[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 86.040730][ T32] audit: type=1800 audit(1567234714.093:25): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 86.064113][ T32] audit: type=1800 audit(1567234714.123:26): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 86.103823][ T32] audit: type=1800 audit(1567234714.143:27): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. 2019/08/31 06:58:50 fuzzer started 2019/08/31 06:58:56 dialing manager at 10.128.0.26:40947 2019/08/31 06:58:56 syscalls: 2376 2019/08/31 06:58:56 code coverage: enabled 2019/08/31 06:58:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/08/31 06:58:56 extra coverage: enabled 2019/08/31 06:58:56 setuid sandbox: enabled 2019/08/31 06:58:56 namespace sandbox: enabled 2019/08/31 06:58:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/31 06:58:56 fault injection: enabled 2019/08/31 06:58:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/31 06:58:56 net packet injection: enabled 2019/08/31 06:58:56 net device setup: enabled 07:01:37 executing program 0: r0 = memfd_create(&(0x7f00000004c0)='y\xa3t\x00\x00', 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syzkaller login: [ 269.467247][T12701] IPVS: ftp: loaded support on port[0] = 21 [ 269.609395][T12701] chnl_net:caif_netlink_parms(): no params data found [ 269.664000][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.671221][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.680022][T12701] device bridge_slave_0 entered promiscuous mode [ 269.689650][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.696885][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.705647][T12701] device bridge_slave_1 entered promiscuous mode [ 269.738565][T12701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.751231][T12701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.783656][T12701] team0: Port device team_slave_0 added [ 269.792992][T12701] team0: Port device team_slave_1 added [ 269.886838][T12701] device hsr_slave_0 entered promiscuous mode [ 270.032391][T12701] device hsr_slave_1 entered promiscuous mode [ 270.292172][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.299383][T12701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.307163][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.314383][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.393638][T12701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.415790][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.427372][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.437559][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.449177][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 270.469863][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.488058][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.497555][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.504812][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.556480][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.565604][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.572836][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.583683][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.593635][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.603282][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.615692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.628380][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.637741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.654125][T12701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.688790][T12701] 8021q: adding VLAN 0 to HW filter on device batadv0 07:01:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() ioctl$TCGETX(r1, 0x5432, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 07:01:41 executing program 1: [ 273.749914][T12717] IPVS: ftp: loaded support on port[0] = 21 [ 273.950528][T12717] chnl_net:caif_netlink_parms(): no params data found [ 274.009911][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.017779][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.026647][T12717] device bridge_slave_0 entered promiscuous mode [ 274.037525][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.044982][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.054076][T12717] device bridge_slave_1 entered promiscuous mode [ 274.088449][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.102329][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.137701][T12717] team0: Port device team_slave_0 added [ 274.147458][T12717] team0: Port device team_slave_1 added [ 274.217165][T12717] device hsr_slave_0 entered promiscuous mode [ 274.253803][T12717] device hsr_slave_1 entered promiscuous mode [ 274.293146][T12717] debugfs: Directory 'hsr0' with parent '/' already present! [ 274.354266][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.361784][T12717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.369531][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.376776][T12717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.534199][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.554637][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.565880][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.575720][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.603404][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 274.634332][T12717] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.671019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.681133][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.688598][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.750331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.759766][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.767321][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.778139][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.788611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.798280][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.807483][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.822513][T12717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.855013][T12717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.885244][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 07:01:43 executing program 1: 07:01:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"71c7a80e25ee54a737f116b995daadcb"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {0x0, r1, 0x2}}, 0x18) 07:01:43 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2, 0x2}) 07:01:43 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x72, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @remote}}}, 0x108) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7fffffff, 0x4, 0x6, 0x60, 0x6}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r1, 0x0, 0x1}, 0x8) ioctl$int_in(r0, 0x800060c0045005, &(0x7f00000000c0)) 07:01:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02063d8c02000000790700741e3c8100"], 0x10}}, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = dup3(r1, r1, 