[ 53.848092] audit: type=1800 audit(1545322419.881:27): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 53.867700] audit: type=1800 audit(1545322419.891:28): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.389350] audit: type=1800 audit(1545322421.431:29): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 55.408740] audit: type=1800 audit(1545322421.431:30): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.108' (ECDSA) to the list of known hosts. 2018/12/20 16:13:54 fuzzer started 2018/12/20 16:13:59 dialing manager at 10.128.0.26:46613 2018/12/20 16:13:59 syscalls: 1 2018/12/20 16:13:59 code coverage: enabled 2018/12/20 16:13:59 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/20 16:13:59 setuid sandbox: enabled 2018/12/20 16:13:59 namespace sandbox: enabled 2018/12/20 16:13:59 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/20 16:13:59 fault injection: enabled 2018/12/20 16:13:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/20 16:13:59 net packet injection: enabled 2018/12/20 16:13:59 net device setup: enabled 16:15:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) syzkaller login: [ 143.955982] IPVS: ftp: loaded support on port[0] = 21 [ 145.378373] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.385024] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.393667] device bridge_slave_0 entered promiscuous mode [ 145.479174] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.485824] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.494305] device bridge_slave_1 entered promiscuous mode [ 145.577778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.662875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.923731] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.012674] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.100723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.108023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.195088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.202237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.464729] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 146.473580] team0: Port device team_slave_0 added [ 146.557800] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 146.566463] team0: Port device team_slave_1 added [ 146.651664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.742436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.830454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 146.838271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.847777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.936895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 146.944674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.954136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:15:13 executing program 1: clone(0x3102003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x400000000000f) [ 147.676088] IPVS: ftp: loaded support on port[0] = 21 [ 148.474035] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.480673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.488016] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.494654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.504014] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 148.510611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.884413] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.890977] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.899603] device bridge_slave_0 entered promiscuous mode [ 150.040070] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.046738] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.055139] device bridge_slave_1 entered promiscuous mode [ 150.229527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.358368] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.743484] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.864042] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 151.019297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 151.032098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.625127] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 151.633890] team0: Port device team_slave_0 added [ 151.792271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 151.800997] team0: Port device team_slave_1 added [ 151.976858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 151.984061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.993180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.106075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 152.113274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.122397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.213184] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 152.220920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.230322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 16:15:18 executing program 2: unshare(0x24020400) r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405515, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000080)}) [ 152.356190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 152.364011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.373197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.997771] IPVS: ftp: loaded support on port[0] = 21 [ 154.338455] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.345132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.352370] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.358979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.368491] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 154.375159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.602858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.208873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.896080] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.902607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.910727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.006323] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.013025] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.021287] device bridge_slave_0 entered promiscuous mode [ 156.233470] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.240025] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.248420] device bridge_slave_1 entered promiscuous mode [ 156.381412] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.491760] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.512915] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.969887] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.120666] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.851230] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.860008] team0: Port device team_slave_0 added [ 157.976027] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.984718] team0: Port device team_slave_1 added [ 158.173545] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.325154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.550352] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.558267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.567471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.774701] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.782620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.791754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:15:26 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580), &(0x7f00000005c0), 0x8) [ 160.779664] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.786320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.793561] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.800149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.809177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.815870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.106370] IPVS: ftp: loaded support on port[0] = 21 [ 161.392532] 8021q: adding VLAN 0 to HW filter on device bond0 16:15:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 