[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.699301][ T33] audit: type=1800 audit(1576066209.745:25): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 85.722015][ T33] audit: type=1800 audit(1576066209.775:26): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 85.764682][ T33] audit: type=1800 audit(1576066209.795:27): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. 2019/12/11 12:10:24 fuzzer started 2019/12/11 12:10:29 dialing manager at 10.128.0.26:42787 2019/12/11 12:10:29 syscalls: 2514 2019/12/11 12:10:29 code coverage: enabled 2019/12/11 12:10:29 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/12/11 12:10:29 extra coverage: enabled 2019/12/11 12:10:29 setuid sandbox: enabled 2019/12/11 12:10:29 namespace sandbox: enabled 2019/12/11 12:10:29 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/11 12:10:29 fault injection: enabled 2019/12/11 12:10:29 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/11 12:10:29 net packet injection: enabled 2019/12/11 12:10:29 net device setup: enabled 2019/12/11 12:10:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/11 12:10:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 12:13:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000100)=0x5e7, 0x32c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000380)=""/8, &(0x7f0000000040)=0x8) syzkaller login: [ 269.320024][T12662] IPVS: ftp: loaded support on port[0] = 21 [ 269.467004][T12662] chnl_net:caif_netlink_parms(): no params data found [ 269.522578][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.529754][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.538384][T12662] device bridge_slave_0 entered promiscuous mode [ 269.548174][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.555476][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.564147][T12662] device bridge_slave_1 entered promiscuous mode [ 269.606882][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.619778][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.652873][T12662] team0: Port device team_slave_0 added [ 269.662465][T12662] team0: Port device team_slave_1 added [ 269.916750][T12662] device hsr_slave_0 entered promiscuous mode [ 270.032545][T12662] device hsr_slave_1 entered promiscuous mode [ 270.344130][T12662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.387929][T12662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.531610][T12662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.678237][T12662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.027469][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.048172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.056761][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.071857][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.106223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.115520][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.124443][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.131583][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.140117][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.149407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.159172][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.166362][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.174778][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.184563][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.195895][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.212981][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.222639][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.231385][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.240525][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.263026][T12662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.273501][T12662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.294212][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.303066][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.312201][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.320919][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.330084][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.361490][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.382342][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.390250][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.397900][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 12:13:15 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r1 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffc}, 0x0, 0x8) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa000249c) fcntl$notify(r0, 0xa, 0x4) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6b) dup2(r4, r3) 12:13:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x18, 0x2, [@tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 12:13:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000340)={0x0, 0x0, "e5486e98d27729dd88942ac2b278fd17d1354eab41c25fef"}) 12:13:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x2, 0x2000000400}}) [ 272.243885][T12677] IPVS: ftp: loaded support on port[0] = 21 12:13:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="016f00", @ANYBLOB="100000000000fbdbdf2505000000100001006e657464657673696d000000100002006e657464"], 0x2}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 272.403891][T12677] chnl_net:caif_netlink_parms(): no params data found [ 272.460229][T12684] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 272.518253][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.525495][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.534069][T12677] device bridge_slave_0 entered promiscuous mode [ 272.551338][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.558632][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.567306][T12677] device bridge_slave_1 entered promiscuous mode 12:13:16 executing program 0: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x200000) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x1c, 0xc, 0x90, &(0x7f0000000b80)}) write$apparmor_exec(r0, &(0x7f0000000880)={'\\C\x1b(0\x0e\x06C\xc3MY\x1d\x9b8d\xc3\x16\xb1\x9bV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00]LD\xef\xf1Jg\xb9a\xe7\xe2k\xc6\x11\x8d>\x80\x9f\xddZ\xb3\xe5\xc8\x04s\xe6E\xfbQ\x0f\x82\x13\xdfP\xcc\xb3\xba\"\x18}\x04GxG\xeeN\xac\xc05`'}, 0x2c1) [ 272.638882][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.651894][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.685086][T12677] team0: Port device team_slave_0 added [ 272.694377][T12677] team0: Port device team_slave_1 added [ 272.802043][T12677] device hsr_slave_0 entered promiscuous mode [ 272.843711][T12677] device hsr_slave_1 entered promiscuous mode [ 272.912101][T12677] debugfs: Directory 'hsr0' with parent '/' already present! 12:13:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/full\x00', 0x200, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000bc0)={r4, 0x1f}, &(0x7f0000000c00)=0x8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='nr0\x01\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='/dev/net/tun\x00', &(0x7f0000000140)='nr0\x01\x00', &(0x7f0000000180)='systemsecurity+.