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="00ce03767d0cf9a4620ad7f908e3bf7d", 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 07:01:44 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0xa, @vbi={0x6, 0x7f, 0x8, 0xb5315258, [0x0, 0x40], [0x3, 0x7fffffff], 0x1}}) 07:01:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x8, 0xfffffffffffffffc, 0x1, 0x40], 0x5, 0x100, 0x3, 0x367, 0x81, 0xffffffffffffffff, {0x0, 0xeb2, 0xc2, 0x0, 0x7, 0x20000000000000, 0x75d, 0x80000000, 0xf83, 0x7, 0x32, 0xc, 0xd74, 0x2, "e53c079601b6e015f93e2b0e103f8c3323c8a065f57f99afdacaa9486d67d045"}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0x8040ae9f, 0x200000000000000) [ 276.727832][T12747] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:01:44 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x6) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r3, 0x10, 0x3800000, 0x5}, &(0x7f0000000300)=0x10) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x02\x00\x1b\x00\x00\x00\x00\x1d\x850\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x85\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 07:01:45 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x2fc, 0x0) r1 = msgget$private(0x0, 0x1036a) msgrcv(r1, &(0x7f0000000240)={0x0, ""/4096}, 0x1008, 0x1, 0x1000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x1) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) flock(r2, 0x51e6de3be8179121) flock(r3, 0x1) flock(r0, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000000c0)={0x4, 0x0, [{}, {}, {}, {}]}) 07:01:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="02070006020000000000000000000000fde2d8ddad80053f1783099d1c033664d66a10f43d34425d41af41768e50e14a6736b2bfeb83cc963d3fdb1ed9dc6072296675ad208756e666e9442d33469322544afb45f7d9fdd14c9df56767560e93f6c983393d67193102f9167ea93ac8ee34769cd0ed2db4d46e371fd0a6618f77351099020b8955ce6147012bb7c4aafe582d552d9393443f63b18689ed082f34c2fd5915"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02076906040000002cbd7000ffdbdf2502030000000004d50106ba020100000030048d396ce9bdb9fc40645107ddb8d0922405416231b08645ba1bc4f0ed9c0c355157f419aecc5576121c177bf6280609af8f4c52726e453ed9532933980e0000623cdeec66e906b617eb1339bc95eb1b3c1cd91b9a9af680fa129354808397b8b7a7a4976a0a5e38dee3e530ff570d43484ab2acee8c9cd680482d8de3d9b688d30418f723534686103a4e5ffa18c44a152725449e2c5511f1198f88e1c791c92e8e"], 0x20}}, 0x8044) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x240002, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x20, 0x3, 0x7, 0x3, 0x0, 0x200000000, 0x400, 0x8, 0x0, 0x800, 0x8, 0xc0f, 0x8001, 0xffffffffffff0001, 0x8c1, 0x356, 0x3b, 0x450, 0x9, 0x2, 0x8, 0xada, 0x23492f91, 0xffff, 0x0, 0x4, 0x800, 0xffffffffffffffc7, 0x8, 0x3, 0x4a0, 0x3, 0x100, 0x3f, 0x80000000, 0x8cc, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x10000, 0x5, 0x3, 0x1, 0x171, 0x8}, r1, 0x3, r2, 0x8) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 07:01:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x000zgWd\xb8\xb9w\xa1\xa9\x04\x05@\x9f\xd2f\\7\xb8\xf38\xc8\x8c\xba\xed\x17\xb2\xb6\x9a\x1dmy\x00\x00\x00\x00\x00\x00\x00\xa7\xe9\xf1\x9bk!\xb8\xfc\\\f\xa6\xbb\b-c\x82\xb9\xfd\xb0\xe6u&\x13W\xc9E)6G)@\x872)\x80\vos\x86\x1d\x92c\xa41\xc4\xc8L\x84\x05\x00\x00\x00\x00\x00\x00\x00;Y9\x000$Q\x82\xfb\xc7+Y\b\xf9x{\xa7f\xbf%f\x1f?|\xd0\xa4r\x89\xb2\xf5p&\xfd2\x89@\xad\b\x01\xe4}\x8d\xf3\a#\x13J\xc6\xe7\x03]\x1c\x9fp\xcfKJ\x1e\xc5w\x19\xaa\xe1|\x80\x91\x83q\x17\x06}\t\xdb\xbd\xe4\xfa\r\xd8\xa4`\xc8\xfc\xfe\x8d\xa0\xfeC\xc0\x1fG\xb0\xb98\xef\x0f\xbcHB6\xcc\xd8(\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x508) 07:01:46 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) delete_module(&(0x7f0000000080)='/dev/vcs#\x00', 0x800) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x400000) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000280)={0xa0, 0x19, 0x1, {0x1800, {0x24, 0x2, 0x6}, 0x4, r3, r4, 0xf646c23, 0x0, 0x3, 0x4, 0x6, 0x7f, 0x0, 0xb1, 0x8, 0x5b, 0x5, 0xfffffffffffffffe, 0x80000001, 0x5, 0x7}}, 0xa0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000400)=0x1080) 07:01:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu\x00', 0x200002, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x000zgWd\xb8\xb9w\xa1\xa9\x04\x05@\x9f\xd2f\\7\xb8\xf38\xc8\x8c\xba\xed\x17\xb2\xb6\x9a\x1dmy\x00\x00\x00\x00\x00\x00\x00\xa7\xe9\xf1\x9bk!\xb8\xfc\\\f\xa6\xbb\b-c\x82\xb9\xfd\xb0\xe6u&\x13W\xc9E)6G)@\x872)\x80\vos\x86\x1d\x92c\xa41\xc4\xc8L\x84\x05\x00\x00\x00\x00\x00\x00\x00;Y9\x000$Q\x82\xfb\xc7+Y\b\xf9x{\xa7f\xbf%f\x1f?|\xd0\xa4r\x89\xb2\xf5p&\xfd2\x89@\xad\b\x01\xe4}\x8d\xf3\a#\x13J\xc6\xe7\x03]\x1c\x9fp\xcfKJ\x1e\xc5w\x19\xaa\xe1|\x80\x91\x83q\x17\x06}\t\xdb\xbd\xe4\xfa\r\xd8\xa4`\xc8\xfc\xfe\x8d\xa0\xfeC\xc0\x1fG\xb0\xb98\xef\x0f\xbcHB6\xcc\xd8(\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x508) 07:01:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x75a00a8833ade625, 0x4, &(0x7f0000000140)=@raw=[@exit, @alu={0x4, 0x80000001, 0xd, 0xa, 0x5, 0x50, 0xfffffffffffffff0}, @map={0x18, 0x2db54817f6eac128, 0x1, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xcebf43d439c194d, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xb, 0x400, 0x9}, 0x10}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x8031, r0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x81, 0x2000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) unshare(0x40000000) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffffffffffffffe) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 07:01:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x80200000005, 0x40000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="8b5d26aabc0388061331bab7e9f65d36", 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x101, 0x701000) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000180)='\x00') ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0x2000, {r2, r3/1000+10000}, {0x2, 0x0, 0x4, 0xec96, 0xc00000000000000, 0xfffffffffffffffc, "962433ce"}, 0x1, 0x1, @userptr=0x2902, 0x4}) [ 278.420909][T12864] IPVS: ftp: loaded support on port[0] = 21 [ 278.515301][T12864] IPVS: ftp: loaded support on port[0] = 21 07:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x0) 07:01:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000340)={r1, 0x4, &(0x7f00000001c0)=[0x0, 0x401, 0x0, 0x3], &(0x7f0000000280)=[0x100], 0x10, 0x1, 0xfff, &(0x7f00000002c0)=[0x10001], &(0x7f0000000300)=[0xc2e0, 0xae7, 0x2, 0x800, 0x1ff, 0x8, 0x8, 0x80000001, 0x0]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000380)={r1, 0x5}) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xc00000000000, &(0x7f0000000100)={0x2}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm], 0x2) ioctl(r2, 0xc2604110, &(0x7f0000000000)="584cbfbe750345dea454ce7aa000ffa6230edecfa77a3a2b54a19621e21c9fba31065b2bc6a418da039546b85b590ea1024113c4ce84656fc76ec7a3fd2b4690e9e58b98f0") 07:01:46 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x5, 0x10000, 0x100b, 0x5, 