[ 54.746025] audit: type=1800 audit(1538416629.734:27): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 55.907442] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 59.641136] random: sshd: uninitialized urandom read (32 bytes read) [ 60.200747] random: sshd: uninitialized urandom read (32 bytes read) [ 61.875158] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. [ 67.552858] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/01 17:57:23 fuzzer started [ 70.418055] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/01 17:57:27 dialing manager at 10.128.0.26:46161 2018/10/01 17:57:27 syscalls: 1 2018/10/01 17:57:27 code coverage: enabled 2018/10/01 17:57:27 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/01 17:57:27 setuid sandbox: enabled 2018/10/01 17:57:27 namespace sandbox: enabled 2018/10/01 17:57:27 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/01 17:57:27 fault injection: enabled 2018/10/01 17:57:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/01 17:57:27 net packed injection: enabled 2018/10/01 17:57:27 net device setup: enabled [ 74.813959] random: crng init done 17:59:40 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x20040004, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001700)="8a", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), 0xfcf5) recvmsg(r0, &(0x7f0000000700)={&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)=""/235, 0xeb}], 0x1, &(0x7f0000000680)=""/84, 0x54}, 0x0) [ 205.604754] IPVS: ftp: loaded support on port[0] = 21 17:59:41 executing program 1: getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000340), 0x800009) [ 207.402844] IPVS: ftp: loaded support on port[0] = 21 [ 208.995202] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.001797] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.012461] device bridge_slave_0 entered promiscuous mode [ 209.268080] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.274731] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.285524] device bridge_slave_1 entered promiscuous mode [ 209.481833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 17:59:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0xa7, &(0x7f0000000280)="e388e528f81e50508226a8690d61", &(0x7f0000000540)=""/167, 0x538}, 0x28) [ 209.662802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.583009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.630983] IPVS: ftp: loaded support on port[0] = 21 [ 210.912743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.237304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 211.244456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.520943] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 211.528120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.890911] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.897492] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.936192] device bridge_slave_0 entered promiscuous mode [ 212.320350] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.326895] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.351360] device bridge_slave_1 entered promiscuous mode [ 212.481022] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 212.500320] team0: Port device team_slave_0 added [ 212.690048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.830370] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 212.853409] team0: Port device team_slave_1 added [ 212.877870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 213.172940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 213.180107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.190497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:59:48 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x800, 0x0) read(r0, &(0x7f0000000080)=""/112, 0x70) [ 213.509237] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 213.516334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.535397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.886962] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.926433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.934571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.953503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.258692] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.328873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.336568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.353513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.612535] IPVS: ftp: loaded support on port[0] = 21 [ 214.623274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 214.630352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.997745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 215.005036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.131776] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.148284] team0: Port device team_slave_0 added [ 216.453813] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.460367] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.490790] device bridge_slave_0 entered promiscuous mode [ 216.508543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.524922] team0: Port device team_slave_1 added [ 216.912109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.919191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.928593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.959277] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.965808] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.979467] device bridge_slave_1 entered promiscuous mode [ 217.279430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 217.286810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.299724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.392746] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.611283] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.618936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.635079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.790825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.983570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.991522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.013222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:59:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfffffffffffffee3, 0x40000ce, 0x0, 0xffffffffffffff48) [ 