\x00', &(0x7f00000001c0)='/dev/net/tun\x00', &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&', &(0x7f0000000200)='/dev/net/tun\x00', &(0x7f0000000240)=':mime_typeposix_acl_access\x00'], &(0x7f0000000b40)=[&(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&', &(0x7f0000000880)='trusted$security\x00', &(0x7f00000008c0)='nr0\x01\x00', &(0x7f0000000900)='/dev/net/tun\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&']) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket(0x4, 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt(r6, 0x800000010f, 0x80, &(0x7f00004ad000), &(0x7f0000000080)=0xfffffffffffffcbe) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') [ 273.024224][T12677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.053463][T12677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.148098][T12677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.243082][T12677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.372483][T12695] device nr0 entered promiscuous mode [ 273.481916][T12696] device nr0 entered promiscuous mode [ 273.637754][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.658370][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.667171][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.698307][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.724859][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.734638][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 12:13:17 executing program 0: ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000000c0)={0x4, 0x0, [{0x0, 0x0, 0x2}, {}, {}, {0xfffffffffffffeff}]}) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000140)=""/241, &(0x7f0000000240)=0xf1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xfffffffffffffe76}], 0x492492492492805, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x5, 0x7, 0x6, 0x3d8}, 0x10) ioctl(r0, 0xffffffffffffffaa, &(0x7f00000000c0)) [ 273.744172][ T558] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.751287][ T558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.802865][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.811509][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.820928][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.829912][ T558] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.837100][ T558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.847277][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.865247][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.885050][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.895254][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:13:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x30a, @time={0x0, 0x1c9c380}, 0xb9, {0x44, 0x81}, 0x5, 0x2, 0x6}) io_setup(0x4, &(0x7f00000004c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x800, 0x80000) fcntl$dupfd(r5, 0x0, r5) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f0000000280)={0x7f, 0x0, 0x2013, 0x2, 0x1f, {0x5, 0x1}, 0x3}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0xc2, 0x40, 0x5, 0x9, 0x0, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfada, 0x1, @perf_config_ext={0x100000000, 0x3ff}, 0x4002, 0x3, 0x2, 0x8, 0x2, 0x7, 0x1}, 0x0, 0xb, r1, 0xfbf225ecd6676402) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 273.919681][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.928750][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.938580][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.948127][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.000347][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.017161][T12677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.029450][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.042656][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.043719][ C1] hrtimer: interrupt took 33353 ns [ 274.051642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.143672][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.418675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.426574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 12:13:18 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4b, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x7f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup2(r1, r1) ioctl$KDSIGACCEPT(r2, 0x4b4b, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000016c0)={0x80000000}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') openat$cgroup_int(r3, 0x0, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDSIGACCEPT(r4, 0x4b4b, 0x0) [ 274.718511][ C0] sd 0:0:1:0: [sg0] tag#7454 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 274.729140][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB: Test Unit Ready [ 274.735795][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.745536][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.754078][ C1] sd 0:0:1:0: [sg0] tag#7455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 274.755290][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.765760][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB: Test Unit Ready [ 274.775396][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.781918][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.791509][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.801219][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.810896][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.820608][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.830224][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.840026][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.849644][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.859302][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.868992][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.878723][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.888335][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.897977][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.907587][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.917230][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.926835][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.936594][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.946374][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.956020][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.965630][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.975273][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.984907][ C0] sd 0:0:1:0: [sg0] tag#7454 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.994605][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.012869][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.022582][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.032319][ C1] sd 0:0:1:0: [sg0] tag#7455 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 12:13:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="140000000000000000000000010018000000000000000000000007000000070804e000000200"], 