162.297968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 16:15:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 163.076950] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.083518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.091498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:15:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 163.844052] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.482362] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.489030] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.497276] device bridge_slave_0 entered promiscuous mode 16:15:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 164.829395] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.836048] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.872708] device bridge_slave_1 entered promiscuous mode [ 165.090238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.273418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 16:15:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 165.825407] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.998262] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.230883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 166.237955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.435674] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 166.442864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:15:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 167.054902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 167.063681] team0: Port device team_slave_0 added [ 167.202442] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 167.211214] team0: Port device team_slave_1 added [ 167.357652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 167.364911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.373871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.595396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 167.602647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.611524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 16:15:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 167.858578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 167.866460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.875475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.054928] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 168.062728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.071881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:15:34 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 16:15:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:15:34 executing program 4: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) [ 169.515106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.720155] IPVS: ftp: loaded support on port[0] = 21 [ 170.164929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.362822] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.369395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.376605] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.383188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.392265] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 170.398757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.844680] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.850994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.858915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.565138] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.475776] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.482416] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.490890] device bridge_slave_0 entered promiscuous mode [ 172.638052] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.644785] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.653289] device bridge_slave_1 entered promiscuous mode [ 172.789054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.931544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.424467] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.577135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.718120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.725336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.826841] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.834122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.443505] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.452336] team0: Port device team_slave_0 added [ 174.665975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.674731] team0: Port device team_slave_1 added [ 174.907946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.915104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.924307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.013628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.021189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.030510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.220498] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.229969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.239310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.348515] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.356257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.365453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 16:15:42 executing program 2: unshare(0x24020400) r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405515, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000080)}) [ 176.875872] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.882519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.889682] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.896313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.905401] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.912112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.323003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.623125] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.923794] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.930120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.937953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.242635] 8021q: adding VLAN 0 to HW filter on device team0 16:15:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580), &(0x7f00000005c0), 0x8) 16:15:46 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 16:15:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='bbr\x00\x12z{\xef\xb1\xae\xcd\x9d4<\x12Q\x058\rSM\x033\x90\xf7(\xa1\xd4#\xf4\xe7\xde\x0e(ONv\xcd3\x180Y-\xd7v\xc5B\xf5\'\x9a\x82\x1fbJ\xa2-\xc8\xd4A\xc1\x8a\x0fqjm\xf5%\xe1s\x04\t\x14\x96\xaf\xcb\xc5\xbb\x1f\xde\xb3\xa2\xb1f\x9c-\xe7\x995\x9cP\xb8\x94', 0x5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000002c0)={r0, 0xf012, 0x0, "d8"}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000005c0), &(0x7f00000004c0)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ifb0\x00'}) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 16:15:46 executing program 2: unshare(0x24020400) r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405515, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000080)}) 16:15:46 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2400, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/87) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x80, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x40, 0x1000, 0x8}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r2, 0xfffffffffffffffa}, 0x8) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000340)=0x44) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) setfsuid(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0xff, @mcast1, 0x7fffffff}}, 0x401, 0x3d959ddf}, 0x90) sendmsg$can_raw(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0x10, &(0x7f0000000540)={&(0x7f0000000500)=@can={{0x3, 0xfffffffffffff4e7, 0x200000000000000, 0x327}, 0x8, 0x3, 0x0, 0x0, "d20cd860898e9202"}, 