[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 37.664288] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.332751] random: sshd: uninitialized urandom read (32 bytes read) [ 42.738724] random: sshd: uninitialized urandom read (32 bytes read) [ 44.443879] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. [ 50.134357] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/09 18:44:46 fuzzer started [ 52.145634] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/09 18:44:49 dialing manager at 10.128.0.26:42717 2018/07/09 18:44:51 syscalls: 1589 2018/07/09 18:44:51 code coverage: enabled 2018/07/09 18:44:51 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/07/09 18:44:51 setuid sandbox: enabled 2018/07/09 18:44:51 namespace sandbox: enabled 2018/07/09 18:44:51 fault injection: enabled 2018/07/09 18:44:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/09 18:44:51 net packed injection: enabled [ 59.265899] random: crng init done 18:46:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c0848082712b470666b6dddf74ced693973ba1ded8b") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fchown(r0, 0x0, 0x0) 18:46:15 executing program 1: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000d40)=ANY=[]) 18:46:15 executing program 3: mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x400000085, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x90020000) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x7f, 0x1, 0x208, 0x4, 0x5b5a, 0x68, 0x8000, 0x400, r1}, 0x20) 18:46:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000003000)='-.[vmnet0^\x00', 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000004000)=0x2) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) ftruncate(r1, 0x0) close(r0) 18:46:15 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000000)={'b:idb&0\x00\x00\x00\x00\x00\x00@\x00', @ifru_ivalue}) 18:46:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xb, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 18:46:15 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fdatasync(r1) unlink(&(0x7f0000f86000)='./control/file0\x00') getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x1f, &(0x7f00000001c0)=0x2) rmdir(&(0x7f00000000c0)='./control\x00') umount2(&(0x7f0000000040)='./control/file1\x00', 0x0) mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock(&(0x7f0000bd3000/0x4000)=nil, 0x4000) mremap(&(0x7f00009ac000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000cde000/0x1000)=nil) 18:46:15 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0xc, [], 0x1}}, 0x2d) [ 140.547259] IPVS: ftp: loaded support on port[0] = 21 [ 140.564918] IPVS: ftp: loaded support on port[0] = 21 [ 140.590552] IPVS: ftp: loaded support on port[0] = 21 [ 140.644625] IPVS: ftp: loaded support on port[0] = 21 [ 140.669459] IPVS: ftp: loaded support on port[0] = 21 [ 140.672333] IPVS: ftp: loaded support on port[0] = 21 [ 140.704181] IPVS: ftp: loaded support on port[0] = 21 [ 140.736234] IPVS: ftp: loaded support on port[0] = 21 [ 142.986327] ip (4831) used greatest stack depth: 53584 bytes left [ 144.664295] ip (4931) used greatest stack depth: 53504 bytes left [ 145.261240] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.267859] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.310566] device bridge_slave_0 entered promiscuous mode [ 145.393020] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.399647] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.448644] device bridge_slave_0 entered promiscuous mode [ 145.498134] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.504660] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.527293] device bridge_slave_0 entered promiscuous mode [ 145.547007] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.553716] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.591176] device bridge_slave_0 entered promiscuous mode [ 145.618305] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.624931] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.650539] device bridge_slave_0 entered promiscuous mode [ 145.676965] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.683468] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.713190] device bridge_slave_0 entered promiscuous mode [ 145.751139] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.757689] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.772263] device bridge_slave_0 entered promiscuous mode [ 145.781676] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.788220] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.800209] device bridge_slave_1 entered promiscuous mode [ 145.820438] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.826984] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.861703] device bridge_slave_1 entered promiscuous mode [ 145.888232] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.894733] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.915300] device bridge_slave_0 entered promiscuous mode [ 145.947447] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.953963] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.963720] device bridge_slave_1 entered promiscuous mode [ 145.974599] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.981177] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.012306] device bridge_slave_1 entered promiscuous mode [ 146.031018] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.037634] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.066177] device bridge_slave_1 entered promiscuous mode [ 146.075005] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.081724] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.109184] device bridge_slave_1 entered promiscuous mode [ 146.143148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.152603] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.159159] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.198563] device bridge_slave_1 entered promiscuous mode [ 146.206434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.214658] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.221176] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.240273] device bridge_slave_1 entered promiscuous mode [ 146.260542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.271539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.279816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.367848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.401560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.469226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.495257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.526378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.541310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.551292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.571311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.664789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.817358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.825782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 147.306569] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.318356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.460298] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.513246] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.539774] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.551231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.620502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.630831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.671222] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.683879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 147.748629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.806759] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.827754] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.863485] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 147.955328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.969247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.995932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.006318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.032982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.047280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.059654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.088240] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 148.107415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.114558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.141555] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.148808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.215323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.222846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.303323] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.312137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.332460] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.339518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.368491] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.376290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.432902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.439964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.461678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.468908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.506740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 148.513818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.545416] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.555446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.562502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.611421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.737377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.756180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.851672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 148.858795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.257008] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.268105] team0: Port device team_slave_0 added [ 149.330716] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.363852] team0: Port device team_slave_0 added [ 149.390402] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.403923] team0: Port device team_slave_0 added [ 149.426140] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.451279] team0: Port device team_slave_0 added [ 149.470237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.537294] team0: Port device team_slave_0 added [ 149.576145] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.584934] team0: Port device team_slave_1 added [ 149.592226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.612592] team0: Port device team_slave_1 added [ 149.636510] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.657004] team0: Port device team_slave_0 added [ 149.676556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.692964] team0: Port device team_slave_1 added [ 149.711675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.740392] team0: Port device team_slave_0 added [ 149.771928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 149.790397] team0: Port device team_slave_0 added [ 149.814433] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.843791] team0: Port device team_slave_1 added [ 149.868821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.881287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.901359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.937553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 149.955573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 149.981495] team0: Port device team_slave_1 added [ 149.997157] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.024962] team0: Port device team_slave_1 added [ 150.030845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.043551] team0: Port device team_slave_1 added [ 150.070600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.088011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.122006] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.131516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.144016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.176747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.185237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.215332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.238906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.246921] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.258270] team0: Port device team_slave_1 added [ 150.269874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.286521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.293755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.314279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.351207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.367761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.390556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.407243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.429115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.446216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.455844] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 