0x30}}], 0x24, 0x0) 12:13:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup(0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x170, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xac, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x100}, 0x4000000) r3 = socket(0x11, 0xa, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x18, 0x21, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3800000000000000]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[@hopopts], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 12:13:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000024000705000000000000543708000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r5, @ANYBLOB="00000002000000000300000058000100627066005000208195b5363d1f3bc445b4a79a5be60200080004000000000004000500400002003c00010000000000020000200000000000000084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000024000705000000000000543708000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c000107000000000018fd0000000000", @ANYRES32=r9, @ANYBLOB="00000002000000000300000058000100627066005000208195b5363d1f3bc445b4a79a5be60200080004000000000004000500400002003c00010000000000020000200000000000000084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000024000705000000000000543708000000", @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r13, @ANYBLOB="00000002000000000300000058000100627066005000208195b5363d1f3bc445b4a79a5be60200080004000000000004000500400002003c00010000000000020000200000000000000084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', r13}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r16 = syz_open_procfs(r15, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r16, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'team_slav\t\x00\x00\x00\x00\x0e\xc2', r14}) r18 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r18, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) getsockopt$ARPT_SO_GET_ENTRIES(r18, 0x0, 0x61, &(0x7f0000001200)={'filter\x00', 0xad, "5c9536b070895ee70dcaeb25feafb63b2f0f691faecaab7b21dc983d4b983aa0577f40c7f963c5b472d704d2214e034e3e50b0e0d850a2ad1d2a032bbd85256d128a2f52e3153be492982b82b93add04eb5ed12f16170f187db6a6d3f2a0f0a328d45c38aede419ea549ae9a3d70646288f7ec13850142817655666d248f6ef1738b6df5016e0836277859d4efc508a690d721bdea73eacdf357900a66915803f98de2fd8228e6e3d20f51aeca"}, &(0x7f0000000080)=0xd1) ioctl$PIO_UNISCRNMAP(r18, 0x4b6a, &(0x7f0000000200)="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") r19 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r19, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r19, 0x84, 0x14, &(0x7f0000000000)=@int=0x800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x34}}, 0x0) [ 275.270254][T12724] dccp_invalid_packet: P.Data Offset(0) too small [ 275.372376][T12727] device veth6 entered promiscuous mode 12:13:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000400000084) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r6, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={r7, 0x1}, &(0x7f00000000c0)=0x8) 12:13:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xbf66e9deea55f573, &(0x7f0000000380)=""/124, &(0x7f0000000180)=0x7c) ioctl(r0, 0x6189, &(0x7f00000001c0)="0805d105590b") r1 = socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0xef34b920694be683}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='dummy0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a00000000002c510efb0575b550acbf6a84963280a52de7e61b5aabb259bbb5345299e1cd17f60ae6c00ac65c85b0245982bd2849a9d76136991ea66678ce1ac9f820ab469d3ec8b22008bb679e8e79513504e600"], 0x30}}, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) sendmsg$sock(r3, &(0x7f00000009c0)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000400)="d58854a87290d775d719efbe024263f92acd5f3eef9e3a7a06dcc073c56b4e4a3996ddb7dc0b8d0ca7de215742c511f9a01e37f0d10ecc4186bae57a3dc6817c9154428a993987e228b1f3289a73c98f1c72991428bd2a9107aa952213e4aca8662cdfcfa07981b4dfff6bb26754c8504effe30561a85e327369b678b80d5472938fce9df2b2db817821d0484603dcbe10aa2d623a039106ec8cb6184cbe51b29d2f2b891cdaa565cfb2c496af8abebb479991aee00dc6797f9e56e800e2a7976edd9fe6", 0xc4}, {&(0x7f0000000300)="7da84eae1949f203baa131fa81deb55e3253caeb8c9bec7e90486571a04a359c0d5945b1a9e0bb37f9b8c28140503d7c3085d55445020d8fa7cef04003830594b5", 0x41}, {&(0x7f0000000500)="3f1accfe0f0d0381bedff829ac38e63318e6d5c959fbcfe856c4a3f578584898e4ad6cba22b75b9d20b9c5e071356ee21ef3c8c5697572f82f70dba24f35775b5d5cd641341d68a6eb22720c115a3ea77de92b3a433fe5f5281dd73123699eee4f483dbc62113bf09da028cd8bdf47", 0x6f}, {&(0x7f0000000000)="036ae143dc6c09649d6d", 0xa}, {&(0x7f0000000580)="6fd557a4ad334562b09546c5611f0250599f27bf2cc1717b248e0287061de59459e79d8552fcf4bbadf6e127ef0743c179036ce6123cba6fe751903365d35a13a94f9896fd3ec2afd5fb532d25094bba747f4b6f2a823735d9099054304c227a526b8d6b1b2392e1", 0x68}, {&(0x7f0000000600)="fc4280e3d6d1af23ad891cce902b0aad14ccf7efae6d03abf02d04bb88464cc58e03d587535bbae20affb833195834a9be9f0aecf62dd122987c473ea648ef3283f0503354daae18259cd64fb0b4b6258c061dba8c937dd28f4e80503899498d2c431bc848c9e17bee9a17bc7111187bf9e7e32a4afdaabf4d2464109e23e5c7575138ff2a12b4ba9788f6f9eef2cda92e35756a009eb8b41bfd0a007bcc3e1831dff4a897e2ac9cd9213f8888ed4acecea88ad0f5", 0xb5}, {&(0x7f0000000140)="f14e48330b8f4c4b2d180ec87bb66ccc492d", 0x12}, {&(0x7f00000006c0)="8b4d7063dccf07af73e0583537613b9e7449f9ef66d93d108b625ced0891ce914cc7ad2eaf9e2a1c02bb83282e3b2c6497130c225b1cd8d9929e29de1db952be6a69875a611232a76d8039e269d1b6603e0b18738d4c9645976ee652879ce15b6ece1c060cac23366da4ace5c4a1ea2e9b37e908f0f2d4d783c9bea029c5adaf479325ce914995e5febb6a4f1f5498d1f004f4a2bc8bf20fd1968b62361d70913c1c4f22e27fb03887e3ad79fea81a3d30f011a5a520c95e63e47f89a62034f8f4e788bccfaa80980fc02074b94051960fac9289", 0xd4}, {&(0x7f00000007c0)="4d1e92807984737df9ab3d1abb80156c04f53f83dd0e3ea72e740fbcdadf03c97872621e4d348e2e2934ad247d5081adb6caffaa89ac3ef419712b763defbb177c9e7ee4c2177b3da8a7d9e767dd1841ace6e3060a214ef47e26938d0f4db1ee84bb297aafe99fb650f29a9a123f40b031c12f237cdb127400b44c907762a5d3acabd9674c1e23409db2cf3e7e47e85f3f943005e4904a4bb656c1fb4110586698b5b914d767fcd7c3372b8b1954136c26431134dac4bca6fa5cfc90674f742066942169f36ceee5c4dc9e19c199ac3a60127c87b966f2a6b6dd01ab52f869d30cf26a", 0xe3}, {&(0x7f0000000280)="31c27271daafb0af9217f630857dfcd1e4c77de8276b790c03fe5a4627e5bd4a08f0064d343899a75af777caf121cff9d5ab", 0x32}], 0xa, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0xffc}}], 0x18}, 0x8800) openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(r1, 0x9) socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket(0x1e, 0x80005, 0x0) [ 275.854256][T12736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.933776][T12736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.944129][T12736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.945518][T12738] dccp_invalid_packet: P.Data Offset(0) too small [ 275.975364][T12736] device bridge_slave_0 left promiscuous mode [ 