a84dc9f17c16a0727d423d222936040b16b2487e87a734f4b15c22eb6d3fc68226880e9239c3d3426bd02a6c69e838bdf1fc91400fcf2e440d00f6bfcb1dcaa292dfdf727bad2358398a7a3b61bedae8fd4aa4d3dd39fb5ece413b303402cea3ca65119edd049c344e6382fee17fc1df9"}]}]}, 0xd0}}, 0x0) 16:09:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:42 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001280), 0x0, &(0x7f00000012c0)=""/244, 0xf4}, 0x0) 16:09:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x200, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001800)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640), 0x28a}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) io_destroy(r1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 16:09:42 executing program 3: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540)={0xffffffff80000005}) epoll_wait(r0, &(0x7f0000002500)=[{}], 0x1, 0x0) 16:09:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00004ca000)={&(0x7f0000000140)={0xd0, 0x1, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0xbc, 0x0, [@typed={0xb8, 0x5f, @binary="7845098686cee6cec5d3ffef3bec642241f0a9ff939019ab5c8bdf47c1d97623fb72e0e3ea09643cc7d00840cfa054dc22c8bd918e02ce255214ea8d96fe33860a84dc9f17c16a0727d423d222936040b16b2487e87a734f4b15c22eb6d3fc68226880e9239c3d3426bd02a6c69e838bdf1fc91400fcf2e440d00f6bfcb1dcaa292dfdf727bad2358398a7a3b61bedae8fd4aa4d3dd39fb5ece413b303402cea3ca65119edd049c344e6382fee17fc1df9"}]}]}, 0xd0}}, 0x0) 16:09:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x102, 0x0) unshare(0x8000400) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x80000000, 0x0) 16:09:43 executing program 3: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540)={0xffffffff80000005}) epoll_wait(r0, &(0x7f0000002500)=[{}], 0x1, 0x0) 16:09:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000000040)) 16:09:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00004ca000)={&(0x7f0000000140)={0xd0, 0x1, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0xbc, 0x0, [@typed={0xb8, 0x5f, @binary="7845098686cee6cec5d3ffef3bec642241f0a9ff939019ab5c8bdf47c1d97623fb72e0e3ea09643cc7d00840cfa054dc22c8bd918e02ce255214ea8d96fe33860a84dc9f17c16a0727d423d222936040b16b2487e87a734f4b15c22eb6d3fc68226880e9239c3d3426bd02a6c69e838bdf1fc91400fcf2e440d00f6bfcb1dcaa292dfdf727bad2358398a7a3b61bedae8fd4aa4d3dd39fb5ece413b303402cea3ca65119edd049c344e6382fee17fc1df9"}]}]}, 0xd0}}, 0x0) 16:09:43 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 16:09:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) 16:09:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x102, 0x0) unshare(0x8000400) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x80000000, 0x0) 16:09:43 executing program 3: r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540)={0xffffffff80000005}) epoll_wait(r0, &(0x7f0000002500)=[{}], 0x1, 0x0) 16:09:43 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 16:09:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000000040)) 16:09:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]}) ioctl$KVM_SMI(r3, 0xaeb7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:09:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) 16:09:43 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:43 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 16:09:43 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x102, 0x0) unshare(0x8000400) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x80000000, 0x0) 16:09:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000000040)) 16:09:44 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) 16:09:44 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 16:09:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]}) ioctl$KVM_SMI(r3, 0xaeb7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:09:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000000040)) 16:09:44 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x102, 0x0) unshare(0x8000400) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x80000000, 0x0) 16:09:44 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="2020c2000000290000f70b040433beabf6c2d8804ed7b40c07ffd493db205b980bd988161c551286bf9b7f6c1a218fcde6884ba97aa5337a4c8cceeb8b18816ff58c6c5f87bb245f0e070000002276ff13e9cc95345eb0cbd4e33b37245ffeb6f37fad15b09f1278daf82704d2ca034c0add68c947c2ecd0b548ae941a9426f55b346104f31043935f9f198be6065a0d855015a11a6edde0ef3ac8039f2ae4ede1a02ef5e1c1b13587d5b4887eefc8654f6324dc2f2fc3cd06e348370faf387f998b5902504518b97d3910f7b7652ce1c863b4c0202fee2129b16539de16a57c2f1be2824e77d1193c9ef0c965980d4f7f30a18eaa5837299c9be0bcb8f9997d68708ae7be05dcdfea2a57ee7317bb52ef731db9c9222aa86896261c0291f0eaba26a79f6b00828e0cf0c19feddb24b7b799f920a2c2d34dfefa61cbdb80c1ec1e43bb0794107d8c86e20c8dbd62080b3de25939ead9048624b9b872b6f4f0d3c08923277cc508a2c05edecc55298082d20d8436d6c0cd002609e12d9838035d79623e0000000000"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:44 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) 16:09:44 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:44 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='s'], 0x1) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000140)) 16:09:44 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) 16:09:44 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]}) ioctl$KVM_SMI(r3, 0xaeb7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:09:45 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) 16:09:45 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:45 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="2020c2000000290000f70b040433beabf6c2d8804ed7b40c07ffd493db205b980bd988161c551286bf9b7f6c1a218fcde6884ba97aa5337a4c8cceeb8b18816ff58c6c5f87bb245f0e070000002276ff13e9cc95345eb0cbd4e33b37245ffeb6f37fad15b09f1278daf82704d2ca034c0add68c947c2ecd0b548ae941a9426f55b346104f31043935f9f198be6065a0d855015a11a6edde0ef3ac8039f2ae4ede1a02ef5e1c1b13587d5b4887eefc8654f6324dc2f2fc3cd06e348370faf387f998b5902504518b97d3910f7b7652ce1c863b4c0202fee2129b16539de16a57c2f1be2824e77d1193c9ef0c965980d4f7f30a18eaa5837299c9be0bcb8f9997d68708ae7be05dcdfea2a57ee7317bb52ef731db9c9222aa86896261c0291f0eaba26a79f6b00828e0cf0c19feddb24b7b799f920a2c2d34dfefa61cbdb80c1ec1e43bb0794107d8c86e20c8dbd62080b3de25939ead9048624b9b872b6f4f0d3c08923277cc508a2c05edecc55298082d20d8436d6c0cd002609e12d9838035d79623e0000000000"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]}) ioctl$KVM_SMI(r3, 