219.069154] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.075751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.082846] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.089373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.152124] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 219.158879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.205981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.664540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.679866] IPVS: ftp: loaded support on port[0] = 21 [ 220.053117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.060431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.528273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.535369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.549396] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.555982] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.595215] device bridge_slave_0 entered promiscuous mode [ 221.916423] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.946265] team0: Port device team_slave_0 added [ 222.025083] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.031766] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.059046] device bridge_slave_1 entered promiscuous mode [ 222.382971] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.408513] team0: Port device team_slave_1 added [ 222.441127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.898183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.905251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.919439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.954104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.054915] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.061479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.068480] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.075013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.098726] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.236582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.376769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.383837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.402061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.810694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.818250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.843160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 17:59:59 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4600800000000000000004000002000600ca3f8bca0000000038000000000000f7ffffffffffff1f0002000000000000000000000001000000000000000000f87b66ff000005000000000001000000010000000000310ff3eec1b0002c085355be2b44eb676718214d26887b9bf617ae42d1a08c2b"], 0x78) close(r0) mlockall(0x2) uselib(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000002c0)) readahead(0xffffffffffffffff, 0x0, 0x9) [ 224.275354] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.283317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.301440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.415046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.807549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.173049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 225.180145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.667050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.674122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.882040] IPVS: ftp: loaded support on port[0] = 21 [ 227.082947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 227.115257] team0: Port device team_slave_0 added [ 227.171491] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.178048] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.222741] device bridge_slave_0 entered promiscuous mode [ 227.554334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 227.580291] team0: Port device team_slave_1 added [ 227.648596] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.655195] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.683157] device bridge_slave_1 entered promiscuous mode [ 228.027287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 228.034376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.049770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.122981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.461750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 228.468945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.486562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.533329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.902109] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 228.909954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.923416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.341886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.349809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.366089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.492519] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.499075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.506069] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.512605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.604721] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 229.941737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.360299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.416894] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.840527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 230.848252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.324755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.332038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.780706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.803084] team0: Port device team_slave_0 added [ 233.265440] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.301926] team0: Port device team_slave_1 added [ 233.387715] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.394266] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.455581] device bridge_slave_0 entered promiscuous mode [ 233.696292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.703419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.721577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.924715] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.931272] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.986953] device bridge_slave_1 entered promiscuous mode [ 