275.986141][T12736] bridge0: port 1(bridge_slave_0) entered disabled state 12:13:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x175, 0x0) [ 276.067911][T12736] device bridge_slave_1 left promiscuous mode [ 276.078306][T12736] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.160814][T12736] bond0: (slave bond_slave_0): Releasing backup interface [ 276.544880][T12736] bond0: (slave bond_slave_1): Releasing backup interface [ 276.726020][T12736] team0: Port device team_slave_0 removed [ 276.845335][T12736] team0: Port device team_slave_1 removed [ 276.899469][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.912357][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.919983][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:13:21 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xbf66e9deea55f573, &(0x7f0000000380)=""/124, &(0x7f0000000180)=0x7c) ioctl(r0, 0x6189, &(0x7f00000001c0)="0805d105590b") r1 = socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0xef34b920694be683}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='dummy0\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a00000000002c510efb0575b550acbf6a84963280a52de7e61b5aabb259bbb5345299e1cd17f60ae6c00ac65c85b0245982bd2849a9d76136991ea66678ce1ac9f820ab469d3ec8b22008bb679e8e79513504e600"], 0x30}}, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) sendmsg$sock(r3, &(0x7f00000009c0)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000400)="d58854a87290d775d719efbe024263f92acd5f3eef9e3a7a06dcc073c56b4e4a3996ddb7dc0b8d0ca7de215742c511f9a01e37f0d10ecc4186bae57a3dc6817c9154428a993987e228b1f3289a73c98f1c72991428bd2a9107aa952213e4aca8662cdfcfa07981b4dfff6bb26754c8504effe30561a85e327369b678b80d5472938fce9df2b2db817821d0484603dcbe10aa2d623a039106ec8cb6184cbe51b29d2f2b891cdaa565cfb2c496af8abebb479991aee00dc6797f9e56e800e2a7976edd9fe6", 0xc4}, {&(0x7f0000000300)="7da84eae1949f203baa131fa81deb55e3253caeb8c9bec7e90486571a04a359c0d5945b1a9e0bb37f9b8c28140503d7c3085d55445020d8fa7cef04003830594b5", 0x41}, {&(0x7f0000000500)="3f1accfe0f0d0381bedff829ac38e63318e6d5c959fbcfe856c4a3f578584898e4ad6cba22b75b9d20b9c5e071356ee21ef3c8c5697572f82f70dba24f35775b5d5cd641341d68a6eb22720c115a3ea77de92b3a433fe5f5281dd73123699eee4f483dbc62113bf09da028cd8bdf47", 0x6f}, {&(0x7f0000000000)="036ae143dc6c09649d6d", 0xa}, {&(0x7f0000000580)="6fd557a4ad334562b09546c5611f0250599f27bf2cc1717b248e0287061de59459e79d8552fcf4bbadf6e127ef0743c179036ce6123cba6fe751903365d35a13a94f9896fd3ec2afd5fb532d25094bba747f4b6f2a823735d9099054304c227a526b8d6b1b2392e1", 0x68}, {&(0x7f0000000600)="fc4280e3d6d1af23ad891cce902b0aad14ccf7efae6d03abf02d04bb88464cc58e03d587535bbae20affb833195834a9be9f0aecf62dd122987c473ea648ef3283f0503354daae18259cd64fb0b4b6258c061dba8c937dd28f4e80503899498d2c431bc848c9e17bee9a17bc7111187bf9e7e32a4afdaabf4d2464109e23e5c7575138ff2a12b4ba9788f6f9eef2cda92e35756a009eb8b41bfd0a007bcc3e1831dff4a897e2ac9cd9213f8888ed4acecea88ad0f5", 0xb5}, {&(0x7f0000000140)="f14e48330b8f4c4b2d180ec87bb66ccc492d", 0x12}, {&(0x7f00000006c0)="8b4d7063dccf07af73e0583537613b9e7449f9ef66d93d108b625ced0891ce914cc7ad2eaf9e2a1c02bb83282e3b2c6497130c225b1cd8d9929e29de1db952be6a69875a611232a76d8039e269d1b6603e0b18738d4c9645976ee652879ce15b6ece1c060cac23366da4ace5c4a1ea2e9b37e908f0f2d4d783c9bea029c5adaf479325ce914995e5febb6a4f1f5498d1f004f4a2bc8bf20fd1968b62361d70913c1c4f22e27fb03887e3ad79fea81a3d30f011a5a520c95e63e47f89a62034f8f4e788bccfaa80980fc02074b94051960fac9289", 0xd4}, {&(0x7f00000007c0)="4d1e92807984737df9ab3d1abb80156c04f53f83dd0e3ea72e740fbcdadf03c97872621e4d348e2e2934ad247d5081adb6caffaa89ac3ef419712b763defbb177c9e7ee4c2177b3da8a7d9e767dd1841ace6e3060a214ef47e26938d0f4db1ee84bb297aafe99fb650f29a9a123f40b031c12f237cdb127400b44c907762a5d3acabd9674c1e23409db2cf3e7e47e85f3f943005e4904a4bb656c1fb4110586698b5b914d767fcd7c3372b8b1954136c26431134dac4bca6fa5cfc90674f742066942169f36ceee5c4dc9e19c199ac3a60127c87b966f2a6b6dd01ab52f869d30cf26a", 0xe3}, {&(0x7f0000000280)="31c27271daafb0af9217f630857dfcd1e4c77de8276b790c03fe5a4627e5bd4a08f0064d343899a75af777caf121cff9d5ab", 0x32}], 0xa, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x25, 0xffc}}], 0x18}, 0x8800) openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(r1, 0x9) socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket(0x1e, 0x80005, 0x0) 12:13:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x0, 0x1, 0xf, 0x0, 0x7, 0xc4, 0x40, 0x8, 0x4, 0x1, 0x3d}, {0x20a000, 0x3000, 0x8, 0x40, 0x0, 0x6, 0x1, 0x8, 0x81, 0x1, 0x0, 0x1f}, {0xd000, 0x2, 0x0, 0x2, 0x1f, 0x80, 0x8, 0x80, 0x4, 0x6, 0xdb, 0x2}, {0x0, 0x2, 0x8, 0x6, 0x6c, 0xff, 0xc0, 0x4, 0x0, 0x3f, 0x6, 0x20}, {0x5000, 0x4, 0xb, 0x8, 0x1f, 0xc0, 0x6, 0x1, 0x5, 0x5, 0x8, 0x1}, {0x1000, 0x5000, 0x3, 0x2, 0x3, 0x4, 0x0, 0x81, 0x7, 0x81, 0xff, 0xa}, {0x4, 0x2ceed198c36a0145, 0x3, 0x1, 0x4, 0x7, 0x40, 0x4, 0x0, 0x8, 0xc3, 0x40}, {0x2dc6bf6aca825a4d, 0xdeeb9a3880aef323, 0x0, 0x2, 0x5, 0x1, 0x5c, 0x1, 0x2, 0x0, 0x7, 0x3}, {0x1000, 0x1}, {0x4000, 0xf000}, 0x50008, 0x0, 0x24613d700c39ea7a, 0x100, 0x2, 0x0, 0xf000, [0x2, 0xfffffffffffffff7, 0xffffffffffffffbd, 0x10001]}) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x300, 0x70bd2a, 0x25dfdbf4, {0x0, 0x0, 0x0, r1, 0x4}, [""]}, 0x1c}}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) write$P9_RLOPEN(r5, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0x29, 0x0, 0x8}, 0x4}}, 0x18) [ 277.176219][T12754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.247515][T12754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.257756][T12754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 12:13:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/166, 0xa6}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/30, 0x1e}, {&(0x7f0000001180)=""/222, 0xde}, {&(0x7f0000001280)=""/219, 0xdb}], 0x5}, 0x3}, {{&(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001480)=""/246, 0xf6}, {&(0x7f0000001580)=""/67, 0x43}, {&(0x7f0000001600)=""/156, 0x9c}], 0x3, &(0x7f0000001700)=""/12, 0xc}, 0x1000}], 0x2, 0x100, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000017c0)={0x3, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @loopback}}}, 0x108) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000001900), &(0x7f0000001940)=0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000001980)={0x1f, {{0x2, 0x4e22, @remote}}}, 0x88) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/qat_adf_ctl\x00', 0x101800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001a80)={0x8, 0x7, 0x4, 0x0, 0x3f, 0x5, 0x3, 0x778, 0x0}, &(0x7f0000001ac0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001b00)={r3, 0x8, 0x8, 0x6, 0x3}, &(0x7f0000001b40)=0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001b80), 0x4) write(r4, &(0x7f0000001bc0)="493172f8e3e469f71ff642c99114ddd74a278e2d171c1f0d8705973ee2", 0x1d) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001c00)={0x34, {{0x2, 0x4e21, @local}}}, 0x88) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/zero\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001d00)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f0000001d40)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/autofs\x00', 