0xaeb7) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:09:45 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) 16:09:45 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:45 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x1) 16:09:45 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='s'], 0x1) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000140)) 16:09:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="020000008cf66cfde19ab3a251fd2cfd096819d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000500000000000000", 0x38, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 16:09:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) recvfrom$unix(r2, &(0x7f00000001c0)=""/132, 0x84, 0x10002, &(0x7f0000000040)=@abs, 0x6e) 16:09:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) unshare(0x20400) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 16:09:46 executing program 3: mbind(&(0x7f00002c7000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0) 16:09:46 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x2000200, 0x2) write$P9_RREADDIR(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x188) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000002c0)=0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./bus\x00') setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={0x0, {}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000005c0)={0x14}, 0x14) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/253, &(0x7f0000000380)=0xfd) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}, 'gre0\x00'}) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000580)=0x10, 0x0) socket(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) 16:09:46 executing program 3: mbind(&(0x7f00002c7000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0) 16:09:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) unshare(0x20400) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 16:09:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="020000008cf66cfde19ab3a251fd2cfd096819d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000500000000000000", 0x38, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 16:09:46 executing program 3: mbind(&(0x7f00002c7000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0) 16:09:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) recvfrom$unix(r2, &(0x7f00000001c0)=""/132, 0x84, 0x10002, &(0x7f0000000040)=@abs, 0x6e) 16:09:46 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000040)='$\x00\x00\x00', 0x4) 16:09:46 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) unshare(0x20400) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 16:09:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='s'], 0x1) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000140)) 16:09:47 executing program 3: mbind(&(0x7f00002c7000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x0, 0x0) 16:09:47 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000040)='$\x00\x00\x00', 0x4) 16:09:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="020000008cf66cfde19ab3a251fd2cfd096819d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000500000000000000", 0x38, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 16:09:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) recvfrom$unix(r2, &(0x7f00000001c0)=""/132, 0x84, 0x10002, &(0x7f0000000040)=@abs, 0x6e) 16:09:47 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) unshare(0x20400) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 16:09:47 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000040)='$\x00\x00\x00', 0x4) 16:09:47 executing program 3: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpus\x00\x06o3\xfa\xae\xa8\v\xca\xc5\xd6x\x1e\xcc\r\x00\x96\xf5\xf5\xa0\xde,\xeb\x1d\x95\xffEI\x01\x91\b\x10\xa5h\x9e\xc0\x97-', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="31200a12"], 0x4) 16:09:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) recvfrom$unix(r2, &(0x7f00000001c0)=""/132, 0x84, 0x10002, &(0x7f0000000040)=@abs, 0x6e) 16:09:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="020000008cf66cfde19ab3a251fd2cfd096819d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000500000000000000", 0x38, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) 16:09:47 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x2000000000010d, 0x4000800000000b, &(0x7f0000000040)='$\x00\x00\x00', 0x4) 16:09:48 executing program 2: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='s'], 0x1) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000140)) 16:09:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpus\x00\x06o3\xfa\xae\xa8\v\xca\xc5\xd6x\x1e\xcc\r\x00\x96\xf5\xf5\xa0\xde,\xeb\x1d\x95\xffEI\x01\x91\b\x10\xa5h\x9e\xc0\x97-', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="31200a12"], 0x4) 16:09:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) 16:09:48 executing program 4: unshare(0x8000400) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 16:09:48 executing program 3: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:48 executing program 1: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) 16:09:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpus\x00\x06o3\xfa\xae\xa8\v\xca\xc5\xd6x\x1e\xcc\r\x00\x96\xf5\xf5\xa0\xde,\xeb\x1d\x95\xffEI\x01\x91\b\x10\xa5h\x9e\xc0\x97-', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="31200a12"], 0x4) 16:09:48 executing program 4: unshare(0x8000400) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 16:09:48 executing program 3: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:48 executing program 