234.181223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.188376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.205808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.507132] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 234.519867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.527444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.542083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.786570] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.793125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.800146] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.806779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.839752] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.860771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 235.000027] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.007790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.020435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.498894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.029863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 236.501345] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.005891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 237.013938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.403279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 237.410403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.741790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.762444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.777568] team0: Port device team_slave_0 added [ 239.236724] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.255303] team0: Port device team_slave_1 added [ 239.699460] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.706746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.718537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.090205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.097359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.118080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.239090] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.245767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.252791] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.259294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.308403] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.484510] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.569113] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.576828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.594437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.946931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.043120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.050807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.074270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.306585] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.313069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.324253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.079286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.078744] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.979251] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.148763] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.155327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.162372] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.168931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.210873] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 246.217859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.836527] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.842945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.863146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.515253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.667555] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.221146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 251.990723] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 251.997284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.011495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.686528] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.295141] 8021q: adding VLAN 0 to HW filter on device bond0 18:00:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f00000004c0)={'exec ', ':\x00'}, 0x1a9) 18:00:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000076c0)=[{{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=[{0xc, 0x117, 0x3}], 0xc}}], 0x1, 0x0) [ 256.201168] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 18:00:31 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0), 0x7519) 18:00:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 18:00:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000440)=0xc) 18:00:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000440)=0xc) [ 258.017751] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.024155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.038402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:00:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000440)=0xc) [ 259.166439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.669692] hrtimer: interrupt took 99472 ns [ 259.887065] 8021q: adding VLAN 0 to HW filter on device team0 18:00:35 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) dup2(r0, r1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4}}, 0x3a) [ 260.684388] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 261.724725] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 261.734089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.746374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.890921] 8021q: adding VLAN 0 to HW filter on device team0 18:00:38 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setrlimit(0x8000000000000007, &(0x7f0000000080)) open_by_handle_at(r0, &(0x7f0000000000)={0x9, 0x2, "9f"}, 0x0) [ 263.825060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.742291] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 265.631060] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 265.637536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.651184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:00:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)) [ 266.779995] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.964978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:00:43 executing program 4: r0 = memfd_create(&(0x7f0000000100)="046e17", 