0x10}}, 0x4000000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000005c0)={0x6, 0xffffffffffffff24, 0x1a, 0x0, 0xffffffff, 0x9, 0x8, 0x1, 0xf970, 0xffffffff00000000, 0x5, 0x0, 0x0, 0x1daa, 0x9, 0x1, 0x5, 0x4, 0x9}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000600)) r4 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x101, 0x200) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000680)={0x2, 0x7fff}, 0x2) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000006c0)=""/148) mkdirat$cgroup(r0, &(0x7f0000000780)='syz0\x00', 0x1ff) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000007c0)={&(0x7f0000ffa000/0x2000)=nil, 0x1, 0x7, 0x8, &(0x7f0000ffc000/0x2000)=nil, 0x4}) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000800)=0x631) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000840)=0x1, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000880)={0x0, r4, 0x2, 0x3, 0xffffffffffff911a, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000008c0)={@loopback, 0x80000000, 0x2, 0xff, 0x8, 0x2, 0x4}, 0x20) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000900)={0x18, 0x0, {0x3, @dev={[], 0x14}, 'bpq0\x00'}}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000940)={0x9, 0x353f7f5e, 0x3, @discrete={0x7c000000, 0x2}}) [ 180.220976] 8021q: adding VLAN 0 to HW filter on device bond0 16:15:46 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 16:15:46 executing program 2: unshare(0x24020400) r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405515, &(0x7f0000000200)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000080)}) 16:15:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580), &(0x7f00000005c0), 0x8) 16:15:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r0, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580), &(0x7f00000005c0), 0x8) 16:15:46 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) [ 180.959856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.206141] IPVS: ftp: loaded support on port[0] = 21 [ 181.476771] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.483125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.491079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.810262] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.609286] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.615949] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.624339] device bridge_slave_0 entered promiscuous mode [ 182.706283] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.712918] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.721063] device bridge_slave_1 entered promiscuous mode [ 182.799068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.886969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 183.130638] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.214271] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.615877] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.623879] team0: Port device team_slave_0 added [ 183.705362] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.713321] team0: Port device team_slave_1 added [ 183.767731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.775765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.785220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.883154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.887487] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.897241] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.904138] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.910965] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.917783] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.924655] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.931524] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.938419] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.945335] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.952209] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.959022] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.967711] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 16:15:50 executing program 4: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) 16:15:50 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) 16:15:50 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000062ff1)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000055fff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000748f08)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 16:15:50 executing program 1: set_mempolicy(0x4001, &(0x7f00000000c0), 0x1) 16:15:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x90) close(0xffffffffffffffff) [ 184.028343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.036105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.045543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.172819] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.179801] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.186830] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.193715] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.200514] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.207632] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.214498] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 16:15:50 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000062ff1)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000055fff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000748f08)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 184.221355] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.228228] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.235142] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.242012] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 184.389044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.396768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.405743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.410312] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz1 [ 185.008794] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.015296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.022458] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.028988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.037326] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.521893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.899983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.083925] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.263768] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.270033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.278076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.458315] 8021q: adding VLAN 0 to HW filter on device team0 16:15:54 executing program 5: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) 16:15:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x90) close(0xffffffffffffffff) 16:15:54 executing program 1: set_mempolicy(0x4001, &(0x7f00000000c0), 0x1) 16:15:54 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) 16:15:54 executing program 4: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) 16:15:54 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000062ff1)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000055fff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000748f08)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 188.736443] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.743410] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.750244] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.757192] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.764098] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.770953] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.777900] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.784813] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.791684] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.798740] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.805665] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.823674] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.830635] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.837631] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.844616] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.849636] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 