150.466711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.483183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.491726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.521308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.546955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.569450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.602423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.627729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.646294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.672389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.695376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.703913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.713810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.721274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.732384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.764920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.774704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.786193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.806760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.814908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.844338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.864290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.874665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.886542] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.894459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 150.907155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.914959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.951570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.993916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.016392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.045332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.080115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.097120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.105601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.113752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.122122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.131302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.142636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.151843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.175365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.183133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.198543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.221590] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.229226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.244318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.279658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.289763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.306473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.331301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 151.352502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.363843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.375515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.382931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.409181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.448832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.496129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.521853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.547416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.561442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.571187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.587790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.609327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.617743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.629618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 151.650189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.680792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.721851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.757354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.794957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.832420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.863648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.885382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.395872] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.402709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.409616] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.416549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.463190] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.469853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.591406] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.598146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.605125] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.611614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.673437] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.733240] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.739747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.746703] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.753196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.818805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.915875] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.922374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.929331] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.935838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.987491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.998606] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.005167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.012136] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.018642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.029497] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.038220] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.044738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.051704] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.058222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.095567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.138017] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.144569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.151417] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.157939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.205543] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.216006] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.222551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.229396] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.235907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.291942] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.490298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.506267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.547430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.563257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.580152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.588541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.596741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.891172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.954795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.004898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.024836] ip (6148) used greatest stack depth: 53216 bytes left [ 167.025169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.059898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.105848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.145806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.370551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.988290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.061334] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.113729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.122544] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.139338] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.246813] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.334980] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 168.499285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.107257] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.113809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.122475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.201595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.208153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.225935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.254899] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.264218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.278954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.311157] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.324844] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.345611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.382274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.420871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.456958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.507241] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.515153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.551206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.591292] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.602246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.620717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.657695] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.667699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.684494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.235190] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.368254] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.420146] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.527598] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.589820] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.671789] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.820642] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.876497] 8021q: adding VLAN 0 to HW filter on device team0 18:46:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) [ 177.367859] futex_wake_op: syz-executor3 tries to shift op by 32; fix this program [ 177.466611] futex_wake_op: syz-executor3 tries to shift op by 32; fix this program 18:46:53 executing program 1: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000d40)=ANY=[]) 18:46:53 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000f7ff0)=@req={0x3fc, 0x0, 0x3}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) close(r4) 18:46:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) 18:46:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f000002aff0)=[{&(0x7f0000000080)="5400000020007f00b72c13b2a4a2809302000000030343026c26236925000400070000000000000065c634f128f1c46b7b31afdc1338d54400ecffffff00005ae583de448daa7227c43ab8220000bf0cec6bab91", 0x54}], 0x1, &(0x7f0000000180)}, 0x0) 18:46:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@dev={0xfe, 0x80}}, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000080)=""/122, &(0x7f0000000000)=0x7a) 18:46:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8, [@typed={0x4}]}]}, 0x24}, 0x1}, 0x0) [ 177.958127] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 177.965721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor3'. 18:46:54 executing program 1: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000d40)=ANY=[]) 18:46:54 executing program 0: unshare(0x400) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0x0, 0x0, 0xb6}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000017000)="010000000000000018") 18:46:54 executing program 7: r0 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000480)=0xdbc, 0x4) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x0, 0x0, 0xfffffffffffffe9f) 18:46:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x37, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 18:46:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100), 0x79ffffffffffff) 18:46:54 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8, [@typed={0x4}]}]}, 0x24}, 0x1}, 0x0) 18:46:54 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x77, &(0x7f00000016c0)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 18:46:54 executing program 1: unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x800c6613, &(0x7f0000000d40)=ANY=[]) 18:46:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4001, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000200)=0x40) r2 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x84, r3, 0xe04, 0x70bd2a, 0x0, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) sendfile(r0, r2, &(0x7f0000000240)=0x4800, 0x20000102000007) 18:46:54 executing program 7: r0 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000480)=0xdbc, 0x4) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x0, 0x0, 0xfffffffffffffe9f) 18:46:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001200e7ef00c2215ef5809578d9bf", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/121, 0x79}, {&(0x7f00000011c0)=""/176, 0xb0}, {&(0x7f0000001280)=""/106, 0x6a}, {&(0x7f0000001300)=""/86, 0x56}], 0x5, &(0x7f0000001400)=""/143, 0x8f}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003780), 0x40000000000037a, 0x0, &(0x7f0000000000)={0x77359400}) 18:46:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x37, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 18:46:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8, [@typed={0x4}]}]}, 0x24}, 0x1}, 0x0) 18:46:55 executing program 7: r0 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000480)=0xdbc, 