0x1f6587a82aed316e, 0x7, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000008ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41050050}, 0xc, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r1, &(0x7f0000000080), 0x1a6) [ 278.706504][T12873] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 07:01:46 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/fib_txiC\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/170, 0xfffffffffffffede}], 0x0, 0x7) 07:01:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = getpid() setpgid(r1, r2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'%route\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000080000000000000099000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000001000000000000b40079616d3000000000000000000000000076657468315f746f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e000000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000a00000000000000000000004155444954000000000000000001000000000000000000000000000000000000080000000000bce77f56fb6fdad5895b"]}, 0x1e8) 07:01:47 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x606480) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x5}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0xe, 0x8, 0xff}, &(0x7f0000000100)=0x1ff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x4f813eb9}}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x25, "18dc1e45af9d68c52485118b38aeb9d35f2ab74a27f9e8c975167d02bd3e7815960d456e85"}, &(0x7f0000000380)=0x2d) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={r3, 0x3, 0x10, 0x2, 0x40}, &(0x7f0000000400)=0x18) write$capi20(r0, &(0x7f0000000440)={0x10, 0x1, 0x2, 0x83, 0x1, 0x2}, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2) ioctl$KDDELIO(r4, 0x4b35, 0x0) r5 = getpid() r6 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f0000000580)={r4, r2, 0x5}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=r1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000600)={0xfd35, 0x8000000000, 0x1, 'queue0\x00', 0x7}) ptrace(0x8, r6) setrlimit(0x5, &(0x7f00000006c0)={0x8, 0x87}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000700)={0x3, 0x1, @name="7463b6f3807be2eb219cdd015a7418198b93f604290bd54ff225ab00a6ccee36"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000740)={{0x8, 0x1f}, 0x1, 0x6, 0x8, {0x7, 0x605300}, 0x5, 0x9}) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x3) poll(&(0x7f00000007c0)=[{r7, 0x28}, {r4, 0x20}, {r7, 0x2000}, {r2, 0x8080}, {r4, 0x8400}, {r7, 0x40}], 0x6, 0x8) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffffffff8001) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000800)={r4, 0x7, 0x4, r2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000840)=0x1, 0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000880)={0x2, 0x0, [], {0x0, @reserved}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940)='/dev/btrfs-control\x00', 0x400200, 0x0) write$capi20_data(r2, &(0x7f0000000980)={{0x10, 0x5, 0x87, 0x82, 0x3, 0x2}, 0x13, "92815c79701bd81c3df49188c608368f895ec4"}, 0x25) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x801080c0}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r8, 0x301, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000b00)) 07:01:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc0bc5310, &(0x7f0000000340)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 279.047133][T12887] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 279.110120][T12893] xt_AUDIT: Audit type out of range (valid range: 0..2) 07:01:47 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 07:01:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') read(r0, &(0x7f0000000040)=""/230, 0xffffff60) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x1, 0x9000000}) 07:01:47 executing program 1: io_setup(0x7, &(0x7f0000000140)=0x0) io_setup(0x88, &(0x7f0000000040)) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="ac445abcfeb44c3fdef1d2aad4c462160111ef595303ee26ad36d7bbacddb4885e331031f413628b0b9a963f0a84b3848416922f1d063403951fc77eaadb2a0cb1797c12de4c7827296705bb5b91b8a883d8097b4a282ac7b9e44cd7c8edea82201ad9f8219f729701266bc8425c6d271f06a3167ae7bb61d0658666b19319c583f6faef3834c0ed9d83fdaf94") 07:01:47 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETOWNER(r1, 0x40026102, 0x0) 07:01:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1ff, 0x400) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[0x6]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0xffffffffffffff9f) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@loopback, @local, @multicast2}, 0xc) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 279.556713][T12913] IPVS: ftp: loaded support on port[0] = 21 07:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x3090c0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x7fffffff, 0x7ff, 0x101, 0xbd6, 0x7, 0xe183914, 0xffff, 0x4, 0x8, 0x2e, 0x3, 0x1, 0x7, 0x4, 0x80000000, 0x8], 0x1, 0x82002}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xfffffe3a) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, r3) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x9) 07:01:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc2, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x16}]}, 0x30}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x4) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) [ 279.856115][T12913] chnl_net:caif_netlink_parms(): no params data found [ 279.963993][T12924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.004004][T12913] bridge0: port 1(bridge_slave_0) entered blocking state 07:01:48 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) [ 280.011207][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.020389][T12913] device bridge_slave_0 entered promiscuous mode [ 280.033978][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.041236][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.050072][T12913] device bridge_slave_1 entered promiscuous mode [ 280.103353][T12924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6c0bcfe47bf070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x60) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)) dup2(r1, r4) 07:01:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0x4000000000980912}) socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x5, 0x3, 0x1c10000000000000, 0x4, 0x8000, 0xeb3, 0x1}) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1e5) [ 280.215529][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.281506][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.346817][T12913] team0: Port device team_slave_0 added [ 280.357021][T12913] team0: Port device team_slave_1 added [ 280.437591][T12913] device hsr_slave_0 entered promiscuous mode [ 280.593605][T12913] device hsr_slave_1 entered promiscuous mode [ 280.852853][T12913] debugfs: Directory 'hsr0' with parent '/' already present! [ 