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x5011, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') ftruncate(r0, 0x0) 18:00:44 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0xffffffff}, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 18:00:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001c4000/0x3000)=nil, 0x3000, 0xf) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc04000, 0x4000000000000008) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:00:44 executing program 1: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) 18:00:44 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)) 18:00:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") flistxattr(r0, &(0x7f00000016c0)=""/245, 0xf5) 18:00:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b89000/0x3000)=nil) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc04000, 0x4000000000000008) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:00:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x1d, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 18:00:45 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000140)=""/104) 18:00:45 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 18:00:45 executing program 1: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) 18:00:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001a7000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b89000/0x3000)=nil) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc04000, 0x4000000000000008) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 18:00:45 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) 18:00:45 executing program 2: socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, &(0x7f0000000000), 0xa2}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)={&(0x7f0000000680)='./file0\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x24000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$kcm(r6, &(0x7f0000000640)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0x40, 0x1, "3821a47449b8305744c0d3e5a2373edc9943772e48c7dd50e325e997f8871cf085dad9e59ae33def843b82b69aab80be2c74ca46f0dbe179ee02df875b1e0f", 0x7}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000780), 0x0, 0x4800}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x6e) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) close(r8) openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='+[vboxnet0trusted\x00', 0xffffffffffffff9c}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'yam0\x00', 0x200}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x4, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x2c) close(r10) r11 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000004c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)="c1bbf9010000000000881ee4ac141411e0", 0x11}], 0x1}, 0x0) 18:00:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0xfeffffff}}, 0x30) 18:00:46 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="cc"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 18:00:46 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000002040)=@generic, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000100)=""/73, 0x49}}], 0x1, 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/fscreate\x00') pwritev(r0, &(0x7f0000000180), 0x3c7, 0x0) 18:00:46 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) 18:00:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x10000000000006, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f00000000c0)) 18:00:46 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x0, 0x2cbd) 18:00:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) 18:00:47 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000aeb000)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local={0xac, 0x14, 0xffffffffffffffff}}, @icmp=@address_reply}}}}, &(0x7f0000000040)) 18:00:47 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000080)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 18:00:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c}, 0x1c}}, 0x0) 18:00:47 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)}, 0x0) [ 272.398985] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.406320] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.510109] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.516753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.523936] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.530462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.537529] device bridge0 entered promiscuous mode 18:00:47 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x1) ioctl$RTC_UIE_ON(r0, 0xc0185500) [ 272.656178] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 272.711518] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.718277] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.804344] device bridge0 left promiscuous mode [ 272.817083] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.823841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.830992] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.837568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.844852] device bridge0 entered promiscuous mode 18:00:47 executing program 0: add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000002c0)=':', 0x1, 0xfffffffffffffffe) 18:00:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) 18:00:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)) [ 272.940255] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 18:00:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @local}}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 18:00:48 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000080)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 18:00:48 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x0) 18:00:48 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x20a1}) [ 273.461728] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.468540] bridge0: port 1(bridge_slave_0) entered disabled state 18:00:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$P9_RLCREATE(r0, &(0x7f0000000d40)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x6}, 0x80000000}}, 0x18) 18:00:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) [ 273.535226] device bridge0 left promiscuous mode 18:00:48 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10001) fallocate(r0, 0x3, 0x0, 0x2cbd) [ 