0x4) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x0, 0x0, 0xfffffffffffffe9f) 18:46:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x37, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 18:46:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x4000000000002, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @nested={0x8, 0x8, [@typed={0x4}]}]}, 0x24}, 0x1}, 0x0) 18:46:55 executing program 5: unshare(0x24020400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000017c0)=@mangle={'mangle\x00', 0x1f, 0x7fffffe, 0xfffffffffffffc81, 0x104, 0x3a0, 0x0, 0x2c4, 0x2c4, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, &(0x7f0000000080), {[{{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x98, 0xbc, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}, @common=@icmp={0x0, 'icmp\x00'}]}, @TTL={0x24, 'TTL\x00'}}, {{@uncond, 0x0, 0x3d, 0xfffffffffffffee0, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}, @inet=@rpfilter={0x0, 'rpfilter\x00'}]}, @ECN={0x24, 'ECN\x00'}}, {{@ip={@multicast2=0xe0000002, @multicast2=0xe0000002, 0x0, 0x0, 'ip_vti0\x00', 'bond0\x00'}, 0x0, 0xfe2d, 0xbc}, @ECN={0x24, 'ECN\x00'}}, {{@ip={@multicast2=0xe0000002, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'irlan0\x00'}, 0x0, 0x98, 0xbc}, @common=@inet=@TEE={0x0, 'TEE\x00', 0x1, {@ipv6, 'ip6gre0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback=0x7f000001}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x100000131) 18:46:55 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6(0xa, 0x6, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 18:46:55 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000300)="636965676f002236e26ca35385f9852da3692343bd3e9ffbe018147f61e854bfa1a101cba46a579c7d621892be96d969814e5c286f8137b08bce9489a43fd103d114c419000000000000", &(0x7f00000002c0)='queue1\x00') 18:46:55 executing program 7: r0 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000480)=0xdbc, 0x4) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x0, 0x0, 0xfffffffffffffe9f) 18:46:55 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000001900)="8f", 0x1, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "3adb91317667"}, 0x80) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x27b, &(0x7f0000000800), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000980)=@hci, 0xc, &(0x7f00000009c0), 0xa3, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2d5, 0x2042, &(0x7f0000000b80)={0x77359400}) 18:46:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4001, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000200)=0x40) r2 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x84, r3, 0xe04, 0x70bd2a, 0x0, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) sendfile(r0, r2, &(0x7f0000000240)=0x4800, 0x20000102000007) 18:46:55 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x4000000f8, &(0x7f0000000180), &(0x7f0000000140)=0x4) 18:46:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x408000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f0000000080)=@ethernet, 0x80, &(0x7f00000026c0)}}, {{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="e0000000000000000600000005000000"], 0x10}}], 0x2, 0x0) 18:46:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x37, "27020201594a87ccfe8000000000000059"}], 0x28}, 0x0) 18:46:55 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:55 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000a7eff4)) shutdown(r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 18:46:55 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 179.764207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:46:55 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:55 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:46:56 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x1, [@rand_addr=0xfffffffffffffffd]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xfffffffd, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 18:46:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmmsg(r1, &(0x7f0000003d00)=[{{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)="641845ba823be0d98d55bba9baa6d56e191a67f37fc8a4844988844d820393acf72595627d97198bc04857716878bc9c10a939901ae93e8b01769edd39def0cee27402ca4a2c867bc10103ce468865c24531c9e324a4734cd8b8d1b3957f8e78b424ffa7c4324120c178e9ed6c0d71edff448bcdec4d72987f9ee3daba0ee65386763ed93b5998d14488f877e937cf41ff2c1e1e7a1dd08b5a705932748b761ceb6e8d43ea50900d68e215fafb7cf5dc1ba82975ddd5814eaf9de71db993b3fe3efbcb7e3fb4854d8011f3e98257228dbc16dc63a1d5415e2663a0d8649fdb8ffb348e69830b9b347b", 0xe9}], 0x1, &(0x7f0000000b40)}}, {{&(0x7f0000002700)=@nfc={0x27}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002780)="3ce005684984f70f64a0abf94cab12215434d5342a06a4", 0x17}], 0x1, &(0x7f00000028c0)}}], 0x2, 0x0) 18:46:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000300)="6f6f6d5f73636f7265001d7399d5e9a6e7418b3ef00c59c439c15368d971a64d523ca88239ccde67") pread64(r1, &(0x7f0000000380)=""/54, 0x36, 0x0) 18:46:56 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)) 18:46:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4001, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000200)=0x40) r2 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x84, r3, 0xe04, 0x70bd2a, 0x0, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) sendfile(r0, r2, &(0x7f0000000240)=0x4800, 0x20000102000007) 18:46:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000025ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000027fd4)=@mpls_newroute={0x1c, 0x18, 0x503, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}, 0x1}, 0x0) 18:46:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") keyctl$set_reqkey_keyring(0x3, 0xfffffffffffffffe) 18:46:56 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto(r0, &(0x7f0000000080), 0x0, 0x40810, 0x0, 0x0) 18:46:56 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:56 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:46:56 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x1, [@rand_addr=0xfffffffffffffffd]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xfffffffd, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 18:46:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000140), &(0x7f0000000180)=0x8) 18:46:56 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r0, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a80)=""/95, 0x5f}], 0x1, &(0x7f0000002b80)=""/62, 0x3e}}], 0x1, 0x0, 0x0) 18:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0x0, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=""/96}, 0x18) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 18:46:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4001, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000200)=0x40) r2 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x84, r3, 0xe04, 0x70bd2a, 0x0, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4004001) sendfile(r0, r2, &(0x7f0000000240)=0x4800, 0x20000102000007) 18:46:57 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0xc5d8, [], 0xbb}}, 0x1c) 18:46:57 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x0) open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 18:46:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x1, [@rand_addr=0xfffffffffffffffd]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xfffffffd, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 18:46:57 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0xc5d8, [], 0xbb}}, 0x1c) 18:46:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0x0, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=""/96}, 0x18) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 18:46:57 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x1, [@rand_addr=0xfffffffffffffffd]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xfffffffd, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 18:46:57 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00001e9000)) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0) 18:46:57 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0xc5d8, [], 0xbb}}, 0x1c) 18:46:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\n!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 18:46:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000140), &(0x7f0000000180)=0x8) 18:46:58 executing program 2: prctl$seccomp(0x34, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) 18:46:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x3f) 18:46:58 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:58 executing program 7: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0xc5d8, [], 0xbb}}, 0x1c) 18:46:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000802) readv(r0, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) read(r0, &(0x7f0000000000)=""/227, 0xe3) 18:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0x0, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=""/96}, 0x18) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 18:46:58 executing program 2: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000400)) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x23e, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r5, r5}, &(0x7f0000000600)=""/132, 0xff33, 0x0) 18:46:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5}]}, 0x30}, 0x1}, 0x0) 18:46:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x3f) 18:46:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\n!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 18:46:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5}]}, 0x30}, 0x1}, 0x0) 18:46:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 18:46:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x3f) 18:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0x0, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) socket(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00009da000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=""/96}, 0x18) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000580), 0x4) sendto$inet6(r0, &(0x7f0000000540)='\b', 0x1, 0x3fffffa, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 18:46:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5}]}, 0x30}, 0x1}, 0x0) 18:46:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\n!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 18:46:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000140), &(0x7f0000000180)=0x8) 18:46:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:46:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x3f) 18:46:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) sendto$inet6(r2, &(0x7f0000000040), 0x24, 0x0, &(0x7f0000000080)={0xa, 0x8906, 0x3, @dev={0xfe, 0x80}}, 0x1c) 18:46:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5}]}, 0x30}, 0x1}, 0x0) 18:46:59 executing program 3: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) [ 183.501580] print_req_error: I/O error, dev loop0, sector 0 [ 183.507660] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 183.515671] print_req_error: I/O error, dev loop0, sector 8 [ 183.521551] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 183.529649] print_req_error: I/O error, dev loop0, sector 16 [ 183.535762] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 183.543804] print_req_error: I/O error, dev loop0, sector 24 [ 183.549776] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 183.557701] print_req_error: I/O error, dev loop0, sector 32 [ 183.563658] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 183.571587] print_req_error: I/O error, dev loop0, sector 40 [ 183.577565] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 183.585558] print_req_error: I/O error, dev loop0, sector 48 [ 183.591651] Buffer I/O error on dev loop0, logical block 6, lost async page write 18:46:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x40, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) [ 183.599899] print_req_error: I/O error, dev loop0, sector 56 [ 183.605876] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 183.613785] print_req_error: I/O error, dev loop0, sector 64 [ 183.619745] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 183.627659] print_req_error: I/O error, dev loop0, sector 72 [ 183.633635] Buffer I/O error on dev loop0, logical block 9, lost async page write 18:46:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa283005b580a000900020009000000000015000404ff7e", 0x24}], 0x1}, 0x0) 18:46:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) 18:46:59 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\n!'], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 18:46:59 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f0000000300)) unlink(&(0x7f0000000480)='./file0/bus\x00') 18:46:59 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) [ 183.933343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 183.978452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 18:47:00 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2103) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req={0x7, 0x3f, 0x3f, 0x400}, 0x10) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-generic)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r2, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvfrom(r2, &(0x7f0000000500)=""/236, 0xec, 0x0, 0x0, 0x0) [ 184.050896] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 184.057395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 184.058593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 