[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   53.692525] kauditd_printk_skb: 4 callbacks suppressed
[   53.692553] audit: type=1800 audit(1545314746.741:29): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   53.717268] audit: type=1800 audit(1545314746.741:30): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts.
2018/12/20 14:06:01 fuzzer started
2018/12/20 14:06:06 dialing manager at 10.128.0.26:46613
2018/12/20 14:06:06 syscalls: 1
2018/12/20 14:06:06 code coverage: enabled
2018/12/20 14:06:06 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/12/20 14:06:06 setuid sandbox: enabled
2018/12/20 14:06:06 namespace sandbox: enabled
2018/12/20 14:06:06 Android sandbox: /sys/fs/selinux/policy does not exist
2018/12/20 14:06:06 fault injection: enabled
2018/12/20 14:06:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/12/20 14:06:06 net packet injection: enabled
2018/12/20 14:06:06 net device setup: enabled
14:06:24 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

syzkaller login: [   91.872554] IPVS: ftp: loaded support on port[0] = 21
[   93.281117] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.287794] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.296413] device bridge_slave_0 entered promiscuous mode
[   93.391892] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.398525] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.406992] device bridge_slave_1 entered promiscuous mode
[   93.491563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   93.576350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   93.839269] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   93.928307] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   94.016628] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   94.023775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   94.109761] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   94.116821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.376234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   94.385102] team0: Port device team_slave_0 added
[   94.468729] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   94.477413] team0: Port device team_slave_1 added
[   94.569490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.660250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.749996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   94.757692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   94.767199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   94.856728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   94.864509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   94.874024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
14:06:28 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

[   95.689965] IPVS: ftp: loaded support on port[0] = 21
[   96.311682] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.318331] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.325545] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.332130] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.341391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   96.348490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.918577] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.925335] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.933643] device bridge_slave_0 entered promiscuous mode
[   98.069977] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.076634] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.085188] device bridge_slave_1 entered promiscuous mode
[   98.227551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   98.314216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   98.655805] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   98.812626] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   99.522472] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   99.530996] team0: Port device team_slave_0 added
[   99.647209] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   99.655906] team0: Port device team_slave_1 added
[   99.750409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   99.757577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   99.766686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   99.925709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   99.932776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   99.941615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
14:06:33 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x32315258, 0x0, @stepwise})

[  100.091167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  100.098981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.108040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.228639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  100.236290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  100.245474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  100.584879] IPVS: ftp: loaded support on port[0] = 21
[  102.052442] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.059167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.066437] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.073032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.082189] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  102.088675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.360334] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.068318] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  103.270823] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.277570] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.285783] device bridge_slave_0 entered promiscuous mode
[  103.420150] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.426786] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.435117] device bridge_slave_1 entered promiscuous mode
[  103.663094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  103.741670] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  103.748130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.756313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.837686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  104.354273] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  104.424435] 8021q: adding VLAN 0 to HW filter on device team0
[  104.507190] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  104.620311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  104.627423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.812642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  104.819656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  105.360223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  105.369480] team0: Port device team_slave_0 added
[  105.566115] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  105.574898] team0: Port device team_slave_1 added
[  105.721363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  105.729994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  105.739115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.882092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.995474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  106.003397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.012622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.150061] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  106.157976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.167315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.792177] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.798775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.806013] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.812611] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.822048] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  107.828589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
14:06:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

[  108.766879] IPVS: ftp: loaded support on port[0] = 21
14:06:41 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

[  109.159532] 8021q: adding VLAN 0 to HW filter on device bond0
14:06:42 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

14:06:42 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

14:06:42 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2})

14:06:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2})

[  110.052827] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
14:06:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2})

14:06:43 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2})

14:06:43 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

[  110.867454] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  110.873967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.881771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.020134] ion_buffer_destroy: buffer still mapped in the kernel
14:06:44 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

[  111.613457] 8021q: adding VLAN 0 to HW filter on device team0
[  112.162310] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.168879] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.176967] device bridge_slave_0 entered promiscuous mode
[  112.359027] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.365684] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.373859] device bridge_slave_1 entered promiscuous mode
[  112.573656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  112.749584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  113.235252] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  113.364184] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  114.262806] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  114.271529] team0: Port device team_slave_0 added
[  114.460933] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  114.469549] team0: Port device team_slave_1 added
[  114.674949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  114.698557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.707581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.891610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.073772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  115.081396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.090433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.342335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  115.349995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.359037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.565432] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.173842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
14:06:49 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