280.984025][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.007972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.016836][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.034415][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.052829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.062915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.072816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.079985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.120510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.129757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.139321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.148509][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.155788][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.173206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.207175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.248399][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.258637][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.284928][T12913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.295847][T12913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.323939][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.333286][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.343089][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.353044][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.362335][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.371997][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.381101][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.424230][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.434310][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 07:01:49 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffffe, 0x40702) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 07:01:49 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xffffffffffffffd2) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x6b, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) 07:01:49 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) fcntl$dupfd(r0, 0x406, r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000440)={0x59a9, 0xd000}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'HL\x00'}, &(0x7f0000000380)=0x1e) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f00000003c0)="86cf74adefef735ab26ee10c3b403cc4ce65961287a093d8a7ef23119f32ef45b8e7a5655ec0e7f95c", 0x29) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000880)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:01:49 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/72) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r1) r2 = semget(0x2, 0x3, 0x82) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000280)=""/224) 07:01:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x3fffffffc0000, 0x0, "d47715eb1d44c485903dbffbaae3c52cef738eb7b6fe56a3dc732b57879cda07", 0x0, 0x6, 0x0, 0x8, 0x4e}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netfilter\x00') ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x2}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000140)={0x1}) 07:01:50 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0xffffffff, @rand_addr="26378ef458d8f639db5e223fdf4c455b", 0x1f}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x2, @rand_addr="9f9731c45e864f4441e45d074dc77a83", 0x8001}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x5, @rand_addr="bdc2f066c39b36e6ad696455ad8232a4", 0x200}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @broadcast}], 0xb4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000280)={0xc0990001, 0x0, "9d83eb842f2de2e90433bc9fa52f9bdf69e22e6176ee138c725f120fc0571b37"}) 07:01:50 executing program 2: r0 = epoll_create1(0x0) r1 = socket(0x17, 0x4, 0x3) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x113, 0x80010, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0), 0x4) 07:01:50 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cT\x87se\xbc\xb7memst\x89\xf4\x93\t\xd74l\xa7\xd9\xa6S\xde\x9f>\x86\xee\x12n\bg\xbdk=', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10a000d54) ftruncate(r2, 0x7fffffff) 07:01:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8000, 0x123000) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0x1f, 0xad9}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000200)='/\x91\x0f\xe8\x0e\xb5\x959\xf1;E6\xb1\x10\xf2\xeb\xdd\t\'\xb4\x85\xa5at$\xbdr{\xc7E\x06\xa3\x18\f\xe4\xd8+\x8d]eRf\xad\xcd\xa0h{\x80\xc8\'n\xef\xa2Y\xa5\x82\xc4T\xbb\xe1]\x193\xf8\x98*\x81\x14X\xbatb\x12g\x907\xdc\x06lL\x8aU\x03\r\"\xacq\xa7k}\x1e\xab\xad\x17\xba\xf6W\xfe8\xfdg\xf0\x1f\xddq!\xaeE\xa0\x0e\x83\x1e\xd4\x12\xfb%\xf27N\xbb@_\xd0>\x03_\xd4\xa5\x90\x89\n\"\f\x9a\xbe\x84\x01\xb2U\xb5:\xcb\x05\x84\xe6\x05\xc1\xfd\xfc\xa1:\xddS\x9c\xb4\r@#L\xc0\v\xa9^\xa5\xc3\xbf%\xe6\x99_2P[\x96\x8aN\x1da\x9bo\xda`\xe6\v\xda\x85\xf0\xa0Y\xd1)\x15>\xbf\x8f\r\x9d\x9f\xc7JF\xe6\ad\xfd\xe8Ou\x01\xee5\xd2k\x80\xf5\xcec\x12\x0erS\xddo\x1c\xc8\x82\xa8\xbbO[*\x98\xa8x\xfe\x9f\xfdU\xe7\x8e\x02\xed1\xba1\xc1aP\xe9]\x9d\xfe\xca\x11\x0ev6\x87\x12\xf9\x92\x98\xa4\xc2\xbdc)\xb2?\x93\x13\x16\x88]\x06A\xe8\x18\x80\xde\x99 \xfa\x9d\x1fh\xafO\x80\a\x13\xf55\x1f') ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/34) 07:01:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1ff, 0x200481) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000140)=""/91) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8000400) fstat(r2, &(0x7f0000000000)) ioctl$KVM_GET_PIT(r2, 0xc048ae65, 0x0) 07:01:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f00000000c0)=0x20000000000002, 0x4) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) sendmmsg$inet6(r0, &(0x7f0000009680)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x0) 07:01:50 executing program 1: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="e8", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x2000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x6, 0x3, 0x4, 0x0, {r3, r4/1000+10000}, {0xdb198fb72cf23ac4, 0x8, 0x100, 0xeb, 0x3f, 0x2, "41a41d5a"}, 0xe2a5, 0x2, @offset=0x2c92, 0x4}) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x12}}, 0x20) r5 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r5, 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280), 0x0, r5) 07:01:50 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100, 0x40000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/72}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0xf1d4f6bf57893458, 0x0}, 0x10) 07:01:50 executing program 2: mremap(&(0x7f00000d8000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x40000) dup3(r0, r0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x10000, 0x4, 0x0, 0x3, 0x7, 0x2, 0x5, 0x44b42213, 0x8001, 0x2, 0x7fff, 0x8001, 0x3, 0x20, 0x11, 0x18}}) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0xa) 07:01:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x8, 0x4000000000000001, 0x0, "80e28681ba41ef528ee5c7e82339ed17dc1bca32434ea575d5a14978a0c16400"}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10040, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x4, {0x80000000}}, 