188.851443] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.851559] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.874096] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.880922] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.887966] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.894888] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 188.902355] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 16:15:55 executing program 4: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) 16:15:55 executing program 1: set_mempolicy(0x4001, &(0x7f00000000c0), 0x1) 16:15:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x90) close(0xffffffffffffffff) 16:15:55 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) 16:15:55 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000062ff1)='/dev/sequencer\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000055fff1)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000748f08)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 189.166438] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.173414] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.180247] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.187209] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.194113] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.200954] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.208227] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.215144] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.223674] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.230479] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.237338] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 189.272136] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 16:15:55 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) 16:15:55 executing program 5: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) 16:15:55 executing program 1: set_mempolicy(0x4001, &(0x7f00000000c0), 0x1) 16:15:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0x90) close(0xffffffffffffffff) 16:15:55 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x100, 0x0, 0x20}, 0x1c) [ 189.530157] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.537082] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.544037] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.550847] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.557709] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.564572] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.571439] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.578294] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.585211] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.588830] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 189.592053] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.592169] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 16:15:55 executing program 2: unshare(0x20400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x72, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100), 0x10) 16:15:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) [ 189.743853] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz1 16:15:55 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x100, 0x0, 0x20}, 0x1c) 16:15:55 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) recvfrom$unix(r1, &(0x7f0000000100)=""/122, 0x7a, 0x10020, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0xfffffffffffffff8, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x200, 0x0, 0x7, 0x9, r2}, &(0x7f0000000500)=0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101000, 0x0) 16:15:55 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) 16:15:56 executing program 5: r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x3}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0) [ 190.072743] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.079687] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.086672] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.093540] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.100385] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.107289] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.114144] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 16:15:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 16:15:56 executing program 2: unshare(0x20400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x72, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100), 0x10) [ 190.120959] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.127818] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.134700] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 190.141495] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 16:15:56 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) 16:15:56 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x100, 0x0, 0x20}, 0x1c) [ 190.286134] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 16:15:56 executing program 2: unshare(0x20400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x72, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100), 0x10) 16:15:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x400000000ff, 0x7, &(0x7f0000000000)="64cde994", 0x4) 16:15:56 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x100, 0x0, 0x20}, 0x1c) 16:15:56 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) 16:15:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 16:15:56 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) recvfrom$unix(r1, &(0x7f0000000100)=""/122, 0x7a, 0x10020, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0xfffffffffffffff8, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x200, 0x0, 0x7, 0x9, r2}, &(0x7f0000000500)=0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101000, 0x0) 16:15:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x400000000ff, 0x7, &(0x7f0000000000)="64cde994", 0x4) 16:15:56 executing program 2: unshare(0x20400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x72, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100), 0x10) 16:15:56 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) 16:15:56 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 16:15:56 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_AD_LACP_RATE={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 16:15:57 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 16:15:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x39, 0xa, 0x0, "17ff03000000000000421568036177e485000000000000000000000000000080"}) 16:15:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x400000000ff, 0x7, &(0x7f0000000000)="64cde994", 0x4) 16:15:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) 16:15:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x39, 0xa, 0x0, "17ff03000000000000421568036177e485000000000000000000000000000080"}) 16:15:57 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 16:15:57 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) recvfrom$unix(r1, &(0x7f0000000100)=""/122, 0x7a, 0x10020, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0xfffffffffffffff8, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x200, 0x0, 0x7, 0x9, r2}, &(0x7f0000000500)=0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101000, 0x0) 16:15:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x400000000ff, 0x7, &(0x7f0000000000)="64cde994", 0x4) 16:15:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x39, 