[  116.852758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  116.859090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.867122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.404754] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.411392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.418603] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.425200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.434244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  117.603413] 8021q: adding VLAN 0 to HW filter on device team0
[  117.862155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
14:06:54 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

[  122.230661] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.404427] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  122.578501] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  122.584879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.592760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.768164] 8021q: adding VLAN 0 to HW filter on device team0
14:06:56 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

14:06:56 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x32315258, 0x0, @stepwise})

14:06:56 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

14:06:56 executing program 4:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

14:06:56 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

14:06:56 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

14:06:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

14:06:57 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x32315258, 0x0, @stepwise})

14:06:57 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

14:06:57 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x32315258, 0x0, @stepwise})

14:06:57 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

14:06:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

14:06:57 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:06:57 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

[  124.973982] IPVS: ftp: loaded support on port[0] = 21
[  125.122590] IPVS: ftp: loaded support on port[0] = 21
14:06:58 executing program 1:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

[  126.881415] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.888117] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.896533] device bridge_slave_0 entered promiscuous mode
[  126.978710] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.985424] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.993692] device bridge_slave_1 entered promiscuous mode
[  127.006488] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.013095] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.021566] device bridge_slave_0 entered promiscuous mode
[  127.074176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  127.103447] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.110050] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.118413] device bridge_slave_1 entered promiscuous mode
[  127.155852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  127.198719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  127.277656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  127.409697] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  127.494768] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  127.520888] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  127.575046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  127.582179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.610692] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  127.664691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  127.671761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.691020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  127.700683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  127.784101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  127.791147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  127.940158] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  127.948803] team0: Port device team_slave_0 added
[  128.029068] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  128.037728] team0: Port device team_slave_1 added
[  128.051118] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  128.059969] team0: Port device team_slave_0 added
[  128.117956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.146245] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  128.155007] team0: Port device team_slave_1 added
[  128.208913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.237995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.291267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  128.299050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.308367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.326553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.396007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  128.403760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.413944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.430997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  128.438792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  128.447967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  128.534461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  128.542194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.551338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  129.357603] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.364238] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.371347] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.377985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.386681] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  129.552837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  129.561362] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.567992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.574955] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.581436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.591126] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  130.573005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.925630] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.098145] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.237472] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  133.408994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  133.573724] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  133.582678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.590662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.781876] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  133.788581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.796684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.966067] 8021q: adding VLAN 0 to HW filter on device team0
[  134.109971] 8021q: adding VLAN 0 to HW filter on device team0
14:07:09 executing program 4:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

14:07:09 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:09 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:07:09 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

14:07:09 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:07:09 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4)

14:07:09 executing program 5:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0xfe, 0x27, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)

[  136.501563] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
14:07:09 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:09 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:07:09 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:07:09 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4)

14:07:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:10 executing program 4:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000280)=""/111, 0x6f)

14:07:10 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:07:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:10 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x2, 0x11)
socket$kcm(0xa, 0x40122000000003, 0x11)
close(r0)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00')

14:07:10 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4)

14:07:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:10 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100), 0x4)

14:07:10 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:10 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:10 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x35}, &(0x7f0000000340)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000380)=0x98)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x7f})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0xffffffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="007873ecbc0b9f6282ca1056f98c57ce748ee81c2918f8bb7697a6ee6c6d4cc712d6dab524fa6af001000000daf9ef24313796741769248111142a6bb52405d3c7f78eff10f08ff6a4372feab66285bedd9443cf4dcb239900b8ac7f4088b2568e27d219925122593813da73cdd44c73c8901cba2cc94120663586e5fa97a7634b5bf66cefe23aaa8d8f53689112599f6306b2672eb6897dbf008ef3c47202b18d5b838aca8cb607cbbc222cbd609c3c19"], 0x1}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
add_key(0xffffffffffffffff, 0x0, &(0x7f0000000180)="70b179891ddd88b4c00ea679d131ca9918ad5062ded382cb7f7bd95407acc58968d4fe7a41710fbca761cf8289278ccc9645", 0x32, 0xfffffffffffffffb)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0))
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000800)=0x3001)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:07:12 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:07:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