273.631005] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.637738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.642459] usb usb9: usbfs: process 6462 (syz-executor0) did not claim interface 0 before use [ 273.644842] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.659845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.667012] device bridge0 entered promiscuous mode 18:00:48 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x1) ioctl$RTC_UIE_ON(r0, 0xc0185502) [ 273.869945] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 273.943244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:00:49 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) 18:00:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r0, 0x3, 0x0, 0x2cbd) 18:00:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:00:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) setrlimit(0x9, &(0x7f0000000100)) 18:00:49 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)='U', 0x1}], 0x1, &(0x7f0000000600)}, 0x40) close(r1) 18:00:49 executing program 1: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000080)) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) [ 274.691177] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.698174] bridge0: port 1(bridge_slave_0) entered disabled state 18:00:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) [ 274.754827] device bridge0 left promiscuous mode [ 274.810340] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.816948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.824063] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.830604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.837781] device bridge0 entered promiscuous mode 18:00:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)) 18:00:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) setrlimit(0x9, &(0x7f0000000100)) 18:00:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x4c, &(0x7f0000000200)=0x1000005, 0x4) 18:00:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:50 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/4, 0x4) 18:00:50 executing program 3: 18:00:50 executing program 1: 18:00:50 executing program 4: 18:00:50 executing program 0: 18:00:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:50 executing program 3: 18:00:51 executing program 4: 18:00:51 executing program 1: 18:00:51 executing program 0: 18:00:51 executing program 3: 18:00:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:51 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f00000000c0)) 18:00:51 executing program 4: 18:00:51 executing program 1: 18:00:51 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:51 executing program 3: 18:00:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000400), 0x8) 18:00:52 executing program 4: 18:00:52 executing program 1: 18:00:52 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) 18:00:52 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:52 executing program 0: 18:00:52 executing program 3: 18:00:52 executing program 1: 18:00:52 executing program 0: 18:00:52 executing program 4: 18:00:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x0, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:53 executing program 3: 18:00:53 executing program 1: 18:00:53 executing program 5: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) 18:00:53 executing program 0: 18:00:53 executing program 4: 18:00:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x0, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:53 executing program 1: 18:00:53 executing program 3: 18:00:53 executing program 0: 18:00:54 executing program 4: 18:00:54 executing program 1: 18:00:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x0, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:54 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) 18:00:54 executing program 0: 18:00:54 executing program 3: 18:00:54 executing program 4: 18:00:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x0, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:54 executing program 1: 18:00:54 executing program 0: 18:00:54 executing program 3: 18:00:54 executing program 4: 18:00:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x0, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:55 executing program 1: 18:00:55 executing program 3: 18:00:55 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f00000000c0)) 18:00:55 executing program 0: 18:00:55 executing program 4: 18:00:55 executing program 1: 18:00:55 executing program 3: 18:00:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x0, 0x0, 0x0, {0x5}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @remote, 0x5}, r1}}, 0x30) 18:00:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f00000000c0)) 18:00:56 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10000, 0x2081) close(r0) 18:00:56 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000005c0)=""/254) 18:00:56 executing program 1: r0 = socket$inet6(0xa, 0x20000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="f5e7cf"], 0x3) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 18:00:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:56 executing program 4: 18:00:56 executing program 0: 18:00:56 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000003000/0x3000)=nil, 0x0) 18:00:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:00:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000340)}, 0x0) 18:00:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.effective_mems\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x0, 0x5}}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3}, 0xffffffffffffff9b) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="fecc858b", 0x4}], 0x1}, 0x0) 18:00:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28001) write$evdev(r0, &(0x7f0000000180)=[{{0x0, 0x7530}}], 0x18) 18:00:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 18:00:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000400000037, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") 18:00:57 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {}, 'syz_tun\x00'}) 18:00:58 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000440), 0xffffffffffffffff) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000004880)={&(0x7f0000000240)=@ipx={0x4, 0x0, 0x0, "165c4c9e7632"}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)={'filter\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[{}], 