18:47:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002e40)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x80080) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 18:47:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:47:00 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f0000000300)) unlink(&(0x7f0000000480)='./file0/bus\x00') 18:47:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f0000000140), &(0x7f0000000180)=0x8) 18:47:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:47:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) 18:47:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002e40)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x80080) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 18:47:00 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f0000000300)) unlink(&(0x7f0000000480)='./file0/bus\x00') [ 184.788314] alg: No test for gcm(aes-generic) (gcm_base(ctr(aes-generic),ghash-generic)) 18:47:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) 18:47:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:47:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:47:01 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f0000000300)) unlink(&(0x7f0000000480)='./file0/bus\x00') 18:47:01 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) 18:47:01 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) 18:47:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002e40)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x80080) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 18:47:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) 18:47:01 executing program 3: r0 = socket$inet(0x2, 0x80003, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) 18:47:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:47:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002e40)='./file0\x00', 0x20141042, 0x0) ftruncate(r2, 0x80080) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) sendfile(r1, r2, &(0x7f0000d83ff8), 0x2008000fffffffe) 18:47:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 18:47:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) 18:47:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8000000000000008, &(0x7f0000000040), 0x207) 18:47:01 executing program 4: add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="bf2a", 0x2, 0xfffffffffffffffe) 18:47:01 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) 18:47:01 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') ioctl$TIOCSTI(r1, 0x5412, 0x2) ioctl$TCSBRKP(r1, 0x5425, 0x1) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x80, r4, 0x0, 0x70bd25, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x2004c014) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="84000000"], 0x1}, 0x1, 0x0, 0x0, 0x844}, 0x20000000) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) listen(r3, 0x0) 18:47:01 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) 18:47:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r1, &(0x7f0000000200)=@generic={0x0, "c5372477d818545b8293d8a249b0ec397958b5d611dd0dcf1a5bc9b30e2a5c590fcd9b792041ddeb79ad767919d1abdae7179e0a781aa6a4688a2ff046d9c85c21ec78f8624c10b8551f524bc4ccca770b76379739e240aae7c61cd9ec819c8ae7bdc7d22a00067999d1a8570a930ae3c0cc28a627a217422eba057bea4e"}, 0x80) 18:47:02 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/25, 0x19}], 0x2, &(0x7f0000000500)}, 0x0) 18:47:02 executing program 4: r0 = eventfd2(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000540)="cd351644c25347dee8", 0x9}], 0x1) 18:47:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") sendmsg$unix(r1, &(0x7f0000001c40)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000001700)="8c", 0x1}], 0x1, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) 18:47:02 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000f7ff0)=@req={0x3fc, 0x0, 0x3}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) close(r0) [ 186.338499] dccp_close: ABORT with 129 bytes unread 18:47:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000000)='security.capability\x00', 0x14, 0x0) 18:47:02 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/25, 0x19}], 0x2, &(0x7f0000000500)}, 0x0) 18:47:02 executing program 6: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r1 = shmat(r0, &(0x7f0000fec000/0x1000)=nil, 0x7000) shmat(r0, &(0x7f0000feb000/0x3000)=nil, 0x4001) mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) shmdt(r1) 18:47:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x1001}, 0x98) 18:47:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"fc3f2b4e0a98331e697753b3d57a4981"}}, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x118) 18:47:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") sendmsg$unix(r1, &(0x7f0000001c40)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000001700)="8c", 0x1}], 0x1, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) 18:47:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00002c0fe8)={r0, &(0x7f000078f000), &(0x7f0000476f8a)=""/118}, 0x18) 18:47:02 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/25, 0x19}], 0x2, &(0x7f0000000500)}, 0x0) 18:47:02 executing program 7: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) 18:47:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) recvfrom(r1, &(0x7f0000000000)=""/64, 0x40, 0x20, &(0x7f0000000040)=@nfc={0x27}, 0x701000) 18:47:02 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000240)) 18:47:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x40085112, &(0x7f0000000040)) 18:47:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") sendmsg$unix(r1, &(0x7f0000001c40)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000001700)="8c", 0x1}], 0x1, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) 18:47:03 executing program 3: r0 = socket(0x2, 0x3, 0x40000000000000ff) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/25, 0x19}], 0x2, &(0x7f0000000500)}, 0x0) 18:47:03 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)) 18:47:03 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d}, 0x10, &(0x7f000000eff0)={&(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}, 0x1}, 0x0) 18:47:03 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000000)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000440)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet6(0xa, 0x0, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) 18:47:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x1001}, 0x98) 18:47:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") sendmsg$unix(r1, &(0x7f0000001c40)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000001700)="8c", 0x1}], 0x1, &(0x7f0000001b40)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) 18:47:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) 18:47:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 18:47:03 executing program 7: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x11, 0x2, 0x0, &(0x7f0000000140)) 18:47:03 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)="73797a5f74756e0000008000", 0x10) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000000200), 0x8000ffffffff) 18:47:03 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000007fc8)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000002c00ff0cfffefd956fc283b724a600000d00000000060000000000001013000006c41180b598bc593a02001148a730df33a49868c62b2ca654a6613b6aab02000000bc832b0790ed", 0x4c}], 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000340)=""/221, 0xffffffffffffff4a, 0x400000000002, &(0x7f0000000300)={0x11, 0xff, r1, 0x1, 0xffffffff, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) [ 188.005687] netlink: 40 bytes leftover after parsing attributes in process `syz-executor5'. 18:47:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x803, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)=@kern={0x10}, 0xc, &(0x7f0000000900)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000000500)={0x10}, 0x10}], 0x2, &(0x7f0000000980)=[@rights={0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x28}, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000540)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x50, &(0x7f00000009c0), 0x259, &(0x7f0000000080)=""/88, 0x58}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/230, 0xe6}, {&(0x7f0000000dc0)=""/40, 0x28}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/101, 0x65}, {&(0x7f0000000e80)=""/111, 0x6f}], 0x7, &(0x7f0000000f00)=""/19, 0x13}}, {{&(0x7f0000002340)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f00000023c0), 0x4c, &(0x7f0000002580)=""/145, 0x91}}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=""/52, 0x34}}], 0x4, 0x0, &(0x7f0000002cc0)={0x77359400}) 18:47:04 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0xffffffffffffff01, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80000000}) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) [ 188.095495] netlink: 40 bytes leftover after parsing attributes in process `syz-executor5'. [ 188.122874] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:47:04 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x1, 0x1, [@local={0xac, 0x14, 0x14, 0xaa}]}, 0x14) sendto$inet(r0, &(0x7f0000c95ffd), 0x1c00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 18:47:04 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 18:47:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x1001}, 0x98) 18:47:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5422, &(0x7f0000000140)) 18:47:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) dup2(r1, r2) [ 188.356788] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:47:04 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x1, 0x160, [0x0, 0x20000340, 0x20000370, 0x200003a0], 0x0, &(0x7f0000000000), &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}, 0x1d8) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 18:47:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x1, 0x7f, 0xc}, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f00000000c0), 0x80000003) 18:47:04 executing program 6: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000001c0), 0x20, 0x2) 18:47:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:47:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d3ab27191a01002356ba602dff050022fef9b9afa4b20079", 0x18) 18:47:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x1001}, 0x98) 18:47:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 18:47:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 18:47:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f00002b6ffd), 0x3a, 0x8040, &(0x7f0000a1b000)=@un=@abs, 0x8) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x2003}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0x1}) 18:47:05 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0xfffffe06}], 0x1}, 0x0) 18:47:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000280)="27000000140007a4d53a5000120f0a0011000100f5fe0012ff00a51b82d77a4b6db0068dd304f9", 0x27) 18:47:05 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getpolicy={0x50, 0x15, 0x974bd84b4559f4d3, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0x50}, 0x1}, 0x0) [ 189.311738] alg: No test for cbcmac(camellia) (cbcmac(camellia-generic)) 18:47:05 executing program 0: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xfffffffffffffdd0) 18:47:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = socket$inet(0x2, 0x80002, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x1, 0x4, 0x4}}, 0x26) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) splice(r1, &(0x7f0000000000), r2, &(0x7f0000000040)=0x30, 0x7fffffff, 0xc) fallocate(r4, 0x0, 0x0, 0x7f) r5 = socket$inet6(0xa, 0x1, 0x0) lseek(r1, 0x81, 0x7) ioctl(r5, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$KDSETMODE(r2, 0x4b3a, 0x5) prctl$setendian(0x14, 0x0) fsync(r2) r6 = socket$inet(0x2, 0x200000002, 0x10000000000) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e20, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, 0x3a) close(r6) close(r7) 18:47:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x80087601, &(0x7f0000000000)) 18:47:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="00000012715c"], 0x1) close(r2) close(0xffffffffffffffff) 18:47:05 executing program 4: r0 = socket(0x40000000002, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x63) 18:47:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc), 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 189.778313] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! [ 189.806915] alg: No test for ccm(camellia) (ccm_base(ctr(camellia-generic),cbcmac(camellia-generic))) 18:47:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000080)="0100000000000000180400000000000000555d040f45426d0270ec78dfd849832f") 18:47:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) [ 190.000226] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:47:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0), 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000080)=0x8000000, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000000c0)=""/177, &(0x7f0000000180)=0x19f) close(r2) close(r1) 18:47:06 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = socket$netlink(0x10, 0x3, 0x4) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="480000001400197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0fe5f0028213ee20600d4ff5bffff00c7e5ed5e00000000c8550000000000000000", 0x48}], 0x1) 18:47:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 18:47:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) sendto$inet6(r0, &(0x7f00000017c0)="050400000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a9cc49322e664f65bfc370ad30c2750684a7a4938b4b677081c14445c06232055397880d89abad699af485f036c70bbb8a78410e617e9be77cbd33a04385e3b", 0xab, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 18:47:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) lseek(r1, 0x0, 0x3) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) 18:47:06 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000007e3c71ba000200000000001f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) unshare(0x400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) 18:47:06 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x40000004}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140), 0x8) 18:47:06 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 18:47:06 executing program 6: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0/0ile0\x00'}, 0x10) 18:47:06 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d002bc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvmmsg(r0, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000005080)=""/5, 0x5}}, {{&(0x7f0000006880)=@ax25, 0x80, &(0x7f0000006d00)}}], 0x2, 0x0, &(0x7f0000007000)={0x0, r1+30000000}) 18:47:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x18, 0xfff7ffffffffffff, 0x0, 0x0, {0x1}, [@generic='*']}, 0x18}, 0x1}, 0x0) 18:47:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) [ 190.598011] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.637366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor7'. 