14:07:12 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x98)

[  139.784577] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:12 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x98)

14:07:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

14:07:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

14:07:13 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

[  140.176561] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:13 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:13 executing program 4:
unshare(0x8000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x6})

14:07:13 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x98)

14:07:13 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

[  140.238079] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  140.395367] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:13 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x98)

14:07:13 executing program 4:
unshare(0x8000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x6})

14:07:13 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

14:07:13 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

[  140.680915] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:13 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  140.725539] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:13 executing program 4:
unshare(0x8000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x6})

14:07:14 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:14 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'ip_vti0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0)

14:07:14 executing program 0:
r0 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130009000f0000000b00bb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0)

14:07:14 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:14 executing program 4:
unshare(0x8000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x6})

[  141.257770] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
14:07:14 executing program 0:
r0 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130009000f0000000b00bb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0)

14:07:14 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_team\x00', 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="0916fd407225", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000))

14:07:14 executing program 4:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:14 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:14 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:14 executing program 0:
r0 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130009000f0000000b00bb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0)

14:07:14 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_team\x00', 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="0916fd407225", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000))

14:07:15 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:15 executing program 4:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:15 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:15 executing program 0:
r0 = socket$inet(0x10, 0x80003, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130009000f0000000b00bb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0)

14:07:15 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_team\x00', 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="0916fd407225", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000))

14:07:15 executing program 4:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:15 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_team\x00', 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="0916fd407225", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000))

14:07:15 executing program 0:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:15 executing program 2:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:15 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff8c)

14:07:15 executing program 0:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:15 executing program 4:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:16 executing program 0:
mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20002000000088)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x10)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00))

14:07:16 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:16 executing program 2:
r0 = socket$inet6(0xa, 0x400000000000803, 0x4)
ioctl(r0, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000001000)={0x9, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc4c85512, &(0x7f0000001000))

14:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x98)

14:07:16 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

14:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x98)

14:07:16 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:16 executing program 2:
r0 = socket$inet6(0xa, 0x400000000000803, 0x4)
ioctl(r0, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000001000)={0x9, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc4c85512, &(0x7f0000001000))

14:07:16 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:16 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)

14:07:16 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:16 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x98)

14:07:16 executing program 2:
r0 = socket$inet6(0xa, 0x400000000000803, 0x4)
ioctl(r0, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000001000)={0x9, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc4c85512, &(0x7f0000001000))

14:07:16 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:16 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x98)

14:07:17 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:17 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

14:07:17 executing program 2:
r0 = socket$inet6(0xa, 0x400000000000803, 0x4)
ioctl(r0, 0x400001000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000001000)={0x9, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc4c85512, &(0x7f0000001000))

14:07:17 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:17 executing program 3:
r0 = socket$kcm(0xa, 0x8000000000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x143)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000001cc0)={&(0x7f0000000880)=@nl=@unspec, 0x80, 0x0}, 0x0)

14:07:17 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x34, 0x10, 0x400000000000109, 0x0, 0x0, {}, [@nested={0x20, 0x0, [@generic="fae3559fb88904678b984560417dd3955d50dee6abf5e57631"]}]}, 0x34}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:17 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

[  144.155963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'.
14:07:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000000)=""/11, 0xb, 0x7ffffffffffffffc)

[  144.262411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'.
14:07:17 executing program 1:
r0 = socket$kcm(0xa, 0x2, 0x11)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000001500)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x8000)
close(r0)

14:07:17 executing program 3:
r0 = socket$kcm(0xa, 0x8000000000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x143)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000001cc0)={&(0x7f0000000880)=@nl=@unspec, 0x80, 0x0}, 0x0)

14:07:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000000)=""/11, 0xb, 0x7ffffffffffffffc)

14:07:17 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x34, 0x10, 0x400000000000109, 0x0, 0x0, {}, [@nested={0x20, 0x0, [@generic="fae3559fb88904678b984560417dd3955d50dee6abf5e57631"]}]}, 0x34}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000000)=""/11, 0xb, 0x7ffffffffffffffc)

14:07:17 executing program 3:
r0 = socket$kcm(0xa, 0x8000000000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x143)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000001cc0)={&(0x7f0000000880)=@nl=@unspec, 0x80, 0x0}, 0x0)