0x200000, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000001dc0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001e00)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001e40)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001e80)={r9, 0x0, 0x9}, 0x8) r11 = syz_open_dev$vcsn(&(0x7f0000001ec0)='/dev/vcs#\x00', 0x12a0000, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001f00)={0x0, 0x0, 0x10}, &(0x7f0000001f40)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r11, 0x84, 0x78, &(0x7f0000001f80)=r12, 0x4) ioctl$TIOCEXCL(r8, 0x540c) r13 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/vga_arbiter\x00', 0x40080, 0x0) write$UHID_DESTROY(r13, &(0x7f0000002000), 0x4) r14 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r14, 0x8916, &(0x7f0000002040)={'netpci0\x00', {0x2, 0x4e24, @rand_addr=0x5}}) r15 = syz_open_dev$mice(&(0x7f0000002080)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000020c0)=@assoc_value={r10, 0xa5a}, &(0x7f0000002100)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r15, 0x84, 0x76, &(0x7f0000002140)={r16, 0x7ff}, 0x8) 12:13:21 executing program 1: unshare(0x8040000) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd\x00\xf0\xff\x00', 0x9, 0x100) 12:13:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) membarrier(0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000240)=0x3) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) getpeername$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) epoll_create1(0x180000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x81) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000005, 0x0, 0x27) [ 277.646697][T12769] Unknown ioctl 1074291762 12:13:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000240)={0x371e686ded2df20c, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000001a0002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000ae00c76f4503775e3e073ab87e54d66704d26500000000"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffc37, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r6, @ANYBLOB="da101ebc5fe191d3"], 0x20}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000400)='net/ip6_tables_targets\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010001104000000000000000004000000", @ANYRES32=r6, @ANYBLOB="41680100000000008256b170815e8e0847156b0c165b0100000000000000f8319f7a3444210ce39108efcb27528d22bf7fcc8b2095f3ea55d23a7bf9a7b7b1750b9c77503e82905faff2bc92a84ddd5e1d963581"], 0x20}}, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)) [ 277.765461][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.807868][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.860426][T12769] Unknown ioctl 1074291762 [ 277.881040][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.911328][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:13:22 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x49}}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x2, 0xb, 0x0, 0x4}, 0x10}, 0x78) 12:13:22 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0x7501, 0x4, 0x8, 0x5, 0x200}, 0x14) socket(0x10, 0x3, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) eventfd2(0x1398, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000040)=0x81) r6 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfa, 0x25624342c29e57de) write(r6, &(0x7f0000000100)="2600000013003ff1eb14c1f8030322ff000900e313000000093903680000000005000300124b", 0xfffffffffffffe89) [ 278.056569][T12776] IPVS: ftp: loaded support on port[0] = 21 12:13:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) 12:13:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010000000000000000000020000000000", @ANYRES32=r4, @ANYBLOB="00000000000000002c001200100001006970366772657461700000001800020014000700fe0000000000000000000000000000bb"], 0x4c}}, 0x0) 12:13:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, r0) r2 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000f5ff0000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073797a5f74756e00000000000000000079615330000000000000000000000000b76f6e645f736c6176655f310000000073697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d69740000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000003830325f332300000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000b827d85034bb5ec6a300000200000000000000000000000000000000000000000000166d668100"/424]}, 0x220) finit_module(r1, &(0x7f00000000c0)='trusted.overlay.origin\x00', 0x5) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 12:13:22 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x13, 0xb1, 0x6, 0x4, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x20}}, 0x400000c0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000001c0)={0x1, 0x0, 0x3, @discrete={0x5, 0x3f}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'nlmon0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) write$capi20_data(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="100001008083040005000000000000008e00934b994e0b9eecd2c944719ff80afe113d43476842d0e62c872eb5d7fa9a508e8e9b9068dcd31f1ea34c12ccfff875770abff07faa8b997283bb7225f8e3b165587806173a70a5c4aa51f45eec0daa9ace4f969b8fa6c3bf7cc674851f8b9dcb42b2e42e0a2a3f0a82f1d578fa909891a2e9a775e1e02864db1d9817da2f68d0a6b8a3c9a6032e02feb59d247b56"], 0xa0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x600140ed}, 0x10) [ 278.347730][T12796] ebt_limit: overflow, try lower: 0/0 [ 278.378854][T12776] chnl_net:caif_netlink_parms(): no params data found 12:13:22 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r3, 0x1, 0x10, 0x0) semctl$GETVAL(r3, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090069000007a2e407edab0080582900000046008107a277001419000a000f000000006803f5000000000000ef38bf461e59d7", 0x243}], 0x1) [ 278.515645][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.522930][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.531515][T12776] device bridge_slave_0 entered promiscuous mode [ 278.556050][T12804] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 278.565319][T12804] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.577912][T12804] bond0: (slave hsr0): slave is up - this may be due to an out of date ifenslave [ 278.587985][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.595248][T12776] bridge0: port 2(bridge_slave_1) entered disabled state 12:13:22 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r3, 0x1, 0x10, 0x0) semctl$GETVAL(r3, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090069000007a2e407edab0080582900000046008107a277001419000a000f000000006803f5000000000000ef38bf461e59d7", 0x243}], 0x1) [ 278.603983][T12776] device bridge_slave_1 entered promiscuous mode [ 278.686522][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.704651][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.717171][T12809] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 278.725787][T12809] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.738231][T12809] bond0: (slave hsr0): slave is up - this may be due to an out of date ifenslave [ 278.776182][T12776] team0: Port device team_slave_0 added [ 278.785716][T12776] team0: Port device team_slave_1 added [ 278.886789][T12776] device hsr_slave_0 entered promiscuous mode [ 278.993769][T12776] device hsr_slave_1 entered promiscuous mode [ 279.112919][T12776] debugfs: Directory 'hsr0' with parent '/' already present! [ 279.183098][T12776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.308876][T12776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.438773][T12776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.638793][T12776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.792955][T12776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.816545][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.825953][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.844941][T12776] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.864773][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.874134][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.883963][ T558] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.891094][ T558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.904774][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.913647][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.922900][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.931811][ T558] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.938986][ T558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.954070][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.975534][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.002724][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.012614][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.022201][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.032408][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.045319][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.054163][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.063220][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.078388][T12776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.090073][T12776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.114884][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.124110][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.163894][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.171508][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.188547][T12776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.360565][T12814] QAT: Invalid ioctl [ 280.545189][T12815] QAT: Invalid ioctl 12:13:24 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) setns(r0, 0x1a000000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$KVM_S390_UCAS_UNMAP(r4, 0x4018ae51, &(0x7f0000000000)={0xfffffffffffffffd, 0x7fffffff, 0x9}) socket$inet(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 12:13:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/26) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x20}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map={0x18, 0x2, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x3, 0xb, 0x6, 0x2, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd716, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x6, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x2, 0x7, 0x10, 0x4}, @alu={0x4, 0x1, 0xd7a9de9b0bf3cec5, 0x3, 0x5, 0x80, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x81) 12:13:24 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r3, 0x1, 0x10, 0x0) semctl$GETVAL(r3, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090069000007a2e407edab0080582900000046008107a277001419000a000f000000006803f5000000000000ef38bf461e59d7", 0x243}], 0x1) [ 280.736446][T12819] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 280.745053][T12819] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.757436][T12819] bond0: (slave hsr0): slave is up - this may be due to an out of date ifenslave 12:13:24 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="30dd96866c8619c7522155d10efb2cc5b0a761c91083a81d8483c1db9a56744d590452367251d70f3ce7bbb664fe975a105cadf789618f7a51abddc6ad6564ac6f08b316b1de15f1c2bb3f58722383a5a9c68233a39fba38b43f871fb52eabc279cf67bd8dc1cbc964fece03ffd57b8a789640692dbbb17fbe53bce58c461d9fae317cbf87901aed080b695e19f766bb1413ae000000000000002d1e15875ad5b244082fac18c28973c5677ba706d48f019a6973cc21278c6533c792f292e952ccbd96e0a9c5117a4d9b85f2ac4c72deaf542c3369a34dce3775f849be4a77095980f6eeb79a1798d8ca6e383267790219917c635f6d3db5000000000000009e47d7c7f5ee98e29287cfb1f09d4bfe4a6936fb96770f51d161ca774752e97b4cbba0cc84176c009586bfbea7fb1e7b9a995c6a175a694a30a64feed3730151503404777bc6b1bcea4755ab8aacc81ead62ebf576d13445d09fa510033c5a4971b48f0907477ceeaf717d4d429c70191b65a8e35197524bd11c988eff77ad06896a01c497c10034e2", 0xffffff32}], 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x63, &(0x7f00000000c0)=0xfff, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x18) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "fc547f51492bfd32", "fa0d3d36314b4eb5b48eef964dce4767", "efcb07aa", "6467c27acf750265"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 12:13:24 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r3, 0x1, 0x10, 0x0) semctl$GETVAL(r3, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300090069000007a2e407edab0080582900000046008107a277001419000a000f000000006803f5000000000000ef38bf461e59d7", 0x243}], 0x1) 12:13:24 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x6}, 0x10) write(r0, &(0x7f0000000140)="240000004a005f0014f9f407000909000a00800000000000000000000800020000000000", 0x24) 12:13:25 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000400)="f506f2f8acfe58ddbfe414526d72819085f5c7e687789915666143f7ad258f918bae7b3d19c6cd0fe24791", 0x2b) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40140) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/145, 0x50}], 0x1, &(0x7f0000000280)=""/189, 0xbd}}], 0x47a, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) lsetxattr$security_evm(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.evm\x00', &(0x7f00000004c0)=@v2={0x1da97dab936e0b48, 0x1, 0x9, 0x80000001, 0x90, "acb94223d1dfe575f3c3dddfee9ded70ebab88624f9083fefa6e4a56d63f2883d3e3976aee670a73d800e6d3fd90b6bd23ab390631f48d4289bac15bf2193762f8fb2dd5c0fa8e538c97fbbef3fa4aef1ea61f8aaf65b89a1218cb588c4242150b0dfbdfdb4bbc6e93b015f9bb744016ace79c0311f6c9ecf7f5b9c7ffccf624cde19b1152d8dec3337b5a3c5e3f9730"}, 0x9a, 0x2) [ 281.013798][T12831] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 281.023058][T12831] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 281.035295][T12831] bond0: (slave hsr0): slave is up - this may be due to an out of date ifenslave 12:13:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r2, 0x1, 0x10, 0x0) semctl$GETVAL(r2, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 12:13:25 executing program 0: restart_syscall() perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0xedc0) 