0x1) 18:00:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f2) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/122, 0x7a}], 0x1, &(0x7f0000000500)=""/178, 0xb2}}], 0x1, 0x0, &(0x7f0000000e00)) 18:00:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 18:00:58 executing program 4: creat(&(0x7f0000001dc0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd'}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) 18:00:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:00:58 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0xa7, &(0x7f0000000280)="e388e528f81e50508226a8690d61", &(0x7f0000000540)=""/167, 0x2c}, 0x28) 18:00:58 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f0000000400), 0x8) 18:00:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 18:00:59 executing program 4: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) 18:00:59 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000040)="153f62344885d25d766070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000022, &(0x7f0000000000), 0x4) poll(&(0x7f0000001080)=[{r0, 0x1040}, {r1, 0x410}, {r0}], 0x3, 0x4) 18:00:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 18:00:59 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0xfffffffffffffffd]}) 18:00:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 18:00:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001fb, 0x0) 18:00:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:00:59 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) 18:00:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x0, [@generic='!']}]}, 0x1c}}, 0x0) 18:01:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0xf6) 18:01:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 18:01:00 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socketpair$unix(0x1, 0x40000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a0e63c9476288", 0x8}], 0x1, &(0x7f0000000040)}, 0x0) 18:01:00 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x28}, 0x28) 18:01:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @dev}, 0x462, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/13, 0xd}], 0x1ffffffffffffeb3, &(0x7f0000001380)=""/37, 0x25}}], 0x1, 0x0, &(0x7f0000004740)) preadv(r1, &(0x7f0000000140), 0x264, 0x6) 18:01:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x0, [@generic='!']}]}, 0x1c}}, 0x0) 18:01:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:00 executing program 3: socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@sco={0x1f, {0x608}}, 0x80, &(0x7f0000000000), 0xa2}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)={&(0x7f0000000680)='./file0\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x24000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200082}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$kcm(r6, &(0x7f0000000640)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0x40, 0x1, "3821a47449b8305744c0d3e5a2373edc9943772e48c7dd50e325e997f8871cf085dad9e59ae33def843b82b69aab80be2c74ca46f0dbe179ee02df875b1e0f", 0x7}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000780), 0x0, 0x4800}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x6e) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x88}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) close(r8) openat$cgroup_procs(r4, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='+[vboxnet0trusted\x00', 0xffffffffffffff9c}, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'yam0\x00', 0x200}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x4, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x2c) close(r10) r11 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000004c0)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)="c1bbf9010000000000881ee4ac141411e0", 0x11}], 0x1}, 0x0) 18:01:01 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socketpair$unix(0x1, 0x40000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a0e63c9476288", 0x8}], 0x1, &(0x7f0000000040)}, 0x0) 18:01:01 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 18:01:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x109, &(0x7f0000000380)=@raw, &(0x7f0000ac3000)="47505d04", 0xb5, 0xfffffffffffffd4c, &(0x7f0000000080)=""/103}, 0x48) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x11, &(0x7f00000002c0)=""/216) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/33, 0x21}], 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)=@known='security.capability\x00') fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x7, 0xfffffffffffeffff, 0x81}, 0x10) sendfile(r1, r5, &(0x7f00000003c0), 0x8000fffffffe) 18:01:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x8, 0x0, [@generic='!']}]}, 0x1c}}, 0x0) 18:01:01 executing program 4: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/2, 0x2, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb805000000a280000206000000a843096c37234a390095952ab6f860cc0b0000006b7b6656dc1338d54400009b84356ef75afb83de441100d42c44e82afc53490000000000eeffffff00000000", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 18:01:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:01 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) socket(0x0, 0x3, 0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000775000)) process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/143, 0x8f}], 0x1, &(0x7f0000001540)=[{&(0x7f0000001400)=""/90, 0x5a}], 0x1, 0x0) tkill(r0, 0x1000000000016) 18:01:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 18:01:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0xa7, &(0x7f0000000280)="e388e528f81e50508226a8690d61", &(0x7f0000000540)=""/167, 0x2c}, 0x28) [ 287.210253] netlink: 'syz-executor2': attribute type 3 has an invalid length. 18:01:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080), 0x8c}]) 18:01:02 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x220040, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000018c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f00000006c0)=[{}, {}, {}, {}, {}]}, 0x78) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x700000000000000, @remote}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000340)=[@rdma_args={0x48, 0x114, 0x1, {{0x3000000}, {&(0x7f0000000780)=""/4096, 0x1000}, &(0x7f0000001b80)=[{&(0x7f0000001940)=""/105, 0x69}], 0x1}}], 0x48}, 0x0) 18:01:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:01:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:02 executing program 3: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 18:01:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) [ 287.787864] rdma_op 00000000e1743498 conn xmit_rdma (null) 18:01:02 executing program 1: msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/71}, 0x4f, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) [ 287.929346] netlink: 'syz-executor2': attribute type 3 has an invalid length. 