0xa, 0x0, "17ff03000000000000421568036177e485000000000000000000000000000080"}) 16:15:57 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) 16:15:57 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 16:15:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) 16:15:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 16:15:58 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x39, 0xa, 0x0, "17ff03000000000000421568036177e485000000000000000000000000000080"}) 16:15:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x27a0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 16:15:58 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) 16:15:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) [ 192.089423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.096207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:15:58 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) [ 192.208961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:15:58 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) recvfrom$unix(r1, &(0x7f0000000100)=""/122, 0x7a, 0x10020, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0xfffffffffffffff8, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x200, 0x0, 0x7, 0x9, r2}, &(0x7f0000000500)=0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)) read(r0, &(0x7f0000ec6000)=""/50, 0x32) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x101000, 0x0) 16:15:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x27a0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 16:15:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) 16:15:58 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) 16:15:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 16:15:58 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) [ 192.822992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:15:58 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x27a0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) 16:15:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:15:59 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) 16:15:59 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) 16:15:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) [ 193.084309] hrtimer: interrupt took 28736 ns 16:15:59 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x27a0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x0) [ 193.333370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:15:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000003, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 16:15:59 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000012c0)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/233, 0xe9}], 0x2, &(0x7f0000001780)=""/225, 0xe1}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 16:15:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="74656530200099f7f3b0b90b4fb88d3921cb954f09b9bc2cac34c3026d27cde75de1d01e2ccc5116a291e00402e256f6275345000000e9f6ea1e14772b695e006725a270e437d150c36def8976c7d3936b01000e9fdb8ce05a24fef7bf72e54b6acf6639ba200000000000000000f2000000000000000000000000000000000035c45884fab5251cffb061d7eaa599d22bf087c304804b8965eb33fd613944900627ec1e83a4f4736c417cd635a67bf54eb73aac9d5ba69cd285d474c079288472b1fb73473183104ff6f654e0a9681462bc6c9bd0fd5680672cbc46811a0ccf957d112e9d3cf30ebfaa49877fb7c3513aede0c8cf510a4227386511020bcb34de5cd54ff82e1ba7710968e03978ee9e8d1bcc4707b2476245a1eb557467863d087cb7e35ea84dd197d40ccf40f5b5c9494658902788870b1beea98a41e5f579c0c045e421d5e29c49d317fe1ccacb2e927c7d65047000d30ac591d548"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:15:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:15:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xffffff08) 16:15:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 193.756149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 16:15:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000003, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 16:16:00 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000012c0)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/233, 0xe9}], 0x2, &(0x7f0000001780)=""/225, 0xe1}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 16:16:00 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000012c0)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/233, 0xe9}], 0x2, &(0x7f0000001780)=""/225, 0xe1}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 16:16:00 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000012c0)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/233, 0xe9}], 0x2, &(0x7f0000001780)=""/225, 0xe1}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 16:16:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000003, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 16:16:01 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000080)) 16:16:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000003, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 16:16:01 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000080)) 16:16:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x7, 0x0, 0x3}, {0x1}]}) 16:16:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0xdb2b, 0x4, 0x0, 0x0}, 0x2c) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x1677, {0x2, 0xffffff7ffffffffe, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0xa00000, 0x6, 0x0, 0x9, 0x0, 0x1fd, 0xe8, 0x378}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfffffffffffffc91}}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f00000006c0)={0x200f1526, r2}, &(0x7f0000000440)={0x7, 0x8, 0x51, 0x800, 0x0, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x3, 0x64, [], 0xde, &(0x7f0000000400)=[{}], &(0x7f0000000580)=""/100}, &(0x7f0000000480)=0x78) write$cgroup_type(r4, &(0x7f0000000380)='threaded\x00', 0x9) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(r4, 0x125e, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x80, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000500)) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f0000000680), &(0x7f0000000740)=0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 16:16:02 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000080)) [ 196.149455] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 16:16:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x6f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000140)="f20f23e843d9fa0f22e4c481f95b4300f4460fc79cfb9e8bd626c48180c63f04b9800000c00f3235004000000f3065670f20e6c4c178115ec7", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:02 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000906ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 16:16:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@remote, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002}) 16:16:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x21, 0xfffffffffffffffe, &(0x7f0000000180)=0x1b4) 16:16:02 executing program 3: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000080)) [ 196.593138] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 196.600611] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 16:16:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@remote, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002}) 16:16:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x800000000002, 0x300) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x11e5}], 0x1}}], 0x31a, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3ffffffffffff03, 0x0) 16:16:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x2}, 'port0\x00'}) 16:16:02 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000906ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 16:16:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@remote, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002}) 16:16:02 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x2}}, 0x10) 