12:13:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r2, 0x1, 0x10, 0x0) semctl$GETVAL(r2, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) fcntl$dupfd(r1, 0x0, r1) 12:13:25 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000220007031dfffd946f61050d040000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000010000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 12:13:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) semctl$GETVAL(r1, 0x48cc4fc0d5762cf2, 0xc, &(0x7f00000000c0)=""/4096) [ 281.511749][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:13:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) 12:13:25 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) 12:13:25 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="4f3e41b5b0e62974f2a92bf4f669e99bf660401bd8b0e8141db87bb3662d38024e9e461419e30e92012917dd643aa5bf1aed71062bf296b3eb2e98301832f28fd16238e6c025294cf41bb1cd0940a34b4c4eb38ee3b0f1ee134ae0fad43f031d", 0x4d}, {&(0x7f0000000100)="cfb3edc4670f13f0d85e730d6be4cd0ddc71ec4a07b49664ba579bd7efb6a5e796c80d6137e0de05f16cf508ccd8074037448fc69c6a0a74eba95a66bc0fa2eded2640b6ec8b65838b88bbe6459f666a079dae270e3e9e8e", 0x435}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x81) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x7f) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 281.917622][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:13:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) 12:13:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x5, @vbi}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x2ab6, 0x0, 0x0, 0x0, 0x8000, {0x0, 0x3, 0xfff8, 0x401, 0x6, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0xd4, 0x6, 0x0, "ab3f17485f38f82e9c22fc5340000023112b00"}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0xc446d000a917e37d) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc004510e, &(0x7f0000000000)={{}, {0x0, 0x1000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) recvmmsg(r2, &(0x7f0000007700)=[{{&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/35, 0x23}, {&(0x7f0000000580)=""/216, 0xd8}, {&(0x7f0000000680)=""/222, 0xde}], 0x4, &(0x7f00000007c0)=""/255, 0xff}, 0x7}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/172, 0xac}, {&(0x7f0000007900)=""/211, 0xd3}], 0x2, &(0x7f0000000ac0)=""/72, 0x48}, 0x1787b637}, {{&(0x7f0000000b40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/149, 0x95}, {&(0x7f0000002c80)=""/133, 0x85}, {&(0x7f0000002d40)=""/9, 0x9}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/77, 0x4d}], 0x7}, 0x7}, {{&(0x7f0000003e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000003f00)=""/254, 0xfe}, {&(0x7f0000004000)=""/71, 0x47}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/159, 0x9f}, {&(0x7f0000005140)=""/107, 0x6b}, {&(0x7f00000051c0)=""/52, 0x34}, {&(0x7f0000005200)=""/61, 0x3d}, {&(0x7f0000005240)=""/170, 0xaa}], 0x8, &(0x7f0000005380)=""/131, 0x83}, 0x8ed}, {{0x0, 0x0, &(0x7f00000054c0), 0x0, &(0x7f0000005500)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000006500)=@ethernet={0x0, @local}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006580)=""/252, 0xfc}, {&(0x7f0000006680)=""/54, 0x36}], 0x2, &(0x7f0000006700)=""/4096, 0x1000}, 0xffffb6a9}], 0x6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000007880)={0x2, [0x0, 0x0]}, &(0x7f00000078c0)=0xc) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xa72, 0x220100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000340)={{0xff, 0x8}, {0x20, 0x7f}, 0x81, 0x2, 0x2}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc004510e, &(0x7f0000000000)={{}, {0x0, 0x1000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc004510e, &(0x7f0000000000)={{}, {0x0, 0x1000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r7 = eventfd2(0x2, 0x80000) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000300)={r6, 0x0, 0x0, r7}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00') close(r8) inotify_rm_watch(r8, 0x0) bind$isdn(r8, &(0x7f00000002c0)={0x22, 0x1, 0x4, 0x0, 0x5}, 0x6) gettid() prctl$PR_SET_FPEXC(0xc, 0x90040) read$dsp(r6, &(0x7f0000000980)=""/226, 0xe2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 12:13:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) [ 282.282247][T12874] IPVS: ftp: loaded support on port[0] = 21 12:13:26 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=""/124, &(0x7f0000000180)=0x7c) ioctl(r0, 0x6189, &(0x7f0000000100)="0805d10559c4bd98ed3a817d") r1 = socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x81}, 0xef34b9206949ce82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) syz_open_pts(r3, 0x200202) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000080000080001000000000008000a00000000005a04a08093fa6724fdb6c82f126bd6db0965a546610bb51aa78a3e0a1f63ef04caf81b89d13095e7e69660029a9de74e8b403451a3"], 0x30}}, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$vcsu(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(r1, 0x9) r5 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket(0x1e, 0x80005, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000240)={'team0\x00\x030\xff\xfd\x00%`\xc3\xff\xff', 0xb5}) close(r5) 12:13:26 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x402000, 0x80) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x8001, &(0x7f0000000080)=0x2) r1 = dup(0xffffffffffffffff) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x1e}, @dev={0xfe, 0x80, [], 0xa}, @remote, 0x4, 0x7fff, 0x100, 0x0, 0x1000, 0x80000000, r2}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r4 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xde88, 0x10040) getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_dev$vcsu(&(0x7f0000001280)='/dev/vcsu#\x00', 0xfc7a, 0x80020) write$P9_RRENAME(r5, &(0x7f00000012c0)={0x7, 0x15, 0x1}, 0x7) connect$tipc(0xffffffffffffffff, &(0x7f0000001300)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x3, 0x1}}, 0x10) r6 = msgget$private(0x0, 0x80) msgsnd(r6, &(0x7f0000001340)={0x0, "8f6371bf2277ee59c900f20f65ce0d635f50c7eb3478aad7a0861a3d8f6b07a1477fd29dbd49bddd230b0385137d1b87d8da912369592da765cddcb3f238b9c3903b4cdeed1f4584b9fe252a39cf92abc3869ee4c6d2697f62339814e1af6f10f59618e321a8208a9ba8b9125b3361f9c2ea3a5c15af0bc57b5d8b3680a1aaa0ee6287417b23c277fc88b5850dc09313f30e4c33b763d942a0eb5a8192bc0fae7b75096f4401e4c53417767a29"}, 0xb5, 0x800) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001400)=r0, 0x4) r7 = syz_open_dev$media(&(0x7f0000001440)='/dev/media#\x00', 0xffffffffffff3f87, 0x100) ioctl$KVM_GET_API_VERSION(r7, 0xae00, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/sequencer\x00', 0x8febf18c4880b855, 0x0) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f00000014c0)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000001640)) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCDELDLCI(r9, 0x8981, &(0x7f0000001680)={'bond_slave_0\x00', 0x3}) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002cc0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000002dc0)=0xe8) bind$can_raw(r10, &(0x7f0000002e00)={0x1d, r11}, 