0x18) 07:01:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x800001f) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x0, 0x2}) 07:01:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001], 0x0, 0x200}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x2, 0x1, @thr={&(0x7f0000000380)="1fc255d99257f1984b18f5243e5759895761317b4ff4b8efa084f54255dfdaa950ca0b99c344bffb19a2555e70b2ce5dc0e8c8d60dad93d47b0c77fd3010e7b79ed399e1062be1dc3c07c47f157a754323d90622a283331b971593ad3ee5ad9b6d036e2ee652aaaa43cdf555997427c074122e21c0e99b2c6469bb9409062b7690097a6e5c4ee07032acc75acaa842aa3c20dfe8d29a12eb14e00358c2118fc7214c213930896cfd16bb8762eb536780a9edf685e51286e68703843062795bf31eb604951d58eed81c91145079b5b05a02e0d3d65344ca777c6458b0af95bfd32462d13c704c718a3aa17e3673ed360787326b686935773b29a006d611bbbd89992ec8badcf818d58dfc3138b614be07d403205c275ad175048cb30f7b23cb95335bb70e8f5e164a88834f0bbe529d4166a6ce959495cb7cbd090918faa7997bc6253e75583f525c293962153cb6e5e432f304920c73fbd1c43d53ae4a4804e2e7e978697f0b67727104db8ff6cc72550b766e04493d7cf53a2e235f951b9700a295587c811fc87261d011953a5de5cbb416f7dd996e33ff89b2e58b8d4b3e050a28287300e4091a53d24c40040527eb331fbe12bee58bd0bcedd96f125fc35028fa393231230396efad2b7e1f98cd9fa0277c3fededf8c3f88738abf2f0028b80040d088a7f71b11d2c1a62c87956f7a51e294b7b837c26dc947800ceba3ac52cc0e9e58cdf530b83badd7832162ad13a07205ce30536ac817a9feb6ced2b119ae44cc120c2b0fe40c0e370d8146ccf442fecb73abe3611da369934eb2e375f9b37d5ff6183af82ce359f60ef20114496038133994d2db75b9d92f084ff4904a787cd97eafd0c46eaba619205a4d15c431865c75e37fa07f76747316ed176c32016103149083895978f8d9412647957e86b6c662915f4437fd9cd41a52214849e4ef8fd097a4a6f074d31fa05028e62df114bcaf73300a02fe67f8a25b1a095eea14ea5646890cf9eb14372e3391f3762571bfa1bcd4f67ffab4135844b0f5da81b95d88dce5e2a6fbfe10254359b3fac5fede0a39d6a85922085dd7457417844c65759d5e88092e164f76454353be4b32346cff713c6db0e08ea40f18d0a48873e9d3db4d1de533d95ca19a11d482df26dbba005ea392d639870920697e89131166c5d03ac4870b3586d0c212236be9106a03e35d9bfd822d50bb01cada9aa735ebe5d2cb122bab48dd6480443071d08c8e4f4f1bc7311d39ec9dcb6d03904b7fa27f4267582838b467206840b12dc69efaca4c71485f69fa1a8883bacdf3f7d26e1c5a57b711d7de2ee0af78b064777a3e00471044c0fac5afc7c430ae4764b577acad65ea671a40a7576579807ac0c5da697e3e15dcbfec211d98e7a39c2cdbbd49d19e43fb13710417c926a16c474a0f82f47c0cde8dd544a6f4d923aa568d4d3edc4acb7bd57de6189e29c43749702d9163f60b83d80bbd309c4178664deec5577f2faa9b6883a860ad9bf2caa6f037e8a2bad94d6db7541bd0aa4a8c831ff75461f779c57597efb390c5c8f8daf5b62e8e07fd225052c593bc65be7637e7beb2d1e88e44392004e3dc7467ee3b194bba163635ea435547942362f54a102558904b7a2bbb3d1b60ea2f123a07e34a3b262b25c865cb9247a5e34bb6bae143eef0e287696542b3e0198a84df07643fe597b12d333cdbb0fd2720a418faece453bca027e4b37c90ded01201466288fb11fd802d0669dd9eb3ce447cd5c27c31c8ef0a01b77f55b8b56243d07d2222e3921fdb20d28bf8a0552e69ea7eeb5126c9e01aa9230d4350e4f5071dcf51ab6b39eca20c44ce7a4d769873b82323216e6a83e7fcf2f57eec32db742e44ee9bbfae670444261a961ca6f0b55e81cd4c505dc0c5989d70495bc7895f2a5e455281fdf19e38afd2e77de5b6f914dd4d35407b537d06112b389fc91ad7102409a86c44ae340e564f34b7c403fcad18f06224ed1707342b69b3aff6d1b5f7e5c460fbef58feff0cf1e4c42481439d9b4d195a000b50efacd3ab527309c806a7afdb4b47d24e7e74eb92936ee1e4551f764d5015c862c358ee75a9158d6b5115e9876b33a2c87768f1ed593eaa3d25a191d23b6a5454d8453f1e34bf2c0ef5aaac6166fc1550425111697031492d01d464f480fffc779232ba5a1780f4a72a4ee6658f3710f06f7a2dc2f328a925a56534171317e7429c736f0f2194dc120422f3e8fbd7d8c1fdc9b2d19009cbb327ca61ca58f97005584f399baa24602756bad9074bd3424cd2671b558e02cc6282d4a4c29fc0ca4c59b48550dd8673e0bd4c26cd62e1ef498899e926f5d0555c4f8661e87db3c3cddea9bec2ed28619fef67bfe09a1d9fd1d081891117bbc77bf08478e46850415068b47289d477c5571c867642df889e135e120d2670f62f7f867cef878a0e19cadcc2ae0ba7773b564c435a9f890a2c0e98adac33cd4d48f060ab361edffb8f1cf422961d4e335dbc672d84dc1d51958a2d4e10d155ea9267c5b08be04057de9cb9b793d54999cbcdfc193894ea28a129aadf0e6b574ea1a8b0252bdab93be738e512e6be91c33aba7c17ee2f2900980458f6410dc2efd958f7c69f25a1dad1da896d2f6b96f24dac3059ed556c68d4a0d7d447d9e0c89e4aa6421bffc13bfdeb7fdfba7c4a8309da21d470100c8c72d691182ec2c7760a2c13d06d8527e6c9dc4c8e08d569c15483913e121196e4c817f3f94fcb79ddddb021bcb4004e6ad3286f50cae4e8911af1da45d6fae269ee89f04b9bf07f9b60da2469cbb6ce2305a424795a9cef8bcd3f9380254bdc383228111c0755cfab73e87f4ca58f7ca0016029f2614c3a9ef330d6350c21fe28ea7e29e6176a41df86fb57b446eeec18a28536f0f963445fb2a91f658bc72822a65d01a55a27343b7e20ed625688baa28b74729954b780e4aa02bea9ac970e6c045e91e7003fed3c00605c0dfa19997d657059980485bceefedef3a4280611b73b242baad6afacd02f5f70955e6e5558e076d3822e5f5ae56fb8899ca79b36d22c5d659d92ad94f3a8af4f55eb9327e3cf0f4a00274057a3980e5f07b9696d00a8c7a5ff5fa8df35847c4e03086b1b16ea10572d94e9ffda05347afab40fe380b7a59f8aa658e7a4f39dc68f0876cbbca6383e759c6986e37c1e164b372e98ad6c8e3e1da0406d44e81cc5f578a2ffa00610c1cfeee47e314b63502f3d4f9d1c71d1e1b3137908021af3c54f1964724f895322ac6febd20726a381ce0716778a3c009734276a5973df3925fefd15d541ed731fbfa0f1ae7f91ca6437f1ef82d6b114222ecd11f4c9d50aadf4b87c828d78f87137f45e734af8678de0ea077b2f0782ce6a795a605f56b49f7f84785de053f4ebbf70103968ae1b68a93a389706729b45e1fd859e0c8e1fddb56760d71e1b11704c4c3470dfae24b72d750493cfe828059b0dfa2030fc8fd4ee2d6b444edb3234c56af6ab2cd1b4d62b6864d3ffb7b1e49ef775a29e14ab7696fa853bd17c27754a06e0dbe18f2562369f04f33e8347406d3863ef811f9ffe83d06f056289b90c46e30a11b1c8895ad8171f87c7b7fa1a119b58c25bf16d20143f7baa6034e122bc980c1a12f3f539ac4a0bde60c9799ece9cef7742d15b0d4d84c5397d2e5079f1c116f626b362c94b4ad95e076a0e9f2715709d2258010709b77e8f9436db16936af7b0f80abb3fba16a6a56d0ba2ee88a2462e0a36402bd4cfd6202da43e83b7ddbdba12f8762a2b46bc9b043d65aa35e6a44ba7998b8dcf31e4eb128af524aaa98e7a481f4cc98a5c75cceb6cbcf8708c3970713ffa22a1470e81f94041b00a10cad92f1ff033fcf43f127f6306dd0b6507d6ca7c425a2499bdbdc4769b4412fe526b0256ae382e222167683ed1b517e7abd48490ce7b5dc9c6f8b24ddd4777ad9017779f6e97a7ed3d6fbe2a2fb86befb23f963e169c5343222661d81f17aefb8b22c7907c67d414130c6205c46bd9057fa11db0ba74321305b8849907ff3b3823c2f360f7a6346c2d72a5fb5c6e2a322e5bee43795831ee4a7954183bde7e1b83a1e885b8303459548b0166288e3a1c72f9dbebcffa592e98f62ec02e4f5e64845d54adb81e22eb37505c2e4b72ab223731995c2e7517311c0e88775d154b279523dd71fdb37fbec4cb9c36ad13f1bc9e484f52bd3171f6df0335e3edf4fcceff8478d8cddb1cb8c23d898c0ebc2964811a3fd3af7fb875522f76745ec64d1bae7074d5e4fb946d20b4305fcc8d41a89c5ee92234639f8f093f8289af2e015c587b72a947fbf0526d96e0da43785561ddc10407645cc513217c4ae06ef513629adf115b0431f4c82721ee23ccae1f249e193763170352695ff478898b1e72b9e161303312f1134706344bcbe96527af17a4e2835f8b769371800c6f07a3412443e02467ae517f417602215e224d69d6ddef9345a5cc6fa003b4cfe298d526362695fdc1156c4454fcf9bf985eecec3debc72ebfbaf592f824b47ebca83d33b2285de4fc1569bfe09f23789706742acbc4b78bee79077afe3e5902775d308ee96d9652fa926758289c4c0ed8c2669732fd09bac8f492aae2d8efe1c80fc689e72ea412a5fdcab67510566cdc1e84bcf1674609f053b43d7948434f25846726c012d46e25ebbeb0154bf4ac3f721faa4adcc9