18:47:06 executing program 3: r0 = socket(0x2, 0x2000080003, 0x2) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) [ 190.659512] netlink: 'syz-executor2': attribute type 29 has an invalid length. 18:47:06 executing program 6: mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 18:47:06 executing program 7: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 190.726804] netlink: 'syz-executor2': attribute type 29 has an invalid length. 18:47:06 executing program 1: semtimedop(0x0, &(0x7f00000001c0)=[{}, {0x0, 0x0, 0x1800}], 0x2, &(0x7f0000000200)={0x77359400}) [ 190.777722] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.834186] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 190.892534] netlink: 'syz-executor2': attribute type 29 has an invalid length. 18:47:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 18:47:07 executing program 1: semtimedop(0x0, &(0x7f00000001c0)=[{}, {0x0, 0x0, 0x1800}], 0x2, &(0x7f0000000200)={0x77359400}) 18:47:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000380)=""/4096) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000240)=""/139) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001380)=""/175) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/172) close(r0) 18:47:07 executing program 0: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mount$9p_tcp(&(0x7f0000000140)='-24.20.20.', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=tcp,port=0']) 18:47:07 executing program 4: r0 = socket(0x10, 0x2, 0xf) r1 = syz_open_procfs(0x0, &(0x7f0000000440)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f7980584303d01f0549a89d78dc4af89ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5ad3657818feb0279188b92b2e6b035cde4c66c6b00081bd106f6adfe58108a8be89d3695670374e304c071de17635f3034de8c2372e07000000000000007d656f") r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r0, r1, &(0x7f0000000000), 0x80000002) 18:47:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 18:47:07 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lseek(r0, 0xfffffffffffffffe, 0x3) 18:47:07 executing program 6: mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 18:47:07 executing program 1: semtimedop(0x0, &(0x7f00000001c0)=[{}, {0x0, 0x0, 0x1800}], 0x2, &(0x7f0000000200)={0x77359400}) 18:47:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f0000003400)=@alg, 0x80, &(0x7f0000003a00), 0x0, &(0x7f0000003ac0)=""/204, 0xcc}}], 0x1, 0x21, &(0x7f0000003d40)={0x77359400}) 18:47:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000011ff4)={0x10}, 0xc, &(0x7f0000012ff0)={&(0x7f0000001980)={0xcbc, 0x26, 0x401, 0x0, 0x0, {}, [@nested={0xbb0, 0x0, [@typed={0xb0c, 0x0, @binary="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"}, @typed={0x14, 0x15, @ipv6}, @generic="636670af1729b3cf7beccf6b40f11518d9013d32a4e1f15d8f4680e1efb362fbd37219044c4155b5869daca716d1dadfd4f3a07038eef10fb9321ffe3fc639c65a2790cf9ef9c5a556f2b9e7ce489648187d749184ed838ae0c37018d980841aac3be38e8022bca614ea2727aae07ef7b328ec54acb509ebe0163e1507f06cbb1e459dc3669d23ffe5"]}, @nested={0xf0, 0x84, [@generic="e85d6b0e0753a2b6c17ace2f40b66ad046c9add4baa2c457a459e6eb", @generic="997235a80ea264a6d79f4ce23fa4ede81d799abe02754fba6ace8389ee91fa467daadf668b5edfc1684b1a4d71d982cf4ed6bc5d77fb68ee52241a7ff3ffbd92f2bd2c2b87540784d52e1fc2e358a22c133937a85441a66c99e22ae3d2d0f57e14aa0756f9dfdfd16d3d2b43c9e72d5fc45cbcf00dd2c117c97f9de947a3523a3e2afdefdd4569df2e1b8a508f5dc9d958f824e0f10f0ab91da50c2eb8a4cf5839a149aa91d2eef49326b55476ff779870720942b2f383390be629627927e61cb5c89e2a2a2ee5cca1924186f25ee6"]}, @generic="86731a4692f6"]}, 0xcbc}, 0x1}, 0x0) [ 191.603609] netlink: 3224 bytes leftover after parsing attributes in process `syz-executor5'. 18:47:07 executing program 6: mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 18:47:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0101400503000009020000050000004b000000050000000000000000000000000000006f4d6fb1ee63dfecaacca965"], 0x30) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000780)=""/81, 0x51}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2) write$binfmt_aout(r0, &(0x7f0000002980)={{}, "", [[]]}, 0x120) 18:47:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r1}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={r1}, &(0x7f0000000040)=0x8) 18:47:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write(r2, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 18:47:07 executing program 1: semtimedop(0x0, &(0x7f00000001c0)=[{}, {0x0, 0x0, 0x1800}], 0x2, &(0x7f0000000200)={0x77359400}) 18:47:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x1, 0x218, [0x0, 0x20000480, 0x200004b0, 0x200004e0], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'sit0\x00', 'bpq0\x00', 'yam0\x00', 'gre0\x00', @link_local={0x1, 0x80, 0xc2}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xc0, 0x138, 0x188, [@helper={'helper\x00', 0x28, {{0x0, 'sip-20000\x00'}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "ed566db6b636e51d29705a103641688fcad5c04bc8ef27e3d885d57b902cf2d065c54c6467101a7bfa624d5be30aa32629be9f3be16034d03c782150649f21eb"}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}]}, 0x290) 18:47:08 executing program 6: mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 18:47:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) shutdown(r0, 0x0) [ 192.022154] xt_helper: cannot load conntrack support for proto=7 18:47:08 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 18:47:08 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000f15fd0)=[{{}, 0x1, 0x3a, 0x2}, {}], 0x30) 18:47:08 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/58, 0x3a}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) read(r0, &(0x7f0000000100)=""/77, 0x9c) 18:47:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write(r2, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 18:47:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='lo\x00'}) 18:47:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) shutdown(r0, 0x0) [ 192.475203] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 192.486408] bond0: lo is up - this may be due to an out of date ifenslave 18:47:08 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='lo\x00'}) 18:47:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write(r2, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 18:47:08 executing program 2: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 192.798353] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 192.809391] bond0: lo is up - this may be due to an out of date ifenslave 18:47:08 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:09 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x1000) r1 = socket(0x10, 0x803, 0x800000000000000c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 18:47:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:47:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) shutdown(r0, 0x0) 18:47:09 executing program 2: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 18:47:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='lo\x00'}) 18:47:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000000c0)='fd\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) write(r2, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) [ 193.142495] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 193.153608] bond0: lo is up - this may be due to an out of date ifenslave 18:47:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x0) read(r1, &(0x7f0000000380)=""/192, 0x242) read(r1, &(0x7f00000002c0)=""/154, 0x9a) 18:47:09 executing program 2: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 18:47:09 executing program 5: unshare(0x2000400) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) lseek(r0, 0x3, 0x0) 18:47:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='lo\x00'}) 18:47:09 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xffffffffffffffff) 18:47:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) shutdown(r0, 0x0) [ 193.581881] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 193.592971] bond0: lo is up - this may be due to an out of date ifenslave 18:47:09 executing program 2: r0 = open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000ddd000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 18:47:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fdatasync(r1) 18:47:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0xfffffffffffffe89) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 18:47:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:10 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x1000) r1 = socket(0x10, 0x803, 0x800000000000000c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 18:47:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:10 executing program 2: r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="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", 0x311, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 18:47:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00009e7fe4)={0xa, 0x3}, 0x1c) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") accept$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x3, @loopback=0x7f000001}, 0x10) 18:47:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1}, 0x0) 18:47:10 executing program 0: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f0000000080)="0200000001000000000000000200f3000000000c", 0x14, 0x0) 18:47:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x0) read(r1, &(0x7f0000000380)=""/192, 0x242) read(r1, &(0x7f00000002c0)=""/154, 0x9a) 18:47:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 18:47:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1}, 0x0) 18:47:10 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f00001fb000)={&(0x7f000061eff4)={0x10}, 0xc, &(0x7f0000f6fff0)={&(0x7f00003d8000)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80}, [@RTA_DST={0x8, 0x1}]}, 0x24}, 0x1}, 0x0) 18:47:10 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x1000) r1 = socket(0x10, 0x803, 0x800000000000000c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 18:47:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1}, 0x0) 18:47:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0xfffffffffffffe89) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 18:47:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f760070") r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x10, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0x79) 18:47:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 18:47:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x0) read(r1, &(0x7f0000000380)=""/192, 0x242) read(r1, &(0x7f00000002c0)=""/154, 0x9a) 18:47:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}, 0x1}, 0x0) 18:47:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 18:47:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) 18:47:11 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2001) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x1000) r1 = socket(0x10, 0x803, 0x800000000000000c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f6578650000005400042a004bddd9de91be10eebf00f5e94aae2200010000c7457accc3320c67a90f79805843e901d2db75af1f00000000000000005ac6d3") sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 18:47:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 18:47:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback={0x0, 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) 18:47:12 executing program 2: r0 = socket$inet6(0xa, 0x4000000005, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getgroups(0x2, &(0x7f0000000040)=[0x0, 0xffffffffffffffff]) setregid(r1, r1) 18:47:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x200000) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 18:47:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) 