[  144.592438] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'.
14:07:17 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:17 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x34, 0x10, 0x400000000000109, 0x0, 0x0, {}, [@nested={0x20, 0x0, [@generic="fae3559fb88904678b984560417dd3955d50dee6abf5e57631"]}]}, 0x34}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:17 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000000)=""/11, 0xb, 0x7ffffffffffffffc)

[  144.861065] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'.
14:07:18 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

14:07:18 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

14:07:18 executing program 3:
r0 = socket$kcm(0xa, 0x8000000000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x143)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000001cc0)={&(0x7f0000000880)=@nl=@unspec, 0x80, 0x0}, 0x0)

14:07:18 executing program 0:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b0007000000", 0x24)

14:07:18 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x34, 0x10, 0x400000000000109, 0x0, 0x0, {}, [@nested={0x20, 0x0, [@generic="fae3559fb88904678b984560417dd3955d50dee6abf5e57631"]}]}, 0x34}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[  145.198511] netlink: 'syz-executor0': attribute type 27 has an invalid length.
[  145.212344] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'.
14:07:18 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/240, 0xf0}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c}, 0x1c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:18 executing program 0:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b0007000000", 0x24)

14:07:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffaf, &(0x7f0000000180))

[  145.442140] netlink: 'syz-executor0': attribute type 27 has an invalid length.
14:07:18 executing program 0:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b0007000000", 0x24)

[  145.545104] netlink: 'syz-executor0': attribute type 27 has an invalid length.
14:07:18 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffaf, &(0x7f0000000180))

14:07:18 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/240, 0xf0}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c}, 0x1c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:18 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

14:07:19 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4})
readv(r0, &(0x7f0000002180)=[{&(0x7f00000020c0)=""/159, 0x9f}], 0x1)

14:07:19 executing program 0:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b0007000000", 0x24)

14:07:19 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/240, 0xf0}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c}, 0x1c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffaf, &(0x7f0000000180))

[  146.103014] netlink: 'syz-executor0': attribute type 27 has an invalid length.
14:07:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffaf, &(0x7f0000000180))

14:07:19 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/240, 0xf0}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_getroute={0x1c}, 0x1c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0xc00000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

14:07:19 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:19 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:19 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0xffffffffffffffff})

14:07:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0xffffffffffffffff})

14:07:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0xffffffffffffffff})

14:07:20 executing program 5:
r0 = socket(0x10, 0x200000002, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300480010d10200cf", 0x1f)

14:07:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0xffffffffffffffff})

14:07:20 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x11, 0x1000000000001, 0x0, "616052eabcab615470bbf4ee8488674b05ca0157fb6dc6596493133bbf3da078"})

[  147.023715] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
[  147.038041] netlink: 'syz-executor5': attribute type 3 has an invalid length.
[  147.059397] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
14:07:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080))
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80)

[  147.079049] netlink: 'syz-executor5': attribute type 3 has an invalid length.
14:07:20 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:20 executing program 5:
r0 = socket(0x10, 0x200000002, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300480010d10200cf", 0x1f)

14:07:20 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x11, 0x1000000000001, 0x0, "616052eabcab615470bbf4ee8488674b05ca0157fb6dc6596493133bbf3da078"})

14:07:20 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

[  147.305140] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
[  147.343343] netlink: 'syz-executor5': attribute type 3 has an invalid length.
14:07:20 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080))
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80)

14:07:20 executing program 5:
r0 = socket(0x10, 0x200000002, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300480010d10200cf", 0x1f)

14:07:20 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x11, 0x1000000000001, 0x0, "616052eabcab615470bbf4ee8488674b05ca0157fb6dc6596493133bbf3da078"})

[  147.585322] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
14:07:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080))
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80)

14:07:20 executing program 2:
r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x11, 0x1000000000001, 0x0, "616052eabcab615470bbf4ee8488674b05ca0157fb6dc6596493133bbf3da078"})

[  147.673572] netlink: 'syz-executor5': attribute type 3 has an invalid length.
14:07:20 executing program 5:
r0 = socket(0x10, 0x200000002, 0xc)
write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f)
write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300480010d10200cf", 0x1f)

14:07:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080))
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80)