ab7cdbf9330ee466d7229a4d89103afce1043b5140f425a0ef51bd6a6a1b39555b63b538dba285eba88977dfac618fa06fe59b353573d0c8235a4ea2f61e9e75f1febe70bada4fc88229135112c7b68f34511b0768b4032fba2c1763930363ea1e3af3f194a177e7da3065d148f4f995801fad89e082ac65ca945e61eaa5e73446a835578f4a1d7192c7878a150ff0df282655ff61b07adaafdb1ac27f620e06a16e545757fa59e33ba465849fbe7dad4d341ebd50cf793fbf2b05975cf1e3497222f4eb85e11ebb0c2d2810db1b8041b772d7278de233250e2d3abaf8b118b7f0311b150bd283a8cdb9e169ac521544c7f7b3d362f234d489ec497623c51862272b676da58f1881d88a346edea9cf45a27947e8b1f54c6de2e5deb3b20a3a7ad08073f3d6a323ac253e180a86089bae3b305f49960c66b64b6506c97838c068d294493ac43eb35341c2785fff5e8a112f49eabed3187120a2c59168b2e088ca86a8add01a9a204e1019113ac62de28535227ce8c9cbc3660ba6ee84f5e70e310897130ff3407724ff45a2c11bcc071767699948ae858e594d8c3cbf293ca4e35287a1dc92d3407749b78e6bf6b342327e4fbfc3a8ddfc8b316df1cf5b6d9e10e2f2f07e6d5484492257f02bcd7387d10a879f494082eade535b1a044eb6e2bef162786a1fb296b1d1b66a6e6d211f0db415aadaf59af5fc3fd43e0c2561199133410f2ed1914b475be72cc86f915b7b6cc992bf8641db175aaaf0dba1dba38a0ea70be2cb8ae52e25f2bc689ad0ae4d20de5b3a68e6f9807833b2d4fbfd5e959e8ee49cb2de5fa5ebdfdc2d899b1d3e9ece52f94000335f92c3e2229acc28358dfb332dbdb77f58533d132a78fded79ceb209fed4404b1f9fdd737b560f833de8ea5b489b4fa77bff83769af675977e2693dc4873d408aa8f3de898dfba41f90625da5422ee5e007250dd4f76efbbe9346d9f1a80a5f2fa93512b117f5a9d606d6241446520b5d6cba73f4ac455032e20908ce10119ca4edd70b9dac1b4b7de894fdf1e936df48d95eae53f044f861ae55761da2a8a8d469cfc78d9d07b27b06c086d02c55f8", &(0x7f0000000040)="558cdcaa30e66d541fe6"}}, &(0x7f0000000100)=0x0) timer_delete(r3) 07:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x0, 0x9, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000002c0)) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x2, 0x6, 0x2, "5bbe36fbf65acbe681aa357c0e4a01fb4726254503f09983e5359aa1f5f5e341"}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000440)=0xe8) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x1a00, {0x4, 0x4, 0x8}, 0x0, r4, r5, 0x8001, 0x5, 0xb25d, 0x1000, 0x1, 0x8, 0x9, 0x1, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff7, 0xffffffff00000000, 0x6, 0x80, 0xffffffffffff8f17}}, 0xa0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x8304b366a4d419be, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40011) timer_create(0x3, 0x0, &(0x7f0000000080)) r6 = syz_open_dev$vivid(&(0x7f0000000280)='/dev/video#\x00', 0x2, 0x2) accept$unix(r1, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000240)={0x0, 0x1fa3, 0x2, [], &(0x7f0000000200)=0x80000000}) bind$packet(r1, &(0x7f0000000680)={0x11, 0x19, r3, 0x1, 0xff, 0x6, @local}, 0x14) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285629, &(0x7f0000000640)={0x0, 0x10000, 0x80000001, [], &(0x7f0000000600)=0xfffffffffffffffb}) 07:01:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x6, 0x3, 0x81, 0x9}, 0x8) r1 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002f5ff8)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x1) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x445}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 07:01:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x7b, &(0x7f0000000080), 0x14) 07:01:51 executing program 2: socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x7, 0x80040) unshare(0x20400) select(0x40, &(0x7f0000001300), 0x0, &(0x7f0000001380)={0x3f}, &(0x7f00000013c0)={0x0, 0x2710}) r2 = gettid() fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x5, 0x3ff, 0x2, r2}) init_module(&(0x7f0000000040)='/dev/audio#\x00', 0xc, &(0x7f0000000080)='keyringbdev.eth1wlan1wlan1\x00') ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000100)) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) 07:01:51 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0xffffffffffffffda, 0x1, {{0x3, 0x0, 0xb5, 0x5, 0x3ff, 0x7, {0x1, 0x8, 0x4241efd3, 0x4, 0x2, 0x0, 0xf743, 0x7fffffff, 0x7, 0x7ff, 0x2d4, r1, r2, 0x8, 0xffffffffffffff7b}}, {0x0, 0x8}}}, 0xa0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xd507709a82e8e4d3) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000080)={0x80000000, "2d9923545ffe2a1fd446a062bf88868821bd9d732c0cc6a01daaec5e3f5230a2", 0x2, 0x1}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f00000000c0)={0x7d3, 0xd, 0x1e, "78de7f769cb6132f0d4ad7c940ef0d603c990200faa4291e24da9b4b0e41303a49bf14f51dfd292da5b0b103886b17dba2c3521c2960bc5339080218", 0x14, "c2f3822888d9411b74209c29a1e6bb932d892972404bd6af1c6fe1b686f9d22ada5f01bdc05d0c1dacfafa274b43b68b3f169d5c05bb47293f352527", 0x58}) 07:01:51 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e0000001000010000000000002000100000000000000000200000080030005000000000002000000e0000001000000009f000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020900d8c400af01e487ba77edfdc902"], 0x10}}, 0x0) 07:01:51 executing program 1: pipe2$9p(&(0x7f0000000440), 0x800) unshare(0x8000000) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x2400, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x400000, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) setsockopt$inet_tcp_int(r3, 0x6, 0xe, &(0x7f00000001c0)=0x400, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x6, 0xfff, 0x2, 0x2, 0x80000001}, 0x14) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='syz0\x00', 0x0, r1) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0xf7a4, 0x20000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x3}}, 0x8, 0x7, 0x6, 0x4, 0xbd2a620ec6f07e07}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x6, 0x1, 0xeb0, 0x6, 0xffffffff, 0x0, 0x100000000, r7}, &(0x7f0000000180)=0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000200)={'rcsf\xb0\x14\x00\x00\x00\x00\b\x00', 0x5e}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x20000) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000300), 0x4) 07:01:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8200, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x301000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000010", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25030000002c00010008000b0073697000080004004e200000080004004e2000000800050003000000080002007300000008000400018000001c00010008000900530000000800050000000000080005000200000008000600060000002400020008000500010000000800040001000080080003000400000008000600070000003400020008000500ffff0000080002004e200000080005000700000008000700c0000000080007000000000008000e004e20000008000400970000000800040002000000140003000800010001000000080007004e200000"], 0xe8}, 0x1, 0x0, 0x0, 0x4004004}, 0x24000810) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) getsockopt$inet6_mreq(r0, 0x6, 0x11, 0x0, &(0x7f0000000140)) 07:01:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x11, 0x6, 0x3, 0x0, [{}, {[@multicast1]}]}, @ssrr={0x89, 0x5}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x7b9ab1aec637174b) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xtea)\x00'}, 0x58) 