16:16:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x21, 0xfffffffffffffffe, &(0x7f0000000180)=0x1b4) [ 196.982075] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 196.989444] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 16:16:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x2}, 'port0\x00'}) 16:16:03 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x2}}, 0x10) 16:16:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@remote, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002}) 16:16:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x21, 0xfffffffffffffffe, &(0x7f0000000180)=0x1b4) 16:16:03 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000906ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 16:16:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x2}, 'port0\x00'}) [ 197.375650] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 197.383159] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 16:16:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreq(r0, 0x0, 0x21, 0xfffffffffffffffe, &(0x7f0000000180)=0x1b4) 16:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f0000000040), 0x5) 16:16:03 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x2}}, 0x10) 16:16:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x800000000002, 0x300) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x11e5}], 0x1}}], 0x31a, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3ffffffffffff03, 0x0) 16:16:03 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000906ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 16:16:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x2}, 'port0\x00'}) [ 197.946570] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 197.954055] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 16:16:04 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x2}}, 0x10) 16:16:04 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4}}, 0xe8) close(r3) dup3(r1, r2, 0x0) 16:16:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004780)="c3c0", 0x2}], 0x1, &(0x7f0000004d00)}}], 0x1, 0x0) 16:16:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f0000000040), 0x5) 16:16:04 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)) 16:16:04 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x15}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x15}, 0x45c) 16:16:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004780)="c3c0", 0x2}], 0x1, &(0x7f0000004d00)}}], 0x1, 0x0) 16:16:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f0000000040), 0x5) 16:16:04 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4}}, 0xe8) close(r3) dup3(r1, r2, 0x0) [ 198.474062] input: syz1 as /devices/virtual/input/input5 [ 198.545961] input: syz1 as /devices/virtual/input/input6 16:16:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x800000000002, 0x300) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x11e5}], 0x1}}], 0x31a, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3ffffffffffff03, 0x0) 16:16:05 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)) 16:16:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x15}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x15}, 0x45c) 16:16:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004780)="c3c0", 0x2}], 0x1, &(0x7f0000004d00)}}], 0x1, 0x0) 16:16:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f0000000040), 0x5) 16:16:05 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4}}, 0xe8) close(r3) dup3(r1, r2, 0x0) [ 199.080080] input: syz1 as /devices/virtual/input/input7 16:16:05 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)) 16:16:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004780)="c3c0", 0x2}], 0x1, &(0x7f0000004d00)}}], 0x1, 0x0) 16:16:05 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x98) 16:16:05 executing program 1: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x33}, 0x2, @in6=@local, 0x0, 0x4}}, 0xe8) close(r3) dup3(r1, r2, 0x0) 16:16:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x15}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x15}, 0x45c) 16:16:05 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000000)) [ 199.512093] input: syz1 as /devices/virtual/input/input8 16:16:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x800000000002, 0x300) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000840)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000008c0)=""/4096, 0x11e5}], 0x1}}], 0x31a, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3ffffffffffff03, 0x0) 16:16:06 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180)=""/146, 0x92}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 16:16:06 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x0, @broadcast, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) 16:16:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x15}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x15}, 0x45c) 16:16:06 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x98) 16:16:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x0, 0x23, 0x0, [], &(0x7f00000001c0)={0x847689b47db0acf0, 0x0, [], @p_u32=&(0x7f0000000180)}}) [ 200.073555] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 [ 200.088459] input: syz1 as /devices/virtual/input/input9 16:16:06 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x0, @broadcast, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) 16:16:06 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x98) 16:16:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x0, 0x23, 0x0, [], &(0x7f00000001c0)={0x847689b47db0acf0, 0x0, [], @p_u32=&(0x7f0000000180)}}) 16:16:06 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180)=""/146, 0x92}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 16:16:06 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x0, @broadcast, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) 16:16:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x0, 0x23, 0x0, [], &(0x7f00000001c0)={0x847689b47db0acf0, 0x0, [], @p_u32=&(0x7f0000000180)}}) 16:16:07 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x98) 16:16:07 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180)=""/146, 0x92}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 16:16:07 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x0, @broadcast, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) 16:16:07 executing program 4: unshare(0x20400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)) 16:16:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3ff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x0, 0x23, 0x0, [], &(0x7f00000001c0)={0x847689b47db0acf0, 0x0, [], @p_u32=&(0x7f0000000180)}}) 16:16:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000000200)={@mcast1={0xff, 0x2, [0x2]}}, 0x18) 16:16:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:07 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000180)=""/146, 0x92}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 16:16:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0xffffffffffffffff) 16:16:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000000200)={@mcast1={0xff, 0x2, [0x2]}}, 0x18) 16:16:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0xffffffffffffffff) 16:16:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000000200)={@mcast1={0xff, 0x2, [0x2]}}, 0x18) 16:16:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0xffffffffffffffff) 16:16:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x17, &(0x7f0000000200)={@mcast1={0xff, 0x2, [0x2]}}, 0x18) 16:16:08 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 16:16:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7, 0xffffffffffffffff) 16:16:08 executing program 0: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 16:16:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:08 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0x4, 0x77, &(0x7f0000000580)=""/119}, {0x0, 