[  147.889478] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'.
[  147.954278] netlink: 'syz-executor5': attribute type 3 has an invalid length.
14:07:21 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:21 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f00000000c0))

14:07:21 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xd, 0x8, 0xfa0e, {0x0}}, 0x10)

14:07:21 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4)

14:07:21 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f00000000c0))

14:07:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x800000000000a)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, '\x03\x00sf0\x00\x00\x10\x00', 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x1a8)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)

14:07:21 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
unshare(0x400)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000080), 0x195)

14:07:21 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xd, 0x8, 0xfa0e, {0x0}}, 0x10)

14:07:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x800000000000a)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, '\x03\x00sf0\x00\x00\x10\x00', 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x1a8)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)

[  148.484494] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING
14:07:21 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xd, 0x8, 0xfa0e, {0x0}}, 0x10)

14:07:21 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f00000000c0))

14:07:21 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
unshare(0x400)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000080), 0x195)

[  148.669113] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING
14:07:22 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xd, 0x8, 0xfa0e, {0x0}}, 0x10)

14:07:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x800000000000a)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, '\x03\x00sf0\x00\x00\x10\x00', 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x1a8)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)

14:07:22 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
unshare(0x400)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000080), 0x195)

[  149.053041] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING
14:07:22 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0), 0x0}, 0x20)
r1 = syz_open_procfs(0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x4f)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x2c)

14:07:22 executing program 2:
r0 = socket$pptp(0x18, 0x1, 0x2)
getsockname(r0, 0x0, &(0x7f00000000c0))

14:07:22 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
get_robust_list(0x0, 0x0, &(0x7f0000000240))

14:07:22 executing program 1:
r0 = socket$kcm(0xa, 0x6, 0x0)
unshare(0x400)
setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000080), 0x195)

14:07:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x800000000000a)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x130, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, '\x03\x00sf0\x00\x00\x10\x00', 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x1a8)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)

14:07:22 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4)
listen(r1, 0x0)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffff9, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)