18:47:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0xfffffffffffffe89) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 18:47:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80007}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) close(r1) 18:47:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 18:47:12 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x800000000114, 0x800000000002717, &(0x7f0000000040), &(0x7f0000000180)) 18:47:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x80000000002, 0x4) sendto$inet(r1, &(0x7f0000000100)="81", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="83", 0x1}], 0x1, &(0x7f0000000000)}}], 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000000780)=""/240, 0xf0, 0x2, &(0x7f00000001c0)={0x2, 0x0, @multicast2=0xe0000002}, 0x930000) 18:47:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x0) read(r1, &(0x7f0000000380)=""/192, 0x242) read(r1, &(0x7f00000002c0)=""/154, 0x9a) 18:47:12 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_xen(&(0x7f0000003e80)='cgroup\x00', &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)='9p\x00', 0x1000, &(0x7f0000003f40)=ANY=[]) open$dir(&(0x7f0000000000)='./file0\x00', 0x45a002, 0x0) 18:47:12 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8}) 18:47:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)=ANY=[@ANYBLOB="0200000000000000"]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=""/226, &(0x7f0000000000)=""/27}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x204000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001780)={0x0, r1}) 18:47:13 executing program 0: r0 = socket(0x400000000000010, 0x803, 0x0) write(r0, &(0x7f00000001c0)="240000001a0099f0003be900783f00000208089f97cca4d912f06b000000000400088864", 0x24) 18:47:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000100)={0x11, 0x6, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') sendfile(r1, r2, &(0x7f0000000700), 0x41f3) 18:47:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x1ff, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) [ 197.240901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 18:47:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)=ANY=[@ANYBLOB="0200000000000000"]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=""/226, &(0x7f0000000000)=""/27}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x204000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001780)={0x0, r1}) 18:47:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x32, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) 18:47:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001780)}, 0x0) 18:47:13 executing program 2: mkdir(&(0x7f0000000040)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f0000000140)='./control\x00') syz_fuse_mount(&(0x7f00000001c0)='./control/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./control/file1\x00', 0x0, 0xffffffffffffffff) close(r0) 18:47:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r1, &(0x7f00000002c0)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0xfffffffffffffe89) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 18:47:13 executing program 7: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r1, r2) 18:47:13 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='maps\x00') r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") sendfile(r0, r2, &(0x7f0000000080), 0x10000000000443) 18:47:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe8000000400000000000000ead17ae6e1e1e19daa"], &(0x7f0000000040)) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff000000000089b423968e450400000000000060"]}) setsockopt$inet_int(r1, 0x0, 0x40, &(0x7f0000000080), 0x4) 18:47:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, r1}}, 0x30) 18:47:13 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) 18:47:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)=ANY=[@ANYBLOB="0200000000000000"]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=""/226, &(0x7f0000000000)=""/27}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x204000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001780)={0x0, r1}) 18:47:13 executing program 7: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r1, r2) [ 198.033977] rdma_op 00000000c93292da conn xmit_rdma (null) [ 198.068539] rdma_op 00000000c93292da conn xmit_rdma (null) 18:47:14 executing program 7: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r1, r2) 18:47:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0xc) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x410000, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f00000000c0)=0xcb0963b0fdad0c02) 18:47:14 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)=ANY=[@ANYBLOB="0200000000000000"]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=""/226, &(0x7f0000000000)=""/27}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x204000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001780)={0x0, r1}) 18:47:14 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) [ 198.270646] hrtimer: interrupt took 80457 ns 18:47:14 executing program 7: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r1, r2) 18:47:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) [ 198.485696] rdma_op 0000000075dbe35f conn xmit_rdma (null) 18:47:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0xc) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x410000, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f00000000c0)=0xcb0963b0fdad0c02) [ 198.615209] rdma_op 000000001ae2f9f2 conn xmit_rdma (null) 18:47:14 executing program 2: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200000}}) 18:47:14 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) 18:47:14 executing program 5: r0 = socket$inet(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x114, 0x6, &(0x7f000000f000)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x0, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000027000), {[{{@ip={@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "68a8bdd6cf63953904c33da84d357a733f6ba7f8856c27fc1f7b3f1e6387"}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2d8) 18:47:14 executing program 7: r0 = socket$inet6(0xa, 0x20002000000805, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x3, &(0x7f00000003c0), 0x10) close(r2) close(r1) [ 199.003222] rdma_op 00000000698b7223 conn xmit_rdma (null) 18:47:15 executing program 6: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000000c0)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000000), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x20000000, 0x8000000000013, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)}}) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) 18:47:15 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000df08cd433a3e15117f041ca0c6d2f60000000065a0178f2fde4db3"], 0x5}, 0x1}, 0x0) 18:47:15 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) 18:47:15 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) 18:47:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0xc) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x410000, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f00000000c0)=0xcb0963b0fdad0c02) 18:47:15 executing program 2: r0 = socket$inet(0x2, 0x80003, 0x8) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000004740), 0x0, &(0x7f00000047c0)=""/251, 0xfb}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2}, 0x80}, 0x0) 18:47:15 executing program 5: r0 = syz_fuseblk_mount(&(0x7f00000001c0)='8/file0\x00', &(0x7f0000000040)='8/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x400) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5) [ 199.325889] rdma_op 000000001d83c341 conn xmit_rdma (null) [ 199.333520] rdma_op 0000000057e68fd8 conn xmit_rdma (null) 18:47:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0xc) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x410000, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f00000000c0)=0xcb0963b0fdad0c02) 18:47:15 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x2f1, &(0x7f0000003b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001840)=""/18, 0x29}, &(0x7f0000003b00)=[{&(0x7f0000003ac0)=""/41, 0x29}], 0x1, 0xffffff7f}}], 0x48}, 0x0) 18:47:15 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000002, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0xf6}, {}, @raw32}], 0x30) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x80000000000046, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07e901d2da75af1f0200f5ab26d7a071fb35331ce39c5aee3ad14c58322b033c96edbab46e84e76f6b9ff94ca5b7cdd87e622cba2a38fdc7e78f799a372cde13e7922d4661b2115997ffadac394ae75b1f8b8da59f19be9b9c1cf8efa45b0946ef4bed5525dca7020000000000000065dc3bff91b001f8be6f0730f41301c72170fed124d7f719cf6a99ecccc25b000000") sendfile(r1, r2, &(0x7f0000000000), 0x2b420a4f) 18:47:15 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x1) unshare(0x2000400) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 18:47:15 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000ffa000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f000031c000)=""/137, &(0x7f0000000000)=0x89) [ 199.631444] rdma_op 000000002678c5c3 conn xmit_rdma (null) 18:47:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x11}}) 18:47:15 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x8dffffff, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x58], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 18:47:15 executing program 4: unshare(0x24020400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc074510c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 18:47:15 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000) sendto$inet6(r0, &(0x7f0000000080)="188b", 0x2, 0x0, &(0x7f0000000040)={0xa}, 0x1c) 18:47:16 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x46400) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r0, &(0x7f0000000200), 0xfffffdcc}]) 18:47:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffbb, 0x80031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 18:47:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:16 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") dup2(r0, r1) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) 18:47:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040), 0x0, [{}]}, 0x88) 18:47:16 executing program 2: r0 = socket$inet(0x2, 0x80003, 0x8) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000004740), 0x0, &(0x7f00000047c0)=""/251, 0xfb}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2}, 0x80}, 0x0) 18:47:16 executing program 4: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x203}) mq_timedreceive(r0, &(0x7f00000004c0)=""/35, 0x23, 0x0, &(0x7f0000000500)={0x0, 0x989680}) 18:47:16 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000003c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'rdma', 0x20}]}, 0x6) 18:47:16 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x1f) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) accept$packet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000300)={r3, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x5) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x3) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000001c0)=""/205) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x20004000, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000000100), 0x8000fffffffe) 18:47:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}}) 18:47:16 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{}, 0x80}) 18:47:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x4) 18:47:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040), 0x0, [{}]}, 0x88) 18:47:16 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 18:47:16 executing program 4: syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000003ff8)) r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}, {}], 0xff91) 18:47:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 200.891812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.919582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:47:16 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x4000000f2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 18:47:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040), 0x0, [{}]}, 0x88) 18:47:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:17 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:17 executing program 2: r0 = socket$inet(0x2, 0x80003, 0x8) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000004740), 0x0, &(0x7f00000047c0)=""/251, 0xfb}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2}, 0x80}, 0x0) 18:47:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r2, 0x0, 0x1, 0x4}}, 0x20) [ 201.399725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:47:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040), 0x0, [{}]}, 0x88) 18:47:17 executing program 0: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r2, 0x1000000000016) flock(r0, 0x8) 18:47:17 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x35, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{}]}, 0x10) 18:47:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000009000100090c0900fcff0000040e05a5", 0x58}], 0x1) 18:47:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) 18:47:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:18 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:18 executing program 