0x92, &(0x7f0000000840)=""/146}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) 16:16:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:08 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x200000001}) 16:16:08 executing program 0: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 16:16:09 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x200000001}) 16:16:09 executing program 0: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 16:16:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:09 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0x4, 0x77, &(0x7f0000000580)=""/119}, {0x0, 0x92, &(0x7f0000000840)=""/146}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) 16:16:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:09 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x200000001}) 16:16:09 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x200000001}) 16:16:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 16:16:09 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0x4, 0x77, &(0x7f0000000580)=""/119}, {0x0, 0x92, &(0x7f0000000840)=""/146}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) 16:16:09 executing program 0: io_setup(0x1, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 16:16:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:09 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0x4, 0x77, &(0x7f0000000580)=""/119}, {0x0, 0x92, &(0x7f0000000840)=""/146}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) 16:16:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000140)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 16:16:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000140)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 16:16:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000140)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 16:16:10 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:10 executing program 2: r0 = socket$inet6(0x10, 0x8000008000000002, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a60000000a8430291000000390009002300feff010000000d000500ff0000000000c78b80082314e9030b9d5668477b85b167320b00dc1338d54400009b84136ef75afb83", 0x55}], 0x1}, 0x0) 16:16:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000140)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 16:16:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x802, 0x0) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:11 executing program 2: r0 = socket$inet6(0x10, 0x8000008000000002, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a60000000a8430291000000390009002300feff010000000d000500ff0000000000c78b80082314e9030b9d5668477b85b167320b00dc1338d54400009b84136ef75afb83", 0x55}], 0x1}, 0x0) 16:16:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 16:16:11 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:11 executing program 3: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae09, &(0x7f00000000c0)={0x2}) 16:16:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 16:16:11 executing program 2: r0 = socket$inet6(0x10, 0x8000008000000002, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a60000000a8430291000000390009002300feff010000000d000500ff0000000000c78b80082314e9030b9d5668477b85b167320b00dc1338d54400009b84136ef75afb83", 0x55}], 0x1}, 0x0) 16:16:11 executing program 3: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae09, &(0x7f00000000c0)={0x2}) 16:16:11 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:11 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) mmap(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0xe, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:16:11 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2c0080) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, 0x0) 16:16:11 executing program 3: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae09, &(0x7f00000000c0)={0x2}) 16:16:11 executing program 2: r0 = socket$inet6(0x10, 0x8000008000000002, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a60000000a8430291000000390009002300feff010000000d000500ff0000000000c78b80082314e9030b9d5668477b85b167320b00dc1338d54400009b84136ef75afb83", 0x55}], 0x1}, 0x0) 16:16:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 16:16:12 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2c0080) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, 0x0) 16:16:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 16:16:12 executing program 3: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae09, &(0x7f00000000c0)={0x2}) 16:16:12 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x28, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 16:16:12 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2c0080) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, 0x0) 16:16:12 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 16:16:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x28, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 16:16:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100)="26d2", 0x2, 0x8804, &(0x7f0000000140), 0x10) sendto$inet(r0, &(0x7f0000000040)="3383d503524e", 0x6, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 16:16:12 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000001080)="e3", 0x1}], 0x1) 16:16:12 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2c0080) fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, 0x0) [ 206.633547] raw_sendmsg: syz-executor1 forgot to set AF_INET. Fix it! 16:16:12 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 16:16:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x28, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 16:16:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100)="26d2", 0x2, 0x8804, &(0x7f0000000140), 0x10) sendto$inet(r0, &(0x7f0000000040)="3383d503524e", 0x6, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 16:16:12 executing program 0: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:13 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x28, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 16:16:13 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000001080)="e3", 0x1}], 0x1) 16:16:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 16:16:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100)="26d2", 0x2, 0x8804, &(0x7f0000000140), 0x10) sendto$inet(r0, &(0x7f0000000040)="3383d503524e", 0x6, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 16:16:13 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:13 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 16:16:13 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000001080)="e3", 0x1}], 0x1) 16:16:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000100)="26d2", 0x2, 0x8804, &(0x7f0000000140), 0x10) sendto$inet(r0, &(0x7f0000000040)="3383d503524e", 0x6, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 16:16:13 executing program 0: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:13 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:13 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000001080)="e3", 0x1}], 0x1) 16:16:13 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:13 executing program 1: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:13 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:13 executing program 0: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:16:14 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:14 executing program 1: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) [ 208.104107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:16:14 executing program 0: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:14 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:16:14 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='\x18vTh\xf7\xc3\x8d', 0x100000, &(0x7f0000000400)) clone(0x0, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) mount(&(0x7f0000000100)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='eth1{\x00') mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='v\\\xbaC\x04\x17vx\xb9\xe6\xb7\xe7\x96\x80\xbc\x1cw(\xf4=\xbe\xad\x04\x9e\x15\xf2\x83\xbfE\xad.