18:01:03 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:01:03 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000680), 0x0, &(0x7f0000000340)}, 0x0) 18:01:03 executing program 3: 18:01:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x4, 0x3}]}, 0x18}}, 0x0) 18:01:03 executing program 4: [ 288.515517] netlink: 'syz-executor2': attribute type 3 has an invalid length. 18:01:03 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:01:03 executing program 3: 18:01:03 executing program 1: 18:01:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001fb, 0x0) 18:01:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x4, 0x3, [@generic]}]}, 0x18}}, 0x0) 18:01:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132196) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) [ 289.194924] netlink: 'syz-executor2': attribute type 3 has an invalid length. 18:01:04 executing program 1: 18:01:04 executing program 5: 18:01:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x4, 0x3, [@generic]}]}, 0x18}}, 0x0) 18:01:04 executing program 4: 18:01:04 executing program 1: [ 289.857140] netlink: 'syz-executor2': attribute type 3 has an invalid length. 18:01:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:04 executing program 3: 18:01:05 executing program 5: 18:01:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x5}, [@nested={0x4, 0x3, [@generic]}]}, 0x18}}, 0x0) 18:01:05 executing program 1: 18:01:05 executing program 4: [ 290.469127] netlink: 'syz-executor2': attribute type 3 has an invalid length. 18:01:05 executing program 3: 18:01:05 executing program 5: 18:01:05 executing program 1: 18:01:05 executing program 4: 18:01:05 executing program 2: 18:01:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:06 executing program 3: 18:01:06 executing program 5: 18:01:06 executing program 1: 18:01:06 executing program 2: 18:01:06 executing program 4: 18:01:06 executing program 3: 18:01:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:06 executing program 5: 18:01:06 executing program 1: 18:01:07 executing program 4: 18:01:07 executing program 3: 18:01:07 executing program 5: 18:01:07 executing program 2: 18:01:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:07 executing program 1: 18:01:07 executing program 3: 18:01:07 executing program 5: 18:01:07 executing program 4: 18:01:07 executing program 2: 18:01:07 executing program 3: 18:01:08 executing program 1: 18:01:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:08 executing program 5: 18:01:08 executing program 4: 18:01:08 executing program 2: 18:01:08 executing program 3: 18:01:08 executing program 5: 18:01:08 executing program 1: 18:01:08 executing program 4: 18:01:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:08 executing program 2: 18:01:09 executing program 3: 18:01:09 executing program 5: 18:01:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x14104a, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000008c0)={0x14}, 0x371) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x40204000000b) sendfile(r0, r0, &(0x7f0000000080)=0x27, 0x6) dup3(r0, r1, 0x0) 18:01:09 executing program 1: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000700), 0x0, &(0x7f00000007c0)=""/116, 0x74}, 0x0) ftruncate(r0, 0x8000) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 18:01:09 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getpid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0xffffffff}, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="095daded6887351b7c5b8809f3"], &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xc1105511) 18:01:09 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x18}, 0x18) 18:01:09 executing program 3: 18:01:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:09 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) getpid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0xffffffff}, 0x4000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB="095daded6887351b7c5b8809f3"], &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xc1105511) 18:01:10 executing program 3: 18:01:10 executing program 2: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/51, 0x33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socketpair$unix(0x1, 0x40000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x0, 0x0) read(r2, &(0x7f0000000000)=""/4, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x211}], 0x1, &(0x7f0000000040)}, 0x0) 18:01:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x10, r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x80000001, @loopback, 0x5}, @in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000640)=0x10) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB]) rmdir(&(0x7f0000000200)='./bus\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0xb00]}, 0x10) 18:01:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000020c0), 0x1000) write$FUSE_OPEN(r1, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x7}}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 18:01:10 executing program 5: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)=""/185, 0xb9}], 0x1, &(0x7f00000007c0)=""/116, 0x74}, 0x0) ftruncate(r0, 0x8000) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) [ 295.709542] ================================================================== [ 295.716976] BUG: KMSAN: uninit-value in _decode_session6+0x645/0x1650 [ 295.723590] CPU: 0 PID: 7089 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #61 [ 295.730802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.740168] Call Trace: [ 295.742801] dump_stack+0x2f6/0x430 [ 295.746480] kmsan_report+0x183/0x2b0 [ 295.750334] __msan_warning+0x70/0xc0 [ 295.754174] _decode_session6+0x645/0x1650 [ 295.758469] __xfrm_decode_session+0x156/0x200 [ 295.763084] ? xfrm6_get_saddr+0x4b0/0x4b0 [ 295.767358] icmp6_send+0x2d01/0x3840 [ 295.771294] ? icmpv6_param_prob+0xc0/0xc0 [ 295.775569] icmpv6_send+0xe5/0x110 [ 295.779244] ip6_link_failure+0x5c/0x310 [ 295.783332] ? ip6_negative_advice+0x3b0/0x3b0 [ 295.787938] ? ip6_negative_advice+0x3b0/0x3b0 [ 295.792554] ip6_tnl_xmit+0xd87/0x40d0 [ 295.796479] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.801892] ? INIT_INT+0x17/0x40 [ 295.805387] ? kmsan_set_origin_inline+0x6b/0x120 [ 295.810317] ip6_tnl_start_xmit+0x1b49/0x1ec0 [ 295.814880] ? ip6_tnl_dev_uninit+0x740/0x740 [ 295.819416] dev_hard_start_xmit+0x68b/0xd50 [ 295.823893] __dev_queue_xmit+0x2d81/0x3c60 [ 295.828259] ? __neigh_create+0x2c36/0x2d70 [ 295.832653] dev_queue_xmit+0x4b/0x60 [ 295.836490] neigh_direct_output+0x42/0x50 [ 295.840776] ? neigh_connected_output+0x6f0/0x6f0 [ 295.845648] ip6_finish_output2+0x1f2b/0x2130 [ 295.850219] ip6_finish_output+0xbad/0xc70 [ 295.854512] ip6_output+0x572/0x6a0 [ 295.858175] ? ip6_output+0x6a0/0x6a0 [ 295.862017] ? ac6_seq_show+0x200/0x200 [ 295.866028] ip6_local_out+0x164/0x1d0 [ 295.869967] ip6_push_pending_frames+0x218/0x4d0 [ 295.874810] rawv6_sendmsg+0x45f7/0x5680 [ 295.878939] ? aa_sk_perm+0xdaf/0x1050 [ 295.882950] ? compat_rawv6_ioctl+0x100/0x100 [ 295.887487] inet_sendmsg+0x4c5/0x7d0 [ 295.891327] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.896743] ___sys_sendmsg+0xe70/0x1290 [ 295.900868] ? inet_getname+0x490/0x490 [ 295.904883] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 295.910282] ? __fget+0x892/0x8f0 [ 295.913820] ? __fdget+0x30b/0x410 [ 295.917413] __se_sys_sendmsg+0x2a3/0x3d0 [ 295.921651] __x64_sys_sendmsg+0x4a/0x70 [ 295.925778] do_syscall_64+0xb8/0x100 [ 295.929622] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 295.934844] RIP: 0033:0x457579 [ 295.938071] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.957086] RSP: 002b:00007f04a5f88c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.964829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 295.972126] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000004 [ 295.979418] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 295.986704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04a5f896d4 [ 295.994020] R13: 00000000004c3536 R14: 00000000004d5328 R15: 00000000ffffffff [ 296.001334] [ 296.002972] Uninit was created at: [ 296.006541] kmsan_internal_poison_shadow+0xb8/0x1b0 [ 296.011692] kmsan_kmalloc+0x98/0x100 [ 296.015518] kmsan_slab_alloc+0x10/0x20 [ 296.019519] __kmalloc_node_track_caller+0xba6/0x13f0 [ 296.024737] pskb_expand_head+0x326/0x1e10 [ 296.029014] __pskb_pull_tail+0x1e3/0x21b0 [ 296.033272] ip6_tnl_parse_tlv_enc_lim+0x7f5/0xa90 [ 296.038223] ip6_tnl_start_xmit+0x791/0x1ec0 [ 296.042667] dev_hard_start_xmit+0x68b/0xd50 [ 296.047107] __dev_queue_xmit+0x2d81/0x3c60 [ 296.051451] dev_queue_xmit+0x4b/0x60 [ 296.055276] neigh_direct_output+0x42/0x50 [ 296.059541] ip6_finish_output2+0x1f2b/0x2130 [ 296.064055] ip6_finish_output+0xbad/0xc70 [ 296.068310] ip6_output+0x572/0x6a0 [ 296.071961] ip6_local_out+0x164/0x1d0 [ 296.075869] ip6_push_pending_frames+0x218/0x4d0 [ 296.080651] rawv6_sendmsg+0x45f7/0x5680 [ 296.084739] inet_sendmsg+0x4c5/0x7d0 [ 296.088590] ___sys_sendmsg+0xe70/0x1290 [ 296.092687] __se_sys_sendmsg+0x2a3/0x3d0 [ 296.096868] __x64_sys_sendmsg+0x4a/0x70 [ 296.100979] do_syscall_64+0xb8/0x100 [ 296.104811] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.110009] ================================================================== [ 296.117381] Disabling lock debugging due to kernel taint [ 296.122845] Kernel panic - not syncing: panic_on_warn set ... [ 296.122845] [ 296.130237] CPU: 0 PID: 7089 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #61 [ 296.138822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.148186] Call Trace: [ 296.150812] dump_stack+0x2f6/0x430 [ 296.154575] panic+0x54c/0xaf7 [ 296.157855] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 296.163342] kmsan_report+0x2a8/0x2b0 [ 296.167190] __msan_warning+0x70/0xc0 [ 296.171024] _decode_session6+0x645/0x1650 [ 296.175321] __xfrm_decode_session+0x156/0x200 [ 296.179940] ? xfrm6_get_saddr+0x4b0/0x4b0 [ 296.184236] icmp6_send+0x2d01/0x3840 [ 296.188234] ? icmpv6_param_prob+0xc0/0xc0 [ 296.192495] icmpv6_send+0xe5/0x110 [ 296.196159] ip6_link_failure+0x5c/0x310 [ 296.200244] ? ip6_negative_advice+0x3b0/0x3b0 [ 296.204854] ? ip6_negative_advice+0x3b0/0x3b0 [ 296.209464] ip6_tnl_xmit+0xd87/0x40d0 [ 296.213392] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.218807] ? INIT_INT+0x17/0x40 [ 296.222299] ? kmsan_set_origin_inline+0x6b/0x120 [ 296.227226] ip6_tnl_start_xmit+0x1b49/0x1ec0 [ 296.231800] ? ip6_tnl_dev_uninit+0x740/0x740 [ 296.236323] dev_hard_start_xmit+0x68b/0xd50 [ 296.240801] __dev_queue_xmit+0x2d81/0x3c60 [ 296.245149] ? __neigh_create+0x2c36/0x2d70 [ 296.249531] dev_queue_xmit+0x4b/0x60 [ 296.253356] neigh_direct_output+0x42/0x50 [ 296.257614] ? neigh_connected_output+0x6f0/0x6f0 [ 296.262481] ip6_finish_output2+0x1f2b/0x2130 [ 296.267040] ip6_finish_output+0xbad/0xc70 [ 296.271316] ip6_output+0x572/0x6a0 [ 296.274968] ? ip6_output+0x6a0/0x6a0 [ 296.278810] ? ac6_seq_show+0x200/0x200 [ 296.282813] ip6_local_out+0x164/0x1d0 [ 296.286733] ip6_push_pending_frames+0x218/0x4d0 [ 296.291539] rawv6_sendmsg+0x45f7/0x5680 [ 296.295656] ? aa_sk_perm+0xdaf/0x1050 [ 296.299616] ? compat_rawv6_ioctl+0x100/0x100 [ 296.304135] inet_sendmsg+0x4c5/0x7d0 [ 296.307958] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.313355] ___sys_sendmsg+0xe70/0x1290 [ 296.317893] ? inet_getname+0x490/0x490 [ 296.321893] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 296.327279] ? __fget+0x892/0x8f0 [ 296.330794] ? __fdget+0x30b/0x410 [ 296.334372] __se_sys_sendmsg+0x2a3/0x3d0 [ 296.338564] __x64_sys_sendmsg+0x4a/0x70 [ 296.342647] do_syscall_64+0xb8/0x100 [ 296.346478] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 296.351683] RIP: 0033:0x457579 [ 296.354892] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.373803] RSP: 002b:00007f04a5f88c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.381529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 296.388813] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000004 [ 296.396090] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 296.403370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04a5f896d4 [ 296.410649] R13: 00000000004c3536 R14: 00000000004d5328 R15: 00000000ffffffff [ 296.418369] Kernel Offset: disabled [ 296.422030] Rebooting in 86400 seconds..