1: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.cpus\x00\x06o3\xfa\xae\xa8\v\xca\xc5\xd6x\x1e\xcc\r\x00\x96\xf5\xf5\xa0\xde,\xeb\x1d\x95\xffEI\x01\x91\b\x10\xa5h\x9e\xc0\x97-', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="31200a12"], 0x4) 16:09:48 executing program 5: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) 16:09:48 executing program 4: unshare(0x8000400) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 16:09:48 executing program 1: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:48 executing program 3: unshare(0x8020000) clone(0xa29e0dcdcdf67d6b, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) 16:09:48 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x0, "5e58724446e21e102e8975a444f15fa9497056ac5a71d5c9caa98e4c90865bff"}) 16:09:49 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x0, "5e58724446e21e102e8975a444f15fa9497056ac5a71d5c9caa98e4c90865bff"}) 16:09:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) 16:09:49 executing program 4: unshare(0x8000400) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 16:09:49 executing program 5: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:49 executing program 1: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000000803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}) 16:09:49 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x0, "5e58724446e21e102e8975a444f15fa9497056ac5a71d5c9caa98e4c90865bff"}) 16:09:49 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 16:09:49 executing program 5: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) socket$pptp(0x18, 0x1, 0x2) 16:09:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000000803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}) 16:09:49 executing program 1: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:49 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x0, "5e58724446e21e102e8975a444f15fa9497056ac5a71d5c9caa98e4c90865bff"}) 16:09:49 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 16:09:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) socket$pptp(0x18, 0x1, 0x2) 16:09:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000000803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}) 16:09:49 executing program 5: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb4, &(0x7f00000000c0)) 16:09:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) socket$pptp(0x18, 0x1, 0x2) 16:09:50 executing program 1: r0 = socket(0xa, 0x3, 0x7f) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f000090b000/0x4000)=nil, 0x4000) dup3(r0, r1, 0x0) 16:09:50 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") 16:09:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000000803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}) 16:09:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb4, &(0x7f00000000c0)) 16:09:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) socket$pptp(0x18, 0x1, 0x2) 16:09:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_eee}) 16:09:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0xfffffffffffffffc, 'nr0\x00', 0x8}, 0x18) ioctl(r0, 0x8918, &(0x7f0000000000)) 16:09:50 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, {}, {}, {0x2, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bridge_slave_1\x00'}) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={0x0, {}, {0xfffffffc, 0x0, @dev}, {0x2, 0x0, @broadcast}}) 16:09:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb4, &(0x7f00000000c0)) 16:09:50 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x20400) ioctl(r0, 0x8902, &(0x7f00000000c0)="10") [ 200.503877] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 16:09:50 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x6102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:09:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_eee}) 16:09:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0xfffffffffffffffc, 'nr0\x00', 0x8}, 0x18) ioctl(r0, 0x8918, &(0x7f0000000000)) 16:09:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb4, &(0x7f00000000c0)) 16:09:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000d40)=0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00'}) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 16:09:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_eee}) 16:09:50 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x6102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:09:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xf7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7, 0xf0ffffffffffff}]}}}]}, 0xfff2}}, 0x0) 16:09:51 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0xfffffffffffffffc, 'nr0\x00', 0x8}, 0x18) ioctl(r0, 0x8918, &(0x7f0000000000)) 16:09:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_eee}) [ 201.067182] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 201.077266] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 16:09:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000d40)=0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00'}) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 16:09:51 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0xfffffffffffffffc, 'nr0\x00', 0x8}, 0x18) ioctl(r0, 0x8918, &(0x7f0000000000)) 16:09:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xf7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7, 0xf0ffffffffffff}]}}}]}, 0xfff2}}, 0x0) 16:09:51 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x6102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:09:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f905, 0xac879a6caf38d101}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 16:09:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000d40)=0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00'}) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 201.500366] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 201.510441] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 16:09:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1000000000006) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 16:09:51 