\xcbA\xb1\xd2\x94MV)\xf85\xdd\x9e\xf0\xbd\a\x83\x80\x9f#\xc0b\t\xf8\xb4R\xe6\xc9\xbad\x87n$\xe4\xb0\x9e\x02;\xb4x\x00\x00\x00\x00\x00\x00\x00\x00', 0x2008, 0x0) 16:16:14 executing program 4: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) [ 208.493341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:16:14 executing program 1: mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') setxattr(&(0x7f0000000140)='./control\x00', &(0x7f0000000300)=@known='security.ima\x00', &(0x7f0000000340)='-+trusted)\x00', 0xb, 0x0) mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r0) 16:16:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:16:14 executing program 0: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fsync(r0) 16:16:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x4}, 0x8) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r3, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f00000001c0)=0x10) [ 208.864834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:16:14 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000640)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES16], 0x2) recvmsg(r2, &(0x7f00000024c0)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 16:16:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x200000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa28300cee60a0009000000001d85680c1ba3a2ff030000280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 16:16:15 executing program 0: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fsync(r0) [ 209.187176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 16:16:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\xd4\x00\x04*\x04\x00\x00\x00\xde\x91\xbe\x10\xee\xbf\x00\xf5\xe9J\xae\"\xe8\x9b\xb3l\xc7Ez\xcc\xc32\fg\xa9\x0fy\x80XC\xe9\x01\xd2\xdau\xaf\x1f\x00\x00\x00\x00\x00\x00T\x0er\xcdW\xf4BwR\x88D \x9c~\xd0[\x16\x0e\xf36r\x1b\xf8\x96\x86\xffG/q\xdf\xcaSS\xf62=\xdf\x80\x06\xff\xc1\x05-j\x80\x98Z\xdch\x01ped\x8b5\xc7\xd3!\xfc\\\x04f\x06/\xbf\xadZ\xcb\xe7\xffl\xef\xe5<\x88\xc0Z\xb9p\xce\xeb\xdf\xa5\x89\t\x8a\xd4\r\b\r\xeb$\x88\xf9\xe4\x06\x96\x82\xb1D\x83\xf1\x13\xcbiy\xb2\xf3\x90\x17\x9a\x18\xe2k@\x88\xf1\xf3\x1e\xd0J\nh\x1f\x00.\x00t6\x94tu\xab\a7\x11\xc9\x8a\xe3\xb4%\x9f\x1a\x1a\xff\x9b\t\xaaf\xcb\x90\xcaC\xa1\xdb\xc6\xde\x15\xab\xb4\xaes\x9f\x9e\x8f\x04|\xd2\x9e\xc7k\x9e\xf6\xbe\xb7\x83\x9f\x80q\xaa\xeaM$~j\x95\x14t\x8c\x93\xd0\xbb\x01\xa7\xc3|\xa6\xc8V2z\xf8\x1f)m,,\a\xc2\xd6;') unshare(0x400) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000001c0)) 16:16:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x4}, 0x8) bind$inet6(r3, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r3, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f00000001c0)=0x10) 16:16:15 executing program 0: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fsync(r0) 16:16:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xa) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) syz_extract_tcp_res(&(0x7f0000000340), 0x7fffffff, 0x7fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000480)={@remote, 0x80000001, 0x1, 0x0, 0x3, 0x2, 0x8, 0x1}, 0x20) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x2) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000400)=0x8, 0x4) getsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x4f0, 0x20, 0x5, 0x8000}, &(0x7f0000000500)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000540)={r6}, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000440), 0x10) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 16:16:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 209.562324] ================================================================== [ 209.569778] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0 [ 209.576393] CPU: 0 PID: 9279 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #8 [ 209.583514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.592896] Call Trace: [ 209.595524] dump_stack+0x173/0x1d0 [ 209.599209] kmsan_report+0x120/0x290 [ 209.603058] kmsan_internal_check_memory+0x9a7/0xa20 [ 209.608225] __msan_instrument_asm_load+0x8a/0x90 [ 209.613104] __siphash_aligned+0x512/0xae0 [ 209.617416] secure_ipv6_port_ephemeral+0x110/0x220 [ 209.622489] inet6_hash_connect+0x11f/0x1a0 [ 209.626872] dccp_v6_connect+0x197e/0x1e20 [ 209.631202] ? __msan_poison_alloca+0x1e0/0x270 [ 209.635942] ? dccp_v6_exit_batch+0x40/0x40 [ 209.640308] __inet_stream_connect+0x2f9/0x1340 [ 209.645060] inet_stream_connect+0x101/0x180 [ 209.649522] __sys_connect+0x664/0x820 [ 209.653450] ? __inet_stream_connect+0x1340/0x1340 [ 209.658416] ? prepare_exit_to_usermode+0x114/0x420 [ 209.663473] ? syscall_return_slowpath+0x50/0x650 [ 209.668371] __se_sys_connect+0x8d/0xb0 [ 209.672385] __x64_sys_connect+0x4a/0x70 [ 209.676477] do_syscall_64+0xbc/0xf0 [ 209.680400] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 209.685626] RIP: 0033:0x457669 [ 209.688839] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.707771] RSP: 002b:00007f0fdd6b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 209.715510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 209.722803] RDX: 000000000000001c RSI: 0000000020419000 RDI: 0000000000000006 [ 209.730092] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.737382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fdd6b26d4 [ 209.744678] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 209.751996] [ 209.753637] Local variable description: ----combined@secure_ipv6_port_ephemeral [ 209.761100] Variable was created at: [ 209.764840] secure_ipv6_port_ephemeral+0x6a/0x220 [ 209.769796] inet6_hash_connect+0x11f/0x1a0 [ 209.774123] [ 209.775765] Bytes 2-7 of 8 are uninitialized [ 209.780191] Memory access of size 8 starts at ffff8881abd2fa08 [ 209.786168] ================================================================== [ 209.793544] Disabling lock debugging due to kernel taint [ 209.799037] Kernel panic - not syncing: panic_on_warn set ... [ 209.804954] CPU: 0 PID: 9279 Comm: syz-executor1 Tainted: G B 4.20.0-rc7+ #8 [ 209.813462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.822839] Call Trace: [ 209.825480] dump_stack+0x173/0x1d0 [ 209.829147] panic+0x3ce/0x961 [ 209.832410] kmsan_report+0x285/0x290 [ 209.836256] kmsan_internal_check_memory+0x9a7/0xa20 [ 209.841421] __msan_instrument_asm_load+0x8a/0x90 [ 209.846305] __siphash_aligned+0x512/0xae0 [ 209.850618] secure_ipv6_port_ephemeral+0x110/0x220 [ 209.855687] inet6_hash_connect+0x11f/0x1a0 [ 209.860057] dccp_v6_connect+0x197e/0x1e20 [ 209.864351] ? __msan_poison_alloca+0x1e0/0x270 [ 209.869071] ? dccp_v6_exit_batch+0x40/0x40 [ 209.873444] __inet_stream_connect+0x2f9/0x1340 [ 209.878189] inet_stream_connect+0x101/0x180 [ 209.882657] __sys_connect+0x664/0x820 [ 209.886606] ? __inet_stream_connect+0x1340/0x1340 [ 209.891569] ? prepare_exit_to_usermode+0x114/0x420 [ 209.896642] ? syscall_return_slowpath+0x50/0x650 [ 209.901538] __se_sys_connect+0x8d/0xb0 [ 209.905597] __x64_sys_connect+0x4a/0x70 [ 209.909697] do_syscall_64+0xbc/0xf0 [ 209.913455] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 209.918666] RIP: 0033:0x457669 [ 209.921882] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 209.940809] RSP: 002b:00007f0fdd6b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 209.948553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 209.955849] RDX: 000000000000001c RSI: 0000000020419000 RDI: 0000000000000006 [ 209.963147] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.970444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fdd6b26d4 [ 209.977745] R13: 00000000004bdc27 R14: 00000000004cd678 R15: 00000000ffffffff [ 209.986085] Kernel Offset: disabled [ 209.989728] Rebooting in 86400 seconds..