[  149.343653] ==================================================================
[  149.351108] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0
[  149.355737] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING
[  149.357711] CPU: 0 PID: 8865 Comm: syz-executor4 Not tainted 4.20.0-rc7+ #8
[  149.357725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  149.357733] Call Trace:
[  149.357778]  dump_stack+0x173/0x1d0
[  149.391410]  kmsan_report+0x120/0x290
[  149.395264]  kmsan_internal_check_memory+0x9a7/0xa20
[  149.400449]  __msan_instrument_asm_load+0x8a/0x90
[  149.405320]  __siphash_aligned+0x512/0xae0
[  149.409606]  secure_ipv6_port_ephemeral+0x110/0x220
[  149.414658]  inet6_hash_connect+0x11f/0x1a0
[  149.419049]  tcp_v6_connect+0x20ba/0x2890
[  149.423254]  ? __msan_poison_alloca+0x1e0/0x270
[  149.427974]  ? tcp_v6_pre_connect+0x130/0x130
[  149.432497]  __inet_stream_connect+0x2f9/0x1340
[  149.437248]  ? kmem_cache_alloc_trace+0x55a/0xb90
[  149.442130]  ? tcp_sendmsg_locked+0x6394/0x6be0
[  149.446858]  tcp_sendmsg_locked+0x65d5/0x6be0
[  149.451382]  ? aa_label_sk_perm+0xda/0x940
[  149.455648]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  149.461034]  ? aa_label_sk_perm+0x6d6/0x940
[  149.465377]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  149.470759]  ? futex_wait+0x912/0xc40
[  149.474645]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  149.480072]  tcp_sendmsg+0xb2/0x100
[  149.483740]  ? tcp_sendmsg_locked+0x6be0/0x6be0
[  149.488445]  inet_sendmsg+0x54a/0x720
[  149.492308]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  149.497713]  ? security_socket_sendmsg+0x1bd/0x200
[  149.502691]  ? inet_getname+0x490/0x490
[  149.506695]  __sys_sendto+0x8c4/0xac0
[  149.510589]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  149.516079]  ? prepare_exit_to_usermode+0x114/0x420
[  149.521116]  ? syscall_return_slowpath+0x50/0x650
[  149.525999]  __se_sys_sendto+0x107/0x130
[  149.530113]  __x64_sys_sendto+0x6e/0x90
[  149.534129]  do_syscall_64+0xbc/0xf0
[  149.537871]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  149.543069] RIP: 0033:0x457669
[  149.546279] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  149.565213] RSP: 002b:00007fbd40835c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  149.572936] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669
[  149.580238] RDX: fffffffffffffff9 RSI: 00000000200001c0 RDI: 0000000000000003
[  149.587638] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c
[  149.594936] R10: 0000000020000003 R11: 0000000000000246 R12: 00007fbd408366d4
[  149.602246] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff
[  149.609574] 
[  149.611218] Local variable description: ----combined@secure_ipv6_port_ephemeral
[  149.618668] Variable was created at:
[  149.622413]  secure_ipv6_port_ephemeral+0x6a/0x220
[  149.627363]  inet6_hash_connect+0x11f/0x1a0
[  149.631689] 
[  149.633323] Bytes 2-7 of 8 are uninitialized
[  149.637739] Memory access of size 8 starts at ffff88814c4df5f0
[  149.643722] ==================================================================
[  149.651085] Disabling lock debugging due to kernel taint
[  149.656558] Kernel panic - not syncing: panic_on_warn set ...
[  149.662471] CPU: 0 PID: 8865 Comm: syz-executor4 Tainted: G    B             4.20.0-rc7+ #8
[  149.670969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  149.680332] Call Trace:
[  149.682960]  dump_stack+0x173/0x1d0
[  149.686628]  panic+0x3ce/0x961
[  149.689954]  kmsan_report+0x285/0x290
[  149.693806]  kmsan_internal_check_memory+0x9a7/0xa20
[  149.698961]  __msan_instrument_asm_load+0x8a/0x90
[  149.703863]  __siphash_aligned+0x512/0xae0
[  149.708183]  secure_ipv6_port_ephemeral+0x110/0x220
[  149.713241]  inet6_hash_connect+0x11f/0x1a0
[  149.717606]  tcp_v6_connect+0x20ba/0x2890
[  149.721818]  ? __msan_poison_alloca+0x1e0/0x270
[  149.726561]  ? tcp_v6_pre_connect+0x130/0x130
[  149.731086]  __inet_stream_connect+0x2f9/0x1340
[  149.735801]  ? kmem_cache_alloc_trace+0x55a/0xb90
[  149.740715]  ? tcp_sendmsg_locked+0x6394/0x6be0
[  149.745436]  tcp_sendmsg_locked+0x65d5/0x6be0
[  149.749973]  ? aa_label_sk_perm+0xda/0x940
[  149.754245]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  149.759637]  ? aa_label_sk_perm+0x6d6/0x940
[  149.764011]  ? __msan_metadata_ptr_for_load_4+0x10/0x20
[  149.769413]  ? futex_wait+0x912/0xc40
[  149.773294]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  149.778731]  tcp_sendmsg+0xb2/0x100
[  149.782392]  ? tcp_sendmsg_locked+0x6be0/0x6be0
[  149.787093]  inet_sendmsg+0x54a/0x720
[  149.790954]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  149.796344]  ? security_socket_sendmsg+0x1bd/0x200
[  149.801316]  ? inet_getname+0x490/0x490
[  149.805317]  __sys_sendto+0x8c4/0xac0
[  149.809187]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  149.814689]  ? prepare_exit_to_usermode+0x114/0x420
[  149.819725]  ? syscall_return_slowpath+0x50/0x650
[  149.824607]  __se_sys_sendto+0x107/0x130
[  149.828715]  __x64_sys_sendto+0x6e/0x90
[  149.832717]  do_syscall_64+0xbc/0xf0
[  149.836462]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  149.841671] RIP: 0033:0x457669
[  149.844881] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  149.863811] RSP: 002b:00007fbd40835c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  149.871546] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669
[  149.878836] RDX: fffffffffffffff9 RSI: 00000000200001c0 RDI: 0000000000000003
[  149.886134] RBP: 000000000072bf00 R08: 0000000020000080 R09: 000000000000001c
[  149.893439] R10: 0000000020000003 R11: 0000000000000246 R12: 00007fbd408366d4
[  149.900726] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff
[  149.909178] Kernel Offset: disabled
[  149.912813] Rebooting in 86400 seconds..