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f905, 0xac879a6caf38d101}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 16:09:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xf7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7, 0xf0ffffffffffff}]}}}]}, 0xfff2}}, 0x0) [ 201.747803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:09:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000d40)=0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bridge_slave_1\x00'}) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 201.804517] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 201.814558] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 16:09:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f905, 0xac879a6caf38d101}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 16:09:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1000000000006) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 16:09:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xf7, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x7, 0xf0ffffffffffff}]}}}]}, 0xfff2}}, 0x0) [ 202.090722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 202.123553] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) 16:09:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 202.133606] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 16:09:52 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x6102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 16:09:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1000000000006) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 16:09:52 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f905, 0xac879a6caf38d101}) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) 16:09:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 202.428752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:09:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x1000000000006) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 16:09:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue\x19f\xe0\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\xe3\x00\x1b\x00\x00\x00\x00\x00\x00\x00\x04\x00\b\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xfe\xff\xb2\x03\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 16:09:52 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'}) [ 202.655226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:09:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x5c}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 16:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue\x19f\xe0\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\xe3\x00\x1b\x00\x00\x00\x00\x00\x00\x00\x04\x00\b\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xfe\xff\xb2\x03\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 16:09:53 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'}) 16:09:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:53 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'}) 16:09:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x5c}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 16:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue\x19f\xe0\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\xe3\x00\x1b\x00\x00\x00\x00\x00\x00\x00\x04\x00\b\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xfe\xff\xb2\x03\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 16:09:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:53 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'}) 16:09:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x5c}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 16:09:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue\x19f\xe0\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\xe3\x00\x1b\x00\x00\x00\x00\x00\x00\x00\x04\x00\b\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xfe\xff\xb2\x03\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 16:09:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:54 executing program 4: modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r0, &(0x7f0000000080), 0x1a6) 16:09:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x5c}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 16:09:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 16:09:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:54 executing program 4: modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r0, &(0x7f0000000080), 0x1a6) 16:09:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 16:09:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)=0x8000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x7, 0x4}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r2, 0x7}, &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) sync_file_range(r1, 0xeb3, 0x52, 0x1) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getgid() recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:09:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:54 executing program 4: modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r0, &(0x7f0000000080), 0x1a6) 16:09:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 16:09:54 executing program 4: modify_ldt$write(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r0, &(0x7f0000000080), 0x1a6) 16:09:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x42) 16:09:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 16:09:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) 16:09:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) 16:09:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0xfccf}}, 0x0) 16:09:55 executing program 3: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) 16:09:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/wireless\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/79, 0x4f}], 0x1, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/196, 0xc4}], 0x1, 0xa5) 16:09:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) [ 205.693172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:09:55 