7: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x40000000000003e3}, 0x10) 18:47:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:18 executing program 5: mq_open(&(0x7f0000000000)='\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x400}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) writev(r0, &(0x7f0000000040), 0x100000000000034e) 18:47:18 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000280)=""/89, 0x59) 18:47:18 executing program 2: r0 = socket$inet(0x2, 0x80003, 0x8) recvmsg(r0, &(0x7f00000048c0)={&(0x7f00000033c0)=@hci, 0x80, &(0x7f0000004740), 0x0, &(0x7f00000047c0)=""/251, 0xfb}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x3, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@in={0x2}, 0x80}, 0x0) 18:47:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xdabb, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e24, 0x8, @empty, 0x4}}}, 0x38) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2951f9e2, 0xffffffffffffffff) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000140)=""/226) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040), 0x4) r1 = socket(0x2, 0x803, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x8d28, 0x4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="1e1adb922918dc1914efdc139ae20da016d66aa2689f837d3ae44b00172a6f9a900f893cec9bf435829e6390a9301eb2f1731997ae06aa26533e3666539a04398eb910ceba9f3ceff643e71bb3cf0081150c8962", 0x54, 0x0) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="ca903b61f18be0", 0x7, 0xfffffffffffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="97a63338dd6166149683c7b954734799fbdde08175bd1e3861e4c9735eb84fd7bfad09ddc2f840ab8946cdf06d56d9144224ba68253e202aa3eeab30010f8af8a202eb69ad12a9a7c7fbe7af4bae8c7de0403073a3ee488a5ad4760b1b", 0x5d, 0xfffffffffffffffe) add_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000009c0)='logon\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000a40)="eb538207b96607b6cf6280a3cc1527d88d40793cd8b5d43d6d44441fb0df597fe270bbc8c8a17c00b6a5133c48ec3c815fc1d8ab092a77937c2b60b3585b8cff04ac18bac42ccdcc6c6dc17a1f59932f2d", 0x51, 0xfffffffffffffffb) 18:47:18 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x58}, 0x1}, 0x0) 18:47:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r2, @in={{0x2}}}, 0x90) 18:47:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xdabb, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e24, 0x8, @empty, 0x4}}}, 0x38) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2951f9e2, 0xffffffffffffffff) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000140)=""/226) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040), 0x4) r1 = socket(0x2, 0x803, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x8d28, 0x4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="1e1adb922918dc1914efdc139ae20da016d66aa2689f837d3ae44b00172a6f9a900f893cec9bf435829e6390a9301eb2f1731997ae06aa26533e3666539a04398eb910ceba9f3ceff643e71bb3cf0081150c8962", 0x54, 0x0) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="ca903b61f18be0", 0x7, 0xfffffffffffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="97a63338dd6166149683c7b954734799fbdde08175bd1e3861e4c9735eb84fd7bfad09ddc2f840ab8946cdf06d56d9144224ba68253e202aa3eeab30010f8af8a202eb69ad12a9a7c7fbe7af4bae8c7de0403073a3ee488a5ad4760b1b", 0x5d, 0xfffffffffffffffe) add_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000009c0)='logon\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000a40)="eb538207b96607b6cf6280a3cc1527d88d40793cd8b5d43d6d44441fb0df597fe270bbc8c8a17c00b6a5133c48ec3c815fc1d8ab092a77937c2b60b3585b8cff04ac18bac42ccdcc6c6dc17a1f59932f2d", 0x51, 0xfffffffffffffffb) 18:47:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000680)="df24208bc79e2725d67da67bc84d08bc0e74a7de7c1b96f12e57cb3e9768e8211f6b98362c0d0158f7fdc046e4ec", 0x2e}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="490239d2ac0800000042a952ed71c21559a9c490b710a489522777e3c5608bc56e8ab25e4a9d4e6fc1dc", 0x2a}], 0x1) 18:47:19 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) 18:47:19 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffffc0, 0x120, 0x0, 0xffffffffffffff4f) sendto$inet(r0, &(0x7f0000000240)='3', 0x1, 0x48010, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvfrom(r0, &(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80) sendto$inet(r0, &(0x7f0000000280)="ab35152a3746cdaa1856c3a034aa2546f0fcb916471eb749fe1782b18ddab69c2422c150f94f822349af61961bc84980516908983466b46842381743d05370fb3e7af4d5c36315a1d852331834c6079e7d982d1c235c2bcf8cc7395067db68226cdd3bc82f1c64f7239a8bd7376f817af97e6a5501542f49c03f34737a2d782d", 0x80, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 18:47:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xdabb, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e24, 0x8, @empty, 0x4}}}, 0x38) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2951f9e2, 0xffffffffffffffff) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000140)=""/226) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040), 0x4) r1 = socket(0x2, 0x803, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x8d28, 0x4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="1e1adb922918dc1914efdc139ae20da016d66aa2689f837d3ae44b00172a6f9a900f893cec9bf435829e6390a9301eb2f1731997ae06aa26533e3666539a04398eb910ceba9f3ceff643e71bb3cf0081150c8962", 0x54, 0x0) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="ca903b61f18be0", 0x7, 0xfffffffffffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="97a63338dd6166149683c7b954734799fbdde08175bd1e3861e4c9735eb84fd7bfad09ddc2f840ab8946cdf06d56d9144224ba68253e202aa3eeab30010f8af8a202eb69ad12a9a7c7fbe7af4bae8c7de0403073a3ee488a5ad4760b1b", 0x5d, 0xfffffffffffffffe) add_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000009c0)='logon\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000a40)="eb538207b96607b6cf6280a3cc1527d88d40793cd8b5d43d6d44441fb0df597fe270bbc8c8a17c00b6a5133c48ec3c815fc1d8ab092a77937c2b60b3585b8cff04ac18bac42ccdcc6c6dc17a1f59932f2d", 0x51, 0xfffffffffffffffb) 18:47:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 18:47:19 executing program 2: add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000001c0)="1080", 0x2, 0xffffffffffffffff) 18:47:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2f, 'pids', 0x20}]}, 0x6) 18:47:19 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) 18:47:19 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) 18:47:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xdabb, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e24, 0x8, @empty, 0x4}}}, 0x38) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2951f9e2, 0xffffffffffffffff) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000140)=""/226) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040), 0x4) r1 = socket(0x2, 0x803, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000390000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x8d28, 0x4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="1e1adb922918dc1914efdc139ae20da016d66aa2689f837d3ae44b00172a6f9a900f893cec9bf435829e6390a9301eb2f1731997ae06aa26533e3666539a04398eb910ceba9f3ceff643e71bb3cf0081150c8962", 0x54, 0x0) add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="ca903b61f18be0", 0x7, 0xfffffffffffffffa) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="97a63338dd6166149683c7b954734799fbdde08175bd1e3861e4c9735eb84fd7bfad09ddc2f840ab8946cdf06d56d9144224ba68253e202aa3eeab30010f8af8a202eb69ad12a9a7c7fbe7af4bae8c7de0403073a3ee488a5ad4760b1b", 0x5d, 0xfffffffffffffffe) add_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000009c0)='logon\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000a40)="eb538207b96607b6cf6280a3cc1527d88d40793cd8b5d43d6d44441fb0df597fe270bbc8c8a17c00b6a5133c48ec3c815fc1d8ab092a77937c2b60b3585b8cff04ac18bac42ccdcc6c6dc17a1f59932f2d", 0x51, 0xfffffffffffffffb) 18:47:19 executing program 1: unshare(0x24020400) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045007, &(0x7f0000000000)) 18:47:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) 18:47:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x0, {0x2}, "00597a5e0000001800"}) 18:47:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) close(r1) 18:47:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000000)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0xca) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) 18:47:20 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) [ 204.138600] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 18:47:20 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x156) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000380)=""/254) close(r0) 18:47:20 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) [ 204.224721] device bond_slave_0 entered promiscuous mode [ 204.230435] device bond_slave_1 entered promiscuous mode 18:47:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0xb, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/129}, 0x18) [ 204.307270] device bond_slave_0 left promiscuous mode [ 204.312728] device bond_slave_1 left promiscuous mode 18:47:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x4b, 0xe}}) close(r2) close(r1) [ 204.425101] device bond_slave_0 entered promiscuous mode [ 204.430803] device bond_slave_1 entered promiscuous mode [ 204.450724] device bond_slave_0 left promiscuous mode [ 204.456300] device bond_slave_1 left promiscuous mode 18:47:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_xen(&(0x7f0000003e80)='cgroup\x00', &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)='9p\x00', 0x1000, &(0x7f0000003f40)=ANY=[]) chroot(&(0x7f00000001c0)='./file0/../file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=unix,'}) 18:47:20 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x200000000000003) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 18:47:20 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="10000000010000000000000000000000", 0x10}]) 18:47:20 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) 18:47:20 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") close(r0) 18:47:20 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xd6be84f0af82c6b8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)="5fcf8e0a46bd796fb408fb0b5a89ed274840ec52c3dd"}, 0xfffffffffffffed8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc0041, 0x0) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000140), 0x4, 0x0) r2 = socket$nl_generic(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000002000000000000020000000a0f7a804"], &(0x7f0000001680)=0x1) 18:47:20 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x249, 0x210000) set_tid_address(&(0x7f0000000640)) semget(0x3, 0x0, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7, 0x4) ioctl$int_in(r0, 0xaf01, &(0x7f0000000180)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000004880)) semget(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) write$eventfd(r1, &(0x7f0000000040), 0x8) 18:47:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000258000)="17000000020001000003be8c5ee17688a3000008010100ec1fda1e0336030000000000000098fc5ad9485bbb6a8800000000dba67e0600000000000200df018000000000f5009cee4a5acb3da400001fb700670000c88ebbff0601150039010000000000000000000609edffffffffffff02df9eebe7ec7ee87cccebf6ba000840024f0298e9e90554062a80e605007f71174aa9512cbf320ec39f02d47c59cc16268b6026eb4bf6ba2112ce68bf17a6e019b7487067c12f", 0xb8) 18:47:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000), 0x4) close(r3) dup3(r1, r2, 0x0) 18:47:21 executing program 7: r0 = socket$inet(0x2, 0x80000000805, 0x0) listen(r0, 0xf5a) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000840000000500000000966a0000000015"], 0x18}, 0x0) 18:47:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x249, 0x210000) set_tid_address(&(0x7f0000000640)) semget(0x3, 0x0, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7, 0x4) ioctl$int_in(r0, 0xaf01, &(0x7f0000000180)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000004880)) semget(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) write$eventfd(r1, &(0x7f0000000040), 0x8) 18:47:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') lseek(r0, 0x800000000000063, 0x0) lseek(r0, 0x22, 0x0) 18:47:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000200)={0x3, 0x1, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}) 18:47:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000180)=@nfc={0x27}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000100000001000000030000000000000082de771827e858d25d8f33e2a984001e"], 0x28}}], 0x2, 0x0) 18:47:21 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="2957e1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc8, &(0x7f0000000200), &(0x7f0000000040)=0x4) 18:47:21 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bridge0:\x00'}) 18:47:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d3ab27191a01002356ba602dff050022fef9b9afa4b20079", 0x18) sendmmsg$alg(r1, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="bb51e44d8438b90ef5f9aa516235ff24af7473", 0x13}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000d40)={&(0x7f0000000180)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/18, 0x12}], 0x1, &(0x7f0000000cc0)=""/97, 0x61}, 0x0) 18:47:21 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x14, 0x4) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000100)=0x32) sendfile(r1, r1, 0x0, 0x100000000000000) 18:47:21 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x249, 0x210000) set_tid_address(&(0x7f0000000640)) semget(0x3, 0x0, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7, 0x4) ioctl$int_in(r0, 0xaf01, &(0x7f0000000180)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000004880)) semget(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) write$eventfd(r1, &(0x7f0000000040), 0x8) 18:47:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc0505510, &(0x7f0000000180)={0x70, 0x4, [0x0]}) 18:47:21 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) 18:47:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond:\x00', &(0x7f0000000080)=ANY=[@ANYRES64=r1]}) close(r2) close(r1) 18:47:21 executing program 6: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.') 