07:01:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000180)) setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000100)={0x77359400}, 0x10) 07:01:52 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f0000001680), 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x4001000000000014) 07:01:52 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f00000a9000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000007c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000480)=[@authinfo={0x18}], 0x18}, 0x40000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'ip6erspan0\x00', 0x2}, 0x18) 07:01:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3008000010000108400000000000000000000002", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a0088000000"], 0x30}}, 0x0) 07:01:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x989680}, 0x0) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/19, 0x254}], 0x384}, 0x40) sendto$inet6(r0, &(0x7f0000000080)="06", 0x1, 0x7d, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}}, 0x0) 07:01:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x60ffffffffff}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x80200, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000003c0)={0x40002000}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200400, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={r3, 0x1}, &(0x7f0000000300)=0x8) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080)) 07:01:52 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/qat_adf_ctl\x00', 0x600000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002840)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002980)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0xa4, r2, 0x9e4f93c7a3f82133, 0x7f, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2f0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x785c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x19b0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x14ba15b65b2ac34b}, 0x40000) syz_emit_ethernet(0x51d, &(0x7f0000000100)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 07:01:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xf}, [@ldst]}, &(0x7f0000003ff6)='OPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x23) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0xd26eeae37b0ef3dd) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0xa, @capture={0x1000, 0x1, {0x2, 0x401}, 0x5, 0x800}}) 07:01:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x2, @rand_addr="750ddced691e7b1515e9719fa7bb2971", 0x5}}}, 0x84) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r4 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x0, r4}) [ 284.309148][T13093] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:01:52 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x800000004}, 0x10) r1 = socket$tipc(0x1e, 0x7, 0x0) accept4(r1, &(0x7f0000000100)=@caif, &(0x7f0000000180)=0x80, 0xe0d4ed9b7b6a03fd) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2}, 0x35b) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = dup2(r1, r1) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000080)={0xc, 0x5, {0x52, 0x1000, 0x2, {0x1ff, 0x3}, {0x0, 0x3d47}, @rumble={0xd8f4, 0xffffffff}}, {0x56, 0x20, 0x7ff, {0x0, 0xff}, {0x0, 0x7f}, @ramp={0x2, 0x2, {0x80, 0xff, 0x6, 0x3c2}}}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x94, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e21, 0x0, @local}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0xf6, @empty, 0x9c5}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x3}]}, &(0x7f0000000300)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'ipddp0\x00', 0x1001}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={r4, 0xa9e}, 0x8) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@name, 0xfffffffffffffec6, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 07:01:52 executing program 0: socket(0x6, 0x0, 0x7) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffb, 0x400000) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) 07:01:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000), 0xfffffffffffffca0, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}}, 0x0) 07:01:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xbb) recvmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f00000000c0)=@ax25={{0x3, @default}, [@remote, @bcast, @default, @null, @null, @default, @remote, @rose]}, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 07:01:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080)=0x2, 0x4) sendto$inet(r0, 0x0, 0x2ec, 0x20000003, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000900)="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", 0x1000) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) write$binfmt_elf32(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c6500000000000000000000000000000000000000000000000082ffffff000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000dfffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c700"/847], 0xfffffd1c) [ 284.736738][T13116] ================================================================== [ 284.745045][T13116] BUG: KMSAN: uninit-value in kmem_cache_alloc_node+0x5d0/0xe70 [ 284.752696][T13116] CPU: 0 PID: 13116 Comm: syz-executor.1 Not tainted 5.3.0-rc6+ #18 [ 284.760673][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.770906][T13116] Call Trace: [ 284.774217][T13116] dump_stack+0x191/0x1f0 [ 284.778558][T13116] kmsan_report+0x162/0x2d0 [ 284.783073][T13116] __msan_warning+0x75/0xe0 [ 284.787586][T13116] kmem_cache_alloc_node+0x5d0/0xe70 [ 284.792966][T13116] ? kmsan_set_origin+0x26d/0x340 [ 284.797998][T13116] ? __alloc_skb+0x215/0xa10 [ 284.802618][T13116] __alloc_skb+0x215/0xa10 [ 284.807134][T13116] ? kmsan_get_metadata_or_null+0x208/0x290 [ 284.813053][T13116] __ip6_append_data+0x46ad/0x6060 [ 284.818193][T13116] ? kmsan_get_metadata_or_null+0x208/0x290 [ 284.824176][T13116] ip6_append_data+0x3c2/0x650 [ 284.828967][T13116] ? do_rawv6_getsockopt+0x4a0/0x4a0 [ 284.834267][T13116] ? do_rawv6_getsockopt+0x4a0/0x4a0 [ 284.839599][T13116] rawv6_sendmsg+0x232e/0x5b10 [ 284.845853][T13116] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 284.851957][T13116] ? __update_load_avg_se+0x108/0x1220 [ 284.857479][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 284.863492][T13116] ? udp_cmsg_send+0x5d0/0x5d0 [ 284.868253][T13116] ? compat_rawv6_ioctl+0x100/0x100 [ 284.873452][T13116] inet_sendmsg+0x2d8/0x2e0 [ 284.878159][T13116] ? inet_send_prepare+0x600/0x600 [ 284.883259][T13116] ___sys_sendmsg+0x12c4/0x1590 [ 284.888114][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 284.894103][T13116] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 284.900250][T13116] ? balance_callback+0x48/0x260 [ 284.905182][T13116] ? kmsan_internal_check_memory+0x27a/0x8d0 [ 284.911158][T13116] ? kmsan_get_metadata_or_null+0x208/0x290 [ 284.917579][T13116] ? __msan_get_context_state+0x9/0x20 [ 284.923026][T13116] ? rcu_all_qs+0x23/0x240 [ 284.927556][T13116] __sys_sendmmsg+0x53a/0xae0 [ 284.932242][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 284.938500][T13116] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 284.944645][T13116] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 284.950355][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 284.956333][T13116] __se_sys_sendmmsg+0xbd/0xe0 [ 284.961092][T13116] __x64_sys_sendmmsg+0x56/0x70 [ 284.965963][T13116] do_syscall_64+0xbc/0xf0 [ 284.970376][T13116] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 284.976271][T13116] RIP: 0033:0x459879 [ 284.980159][T13116] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.999750][T13116] RSP: 002b:00007fcf0a932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.008349][T13116] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 285.016308][T13116] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000003 [ 285.024278][T13116] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 285.032540][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf0a9336d4 [ 285.040684][T13116] R13: 00000000004c706e R14: 00000000004dc6e8 R15: 00000000ffffffff [ 285.048829][T13116] [ 285.051140][T13116] Uninit was stored to memory at: [ 285.056159][T13116] kmsan_internal_chain_origin+0xcc/0x150 [ 285.061951][T13116] __msan_chain_origin+0x6b/0xe0 [ 285.066974][T13116] ___slab_alloc+0x1dbc/0x1fb0 [ 285.071728][T13116] kmem_cache_alloc+0xade/0xd10 [ 285.076566][T13116] skb_clone+0x326/0x5d0 [ 285.080799][T13116] raw6_local_deliver+0xad1/0x1140 [ 285.085898][T13116] ip6_protocol_deliver_rcu+0x617/0x22f0 [ 285.091529][T13116] ip6_input+0x2af/0x340 [ 285.095757][T13116] ipv6_rcv+0x683/0x710 [ 285.100002][T13116] process_backlog+0x721/0x1410 [ 285.104839][T13116] net_rx_action+0x74b/0x1950 [ 285.109502][T13116] __do_softirq+0x4a1/0x83a [ 285.114012][T13116] do_softirq_own_stack+0x49/0x80 [ 285.119037][T13116] __local_bh_enable_ip+0x184/0x1d0 [ 285.124219][T13116] local_bh_enable+0x36/0x40 [ 285.128796][T13116] ip6_finish_output2+0x213f/0x2670 [ 285.133982][T13116] __ip6_finish_output+0x83d/0x8f0 [ 285.139076][T13116] ip6_finish_output+0x2db/0x420 [ 285.144102][T13116] ip6_output+0x5d3/0x720 [ 285.148523][T13116] ip6_local_out+0x164/0x1d0 [ 285.153186][T13116] ip6_push_pending_frames+0x215/0x4f0 [ 285.158634][T13116] rawv6_sendmsg+0x40da/0x5b10 [ 285.163390][T13116] inet_sendmsg+0x2d8/0x2e0 [ 285.167894][T13116] ___sys_sendmsg+0x12c4/0x1590 [ 285.172729][T13116] __sys_sendmmsg+0x53a/0xae0 [ 285.177392][T13116] __se_sys_sendmmsg+0xbd/0xe0 [ 285.182142][T13116] __x64_sys_sendmmsg+0x56/0x70 [ 285.186992][T13116] do_syscall_64+0xbc/0xf0 [ 285.191396][T13116] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 285.197267][T13116] [ 285.199590][T13116] Uninit was created at: [ 285.203822][T13116] kmsan_internal_poison_shadow+0x53/0xa0 [ 285.209702][T13116] kmsan_slab_free+0x8d/0x100 [ 285.214373][T13116] kmem_cache_free_bulk+0x3ad9/0x3f50 [ 285.219752][T13116] __kfree_skb_flush+0xb0/0x100 [ 285.224595][T13116] net_rx_action+0x1908/0x1950 [ 285.229348][T13116] __do_softirq+0x4a1/0x83a [ 285.233853][T13116] irq_exit+0x230/0x280 [ 285.237994][T13116] do_IRQ+0x20d/0x3a0 [ 285.242050][T13116] ret_from_intr+0x0/0x33 [ 285.246366][T13116] default_idle+0x53/0x90 [ 285.255900][T13116] arch_cpu_idle+0x25/0x30 [ 285.260477][T13116] do_idle+0x1d7/0x790 [ 285.264531][T13116] cpu_startup_entry+0x45/0x50 [ 285.269281][T13116] rest_init+0x1be/0x1f0 [ 285.273511][T13116] arch_call_rest_init+0x13/0x15 [ 285.278448][T13116] start_kernel+0x991/0xb61 [ 285.282951][T13116] x86_64_start_reservations+0x18/0x2e [ 285.288397][T13116] x86_64_start_kernel+0x81/0x84 [ 285.293331][T13116] secondary_startup_64+0xa4/0xb0 [ 285.298333][T13116] ================================================================== [ 285.306389][T13116] Disabling lock debugging due to kernel taint [ 285.312526][T13116] Kernel panic - not syncing: panic_on_warn set ... [ 285.319109][T13116] CPU: 0 PID: 13116 Comm: syz-executor.1 Tainted: G B 5.3.0-rc6+ #18 [ 285.328550][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.338597][T13116] Call Trace: [ 285.341892][T13116] dump_stack+0x191/0x1f0 [ 285.346249][T13116] panic+0x3c9/0xc1e [ 285.350159][T13116] kmsan_report+0x2ca/0x2d0 [ 285.354676][T13116] __msan_warning+0x75/0xe0 [ 285.359174][T13116] kmem_cache_alloc_node+0x5d0/0xe70 [ 285.364451][T13116] ? kmsan_set_origin+0x26d/0x340 [ 285.369485][T13116] ? __alloc_skb+0x215/0xa10 [ 285.374079][T13116] __alloc_skb+0x215/0xa10 [ 285.378497][T13116] ? kmsan_get_metadata_or_null+0x208/0x290 [ 285.384393][T13116] __ip6_append_data+0x46ad/0x6060 [ 285.389525][T13116] ? kmsan_get_metadata_or_null+0x208/0x290 [ 285.395442][T13116] ip6_append_data+0x3c2/0x650 [ 285.400195][T13116] ? do_rawv6_getsockopt+0x4a0/0x4a0 [ 285.405469][T13116] ? do_rawv6_getsockopt+0x4a0/0x4a0 [ 285.410773][T13116] rawv6_sendmsg+0x232e/0x5b10 [ 285.415531][T13116] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 285.421594][T13116] ? __update_load_avg_se+0x108/0x1220 [ 285.427076][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 285.433059][T13116] ? udp_cmsg_send+0x5d0/0x5d0 [ 285.437813][T13116] ? compat_rawv6_ioctl+0x100/0x100 [ 285.443102][T13116] inet_sendmsg+0x2d8/0x2e0 [ 285.447620][T13116] ? inet_send_prepare+0x600/0x600 [ 285.452731][T13116] ___sys_sendmsg+0x12c4/0x1590 [ 285.457597][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 285.463584][T13116] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 285.469651][T13116] ? balance_callback+0x48/0x260 [ 285.475044][T13116] ? kmsan_internal_check_memory+0x27a/0x8d0 [ 285.481018][T13116] ? kmsan_get_metadata_or_null+0x208/0x290 [ 285.486994][T13116] ? __msan_get_context_state+0x9/0x20 [ 285.492439][T13116] ? rcu_all_qs+0x23/0x240 [ 285.496877][T13116] __sys_sendmmsg+0x53a/0xae0 [ 285.501595][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 285.507576][T13116] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 285.513633][T13116] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 285.519349][T13116] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 285.525427][T13116] __se_sys_sendmmsg+0xbd/0xe0 [ 285.530188][T13116] __x64_sys_sendmmsg+0x56/0x70 [ 285.535054][T13116] do_syscall_64+0xbc/0xf0 [ 285.539463][T13116] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 285.545348][T13116] RIP: 0033:0x459879 [ 285.549235][T13116] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.568827][T13116] RSP: 002b:00007fcf0a932c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.577228][T13116] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459879 [ 285.585187][T13116] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000003 [ 285.593142][T13116] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 285.601199][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf0a9336d4 [ 285.609169][T13116] R13: 00000000004c706e R14: 00000000004dc6e8 R15: 00000000ffffffff [ 285.618737][T13116] Kernel Offset: disabled [ 285.623091][T13116] Rebooting in 86400 seconds..