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 16:09:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) 16:09:55 executing program 3: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) 16:09:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 16:09:56 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000100cf", 0x1f) 16:09:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0xfccf}}, 0x0) 16:09:56 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 16:09:56 executing program 3: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) [ 206.041770] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 16:09:56 executing program 4: r0 = memfd_create(&(0x7f0000000000)='[,\x00', 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x200000a, 0x8000002012, r0, 0x0) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2) [ 206.114150] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 206.163821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:09:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 16:09:56 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000100cf", 0x1f) 16:09:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x14) [ 206.410102] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 16:09:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0xfccf}}, 0x0) 16:09:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x200000000000000c, @pix_mp}) 16:09:56 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 16:09:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) 16:09:56 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000100cf", 0x1f) 16:09:56 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x200000000000000c, @pix_mp}) [ 206.710926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:09:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x14) [ 206.758470] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 16:09:56 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) 16:09:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) 16:09:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0xfccf}}, 0x0) 16:09:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x14) 16:09:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x200000000000000c, @pix_mp}) 16:09:57 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000100cf", 0x1f) 16:09:57 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) 16:09:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) [ 207.116276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.236662] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 16:09:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x14) 16:09:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x200000000000000c, @pix_mp}) 16:09:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) 16:09:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) 16:09:57 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) 16:09:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:09:57 executing program 3: symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000280)=""/178, 0x0) 16:09:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 16:09:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) 16:09:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:09:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:58 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)) 16:09:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 16:09:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000000380)={0x20000007}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x246, 0x80001) 16:09:58 executing program 3: symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000280)=""/178, 0x0) 16:09:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:09:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 16:09:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x9, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 16:09:58 executing program 3: symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000280)=""/178, 0x0) 16:09:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:09:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 16:09:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x9, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 16:09:58 executing program 3: symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000280)=""/178, 0x0) 16:09:58 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000000000003f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31364d4e, 0x500}) 16:09:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/156, 0x9c}], 0x1) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 16:09:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x9, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 16:09:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:09:59 executing program 1: open(&(0x7f0000000100)='./file1\x00', 0x8020101842, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) mount$fuseblk(&(0x7f0000000740)='/dev/loop0\x00', &(0x7f0000000800)='./file1\x00', &(0x7f00000007c0)='fuseblk\x00', 0x0, 0x0) 16:09:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, 0xfffffffffffffffd) 16:09:59 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000000000003f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31364d4e, 0x500}) 16:09:59 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}}, 0x0) 16:09:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:09:59 executing program 1: open(&(0x7f0000000100)='./file1\x00', 0x8020101842, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) mount$fuseblk(&(0x7f0000000740)='/dev/loop0\x00', &(0x7f0000000800)='./file1\x00', &(0x7f00000007c0)='fuseblk\x00', 0x0, 0x0) 16:09:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x9, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 16:09:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, 0xfffffffffffffffd) 16:09:59 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}}, 0x0) 16:09:59 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000000000003f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31364d4e, 