18:47:21 executing program 4: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:47:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00') sendfile(r1, r2, &(0x7f0000000340), 0x800009) 18:47:22 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x249, 0x210000) set_tid_address(&(0x7f0000000640)) semget(0x3, 0x0, 0x20) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7, 0x4) ioctl$int_in(r0, 0xaf01, &(0x7f0000000180)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000004880)) semget(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) write$eventfd(r1, &(0x7f0000000040), 0x8) 18:47:22 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x4, 0x2}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 18:47:22 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) 18:47:22 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000002c0)={{0xffffffffffffffff}, 0x0, 0x1000, 'id0\x00', 'timer0\x00'}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145403, &(0x7f0000003340)=""/4096) 18:47:22 executing program 6: mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./control\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 18:47:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000009fc3)={0x26, 'hash\x00', 0x0, 0x0, "637263333200001f000000000000000000000000000000000000000020000063000000000000000f000000000000f3ffffff0000c600"}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000140)="80", 0x1, 0x0, &(0x7f0000a4cfec)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="9dd344fdff39"}, 0x14) [ 206.231750] IPVS: ftp: loaded support on port[0] = 21 18:47:22 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 18:47:22 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) 18:47:22 executing program 7: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x400c55cb, &(0x7f0000000000)) 18:47:22 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe8, &(0x7f0000000180), &(0x7f00000000c0)=0x3a6) 18:47:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x5e, 0x201, 0x0, 0x0, {}, [@generic="f65d"]}, 0x18}, 0x1}, 0x0) 18:47:22 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x2000400) ioctl$TCSETSF(r0, 0x5100, &(0x7f0000000080)) [ 206.696665] IPVS: ftp: loaded support on port[0] = 21 18:47:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) 18:47:22 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) 18:47:22 executing program 2: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x4001b071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)=""/172, 0xac}}, {{&(0x7f0000003140)=@nfc, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001880)=""/247, 0xf7}}, {{0x0, 0x0, &(0x7f0000001d80), 0x0, &(0x7f0000001e00)=""/141, 0x8d}}], 0x3, 0x40000002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000018000), 0x0, 0x0, 0x0, 0x0) 18:47:22 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) fcntl$setpipe(r1, 0x407, 0x4000000000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 18:47:22 executing program 6: r0 = socket$inet6(0xa, 0x5000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)) r1 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) 18:47:24 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x4, 0x2}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 18:47:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x40000001b) dup3(r1, r0, 0x0) 18:47:24 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, {0x30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) 18:47:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000000000009) 18:47:24 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x40000000a0, &(0x7f0000000100), &(0x7f00000000c0)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:47:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180), 0x0) 18:47:24 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 18:47:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) [ 208.339590] IPVS: ftp: loaded support on port[0] = 21 18:47:24 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x4, 0x2}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 18:47:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x7d, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x1c) close(r2) close(r1) 18:47:24 executing program 0: capset(&(0x7f00000c2000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) 18:47:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) 18:47:24 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 18:47:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001500)=[{&(0x7f0000000100)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000002c0)='H', 0x1}], 0x1, &(0x7f0000001440)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xf}}], 0x20}], 0x1, 0x0) [ 208.576145] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 208.618749] IPVS: ftp: loaded support on port[0] = 21 18:47:24 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) [ 208.745437] ================================================================== [ 208.746055] BUG: KMSAN: uninit-value in ipv6_skip_exthdr+0x156/0x910 [ 208.746055] CPU: 1 PID: 8422 Comm: syz-executor2 Not tainted 4.18.0-rc4+ #23 [ 208.746055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.746055] Call Trace: [ 208.746055] dump_stack+0x185/0x1e0 [ 208.746055] kmsan_report+0x195/0x2c0 [ 208.784675] __msan_warning_32+0x7d/0xe0 [ 208.784675] ipv6_skip_exthdr+0x156/0x910 [ 208.784675] ipv6_get_l4proto+0x1be/0x2f0 [ 208.784675] nf_conntrack_in+0x54a/0x2070 [ 208.784675] ? ipv6_invert_tuple+0xf0/0xf0 [ 208.805145] ipv6_conntrack_in+0xc3/0xf0 [ 208.805145] ? ipv6_hooks_unregister+0x200/0x200 [ 208.805145] nf_hook_slow+0x15d/0x3e0 [ 208.805145] ipv6_rcv+0x1df5/0x2250 [ 208.805145] ? local_bh_enable+0x40/0x40 [ 208.805145] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 208.805145] ? ip6_rcv_finish+0x6e0/0x6e0 [ 208.805145] netif_receive_skb_internal+0x475/0x660 [ 208.805145] netif_receive_skb+0x246/0x270 [ 208.805145] tun_get_user+0x80f6/0x89c0 [ 208.805145] tun_chr_write_iter+0x1d4/0x330 [ 208.805145] ? tun_chr_read_iter+0x460/0x460 [ 208.805145] do_iter_readv_writev+0x81a/0xac0 [ 208.805145] ? tun_chr_read_iter+0x460/0x460 [ 208.805145] do_iter_write+0x30d/0xd50 [ 208.805145] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 208.805145] ? import_iovec+0x3e0/0x640 [ 208.805145] do_writev+0x3d8/0x860 [ 208.805145] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 208.805145] __x64_sys_writev+0xe1/0x120 [ 208.805145] ? __ia32_sys_readv+0x120/0x120 [ 208.805145] do_syscall_64+0x15b/0x230 [ 208.805145] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 208.908212] RIP: 0033:0x455ce1 [ 208.908212] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 208.908212] RSP: 002b:00007f88919f9ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 208.908212] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000455ce1 [ 208.940367] RDX: 0000000000000001 RSI: 00007f88919f9bf0 RDI: 00000000000000fc [ 208.940367] RBP: 0000000020000700 R08: 00000000000000fc R09: 0000000000000000 [ 208.940367] R10: 0000000000000046 R11: 0000000000000293 R12: 00000000ffffffff [ 208.940367] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 208.973437] [ 208.973437] Uninit was stored to memory at: [ 208.973437] kmsan_internal_chain_origin+0x13c/0x240 [ 208.973437] kmsan_memcpy_origins+0x11d/0x170 [ 208.973437] __msan_memcpy+0xe7/0x150 [ 208.973437] skb_copy_bits+0x1f9/0xd80 [ 208.973437] ipv6_get_l4proto+0x105/0x2f0 [ 208.973437] nf_conntrack_in+0x54a/0x2070 [ 208.973437] ipv6_conntrack_in+0xc3/0xf0 [ 208.973437] nf_hook_slow+0x15d/0x3e0 [ 208.973437] ipv6_rcv+0x1df5/0x2250 [ 208.973437] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 208.973437] netif_receive_skb_internal+0x475/0x660 [ 208.973437] netif_receive_skb+0x246/0x270 [ 208.973437] tun_get_user+0x80f6/0x89c0 [ 208.973437] tun_chr_write_iter+0x1d4/0x330 [ 208.973437] do_iter_readv_writev+0x81a/0xac0 [ 208.973437] do_iter_write+0x30d/0xd50 [ 208.973437] do_writev+0x3d8/0x860 [ 208.973437] __x64_sys_writev+0xe1/0x120 [ 208.973437] do_syscall_64+0x15b/0x230 [ 209.061919] IPVS: ftp: loaded support on port[0] = 21 [ 208.973437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 208.973437] [ 208.973437] Uninit was stored to memory at: [ 208.973437] kmsan_internal_chain_origin+0x13c/0x240 [ 208.973437] kmsan_memcpy_origins+0x11d/0x170 [ 208.973437] kmsan_memmove_origins+0x9/0x10 [ 208.973437] __msan_memmove+0xe7/0x150 [ 208.973437] nf_ct_frag6_gather+0x436a/0x5870 [ 208.973437] ipv6_defrag+0x501/0x5c0 [ 208.973437] nf_hook_slow+0x15d/0x3e0 [ 208.973437] ipv6_rcv+0x1df5/0x2250 [ 208.973437] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 208.973437] netif_receive_skb_internal+0x475/0x660 [ 208.973437] netif_receive_skb+0x246/0x270 [ 208.973437] tun_get_user+0x80f6/0x89c0 [ 208.973437] tun_chr_write_iter+0x1d4/0x330 [ 208.973437] do_iter_readv_writev+0x81a/0xac0 [ 208.973437] do_iter_write+0x30d/0xd50 [ 208.973437] do_writev+0x3d8/0x860 [ 208.973437] __x64_sys_writev+0xe1/0x120 [ 208.973437] do_syscall_64+0x15b/0x230 [ 208.973437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 208.973437] [ 208.973437] Uninit was created at: [ 208.973437] kmsan_internal_alloc_meta_for_pages+0x157/0x730 [ 208.973437] kmsan_alloc_page+0x80/0xe0 [ 208.973437] __alloc_pages_nodemask+0x105b/0x6320 [ 208.973437] alloc_pages_current+0x6b1/0x970 [ 208.973437] skb_page_frag_refill+0x3be/0x5f0 [ 208.973437] tun_get_user+0xede/0x89c0 [ 208.973437] tun_chr_write_iter+0x1d4/0x330 [ 208.973437] do_iter_readv_writev+0x81a/0xac0 [ 208.973437] do_iter_write+0x30d/0xd50 [ 208.973437] do_writev+0x3d8/0x860 [ 208.973437] __x64_sys_writev+0xe1/0x120 [ 208.973437] do_syscall_64+0x15b/0x230 [ 208.973437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 208.973437] ================================================================== [ 208.973437] Disabling lock debugging due to kernel taint [ 208.973437] Kernel panic - not syncing: panic_on_warn set ... [ 208.973437] 18:47:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x28, 0x2c, 0x217, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x0, @pid}]}, @typed={0x8, 0x0, @fd}]}, 0x28}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@dev}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) 18:47:24 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x64000400) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x81, 0x4, 0x2}) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) 18:47:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) [ 208.973437] CPU: 1 PID: 8422 Comm: syz-executor2 Tainted: G B 4.18.0-rc4+ #23 [ 208.973437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.973437] Call Trace: [ 208.973437] dump_stack+0x185/0x1e0 [ 208.973437] panic+0x3d0/0x9b0 [ 208.973437] kmsan_report+0x2bf/0x2c0 [ 208.973437] __msan_warning_32+0x7d/0xe0 [ 208.973437] ipv6_skip_exthdr+0x156/0x910 [ 209.280742] ipv6_get_l4proto+0x1be/0x2f0 [ 209.280742] nf_conntrack_in+0x54a/0x2070 [ 209.289781] ? ipv6_invert_tuple+0xf0/0xf0 [ 209.289781] ipv6_conntrack_in+0xc3/0xf0 [ 209.299218] ? ipv6_hooks_unregister+0x200/0x200 [ 209.304928] nf_hook_slow+0x15d/0x3e0 [ 209.304928] ipv6_rcv+0x1df5/0x2250 [ 209.304928] ? local_bh_enable+0x40/0x40 [ 209.304928] __netif_receive_skb_core+0x4a7a/0x4fc0 [ 209.304928] ? ip6_rcv_finish+0x6e0/0x6e0 [ 209.304928] netif_receive_skb_internal+0x475/0x660 [ 209.304928] netif_receive_skb+0x246/0x270 [ 209.304928] tun_get_user+0x80f6/0x89c0 [ 209.304928] tun_chr_write_iter+0x1d4/0x330 [ 209.304928] ? tun_chr_read_iter+0x460/0x460 [ 209.304928] do_iter_readv_writev+0x81a/0xac0 [ 209.304928] ? tun_chr_read_iter+0x460/0x460 [ 209.304928] do_iter_write+0x30d/0xd50 [ 209.304928] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 209.304928] ? import_iovec+0x3e0/0x640 [ 209.304928] do_writev+0x3d8/0x860 [ 209.304928] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 209.304928] __x64_sys_writev+0xe1/0x120 [ 209.304928] ? __ia32_sys_readv+0x120/0x120 [ 209.304928] do_syscall_64+0x15b/0x230 [ 209.304928] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 209.304928] RIP: 0033:0x455ce1 [ 209.304928] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 209.304928] RSP: 002b:00007f88919f9ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 209.304928] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000455ce1 [ 209.304928] RDX: 0000000000000001 RSI: 00007f88919f9bf0 RDI: 00000000000000fc [ 209.304928] RBP: 0000000020000700 R08: 00000000000000fc R09: 0000000000000000 [ 209.304928] R10: 0000000000000046 R11: 0000000000000293 R12: 00000000ffffffff [ 209.304928] R13: 00000000004c2440 R14: 00000000004d3ca0 R15: 0000000000000000 [ 209.304928] Dumping ftrace buffer: [ 209.304928] (ftrace buffer empty) [ 209.304928] Kernel Offset: disabled [ 209.304928] Rebooting in 86400 seconds..