0x500}) 16:09:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:09:59 executing program 1: open(&(0x7f0000000100)='./file1\x00', 0x8020101842, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) mount$fuseblk(&(0x7f0000000740)='/dev/loop0\x00', &(0x7f0000000800)='./file1\x00', &(0x7f00000007c0)='fuseblk\x00', 0x0, 0x0) 16:09:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:09:59 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, 0xfffffffffffffffd) 16:09:59 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}}, 0x0) 16:09:59 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000000000003f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31364d4e, 0x500}) 16:10:00 executing program 1: open(&(0x7f0000000100)='./file1\x00', 0x8020101842, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) mount$fuseblk(&(0x7f0000000740)='/dev/loop0\x00', &(0x7f0000000800)='./file1\x00', &(0x7f00000007c0)='fuseblk\x00', 0x0, 0x0) 16:10:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:10:00 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x34, 0x13, 0x32b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@nested={0xc, 0x9, [@generic="b21aa0212d"]}]}]}]}, 0x34}}, 0x0) 16:10:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffbe, &(0x7f0000000080)) 16:10:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:10:00 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, 0xfffffffffffffffd) 16:10:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={[0xfec0], [], @dev}}], 0x1c) 16:10:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='team_slave_1\x00', 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00\x00\x00\x00\xea\xff\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x13, &(0x7f00000000c0), 0x14) close(r1) 16:10:00 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca1083", 0x61) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x20600}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:10:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffbe, &(0x7f0000000080)) 16:10:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={[0xfec0], [], @dev}}], 0x1c) 16:10:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) [ 210.742474] *** Guest State *** [ 210.745897] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 210.754891] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 210.763874] CR3 = 0x0000000000000000 [ 210.767642] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 210.773746] RFLAGS=0x00020602 DR7 = 0x0000000000000400 [ 210.779761] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 16:10:00 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x81, 0xffffffffffffff7f}) [ 210.786534] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 210.794630] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 210.802731] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 210.810785] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 210.818886] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 210.826987] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 210.835059] GDTR: limit=0x0000ffff, base=0x0000000000000000 16:10:00 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mount(&(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc} 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.160919] RSP: 002b:00007fa749467c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 211.168645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 211.175931] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 211.183218] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 211.190511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7494686d4 [ 211.197800] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 211.205114] [ 211.206762] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 211.214215] Variable was created at: [ 211.217951] secure_ipv6_port_ephemeral+0x6a/0x220 [ 211.222901] inet6_hash_connect+0x11f/0x1a0 [ 211.227226] [ 211.228863] Bytes 2-7 of 8 are uninitialized [ 211.233275] Memory access of size 8 starts at ffff88818abffa08 [ 211.239250] ================================================================== [ 211.246610] Disabling lock debugging due to kernel taint [ 211.252061] Kernel panic - not syncing: panic_on_warn set ... [ 211.257966] CPU: 1 PID: 9587 Comm: syz-executor3 Tainted: G B 4.20.0-rc7+ #8 [ 211.266461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.275824] Call Trace: [ 211.278436] dump_stack+0x173/0x1d0 [ 211.282099] panic+0x3ce/0x961 [ 211.285363] kmsan_report+0x285/0x290 [ 211.289192] kmsan_internal_check_memory+0x9a7/0xa20 [ 211.294363] __msan_instrument_asm_load+0x8a/0x90 [ 211.299224] __siphash_aligned+0x512/0xae0 [ 211.303536] secure_ipv6_port_ephemeral+0x110/0x220 [ 211.308588] inet6_hash_connect+0x11f/0x1a0 [ 211.312938] dccp_v6_connect+0x197e/0x1e20 [ 211.317223] ? __msan_poison_alloca+0x1e0/0x270 [ 211.321947] ? dccp_v6_exit_batch+0x40/0x40 [ 211.326284] __inet_stream_connect+0x2f9/0x1340 [ 211.331041] inet_stream_connect+0x101/0x180 [ 211.335498] __sys_connect+0x664/0x820 [ 211.339443] ? __inet_stream_connect+0x1340/0x1340 [ 211.344395] ? prepare_exit_to_usermode+0x114/0x420 [ 211.349426] ? syscall_return_slowpath+0x50/0x650 [ 211.354315] __se_sys_connect+0x8d/0xb0 [ 211.358323] __x64_sys_connect+0x4a/0x70 [ 211.362400] do_syscall_64+0xbc/0xf0 [ 211.366134] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 211.371353] RIP: 0033:0x457669 [ 211.374555] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.393468] RSP: 002b:00007fa749467c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 211.401179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 211.408464] RDX: 000000000000001c RSI: 0000000020000000 RDI: 0000000000000004 [ 211.415742] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 211.423015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7494686d4 [ 211.430288] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 211.438501] Kernel Offset: disabled [ 211.442132] Rebooting in 86400 seconds..