0x10) pipe(&(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r12, 0xab09, 0x37) ioctl$KDSKBMETA(r13, 0x4b63, &(0x7f0000002e80)=0x3) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000002ec0)={0x36, 0x6, 0x0, {0x3, 0x4, 0xd, 0x0, 'bond_slave_0\x00'}}, 0x36) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000003300)='/dev/null\x00', 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r14, 0x84, 0x7, &(0x7f0000003340), 0x4) 12:13:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:26 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:27 executing program 2: ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4c000010}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) dup3(0xffffffffffffffff, r0, 0x80000) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) 12:13:27 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) syz_open_dev$swradio(&(0x7f00000010c0)='/dev/swradio#\x00', 0x1, 0x2) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:27 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x2) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x40000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3807fd, @empty}, 0x1c) [ 283.122634][ T440] tipc: TX() has been purged, node left! 12:13:27 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000001100)=""/136) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:27 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x150) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) close(r1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0x3, 0x3f}, {0xff, 0x9}, 0xffff, 0x5, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00f0fffffffff2ffff000000fffe00", 0xfffffffd}, 0x1c) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)) open(&(0x7f0000000140)='./file0\x00', 0x1000, 0x18d) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(r4, r0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x15a) r5 = socket(0x1e, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x0) bind(r6, &(0x7f0000d80f80)=@generic={0x8, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind$tipc(r5, &(0x7f0000000040), 0x10) bind$tipc(r5, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind(0xffffffffffffffff, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000000000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000002c0), 0x4) times(&(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r6, 0xa) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000500)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa000, 0x0) unshare(0x60000000) 12:13:27 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100, 0x141184) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000100)=0x7ff) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1ff, 0x8000, 0x401, 0xfffffffd}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x7}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x7, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/544]}, 0x298) 12:13:27 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) [ 283.454249][T12910] IPVS: ftp: loaded support on port[0] = 21 12:13:27 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) [ 283.611203][T12920] IPVS: ftp: loaded support on port[0] = 21 12:13:27 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) [ 284.021457][T12920] chnl_net:caif_netlink_parms(): no params data found [ 284.112779][T12920] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.119987][T12920] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.128786][T12920] device bridge_slave_0 entered promiscuous mode [ 284.138745][T12920] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.146048][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.155054][T12920] device bridge_slave_1 entered promiscuous mode [ 284.190747][T12920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.204198][T12920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.239876][T12920] team0: Port device team_slave_0 added [ 284.249762][T12920] team0: Port device team_slave_1 added [ 284.385689][T12920] device hsr_slave_0 entered promiscuous mode [ 284.434021][T12920] device hsr_slave_1 entered promiscuous mode [ 284.592068][T12920] debugfs: Directory 'hsr0' with parent '/' already present! [ 284.649716][T12920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.733543][T12920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.832973][T12920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.070264][T12920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.166460][ T440] tipc: TX() has been purged, node left! [ 285.304646][T12920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.327683][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.336462][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.353197][T12920] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.373296][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.383173][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.392294][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.399468][T12750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.407983][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.417779][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.427116][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.434386][T12750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.455152][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.472161][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.481315][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.516709][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.527197][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.560890][T12920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.571815][T12920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.597772][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.607326][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.617254][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.626870][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.636137][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.645952][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.655229][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.699358][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.720351][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.728088][ T3977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.757055][T12920] 8021q: adding VLAN 0 to HW filter on device batadv0 12:13:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r3}], 0x1, &(0x7f0000000140)={r4, r5+30000000}, &(0x7f0000000180)={0x3f5f}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="b1", 0x1, 0x0, 0x0, 0x0) close(r0) 12:13:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000080)=0x75, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", "000100", "ffffffffffffffff"}, 0x38) sendmmsg$sock(r1, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000000c0)=0x1e) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/241, 0xf1}], 0x1, &(0x7f0000000200)=""/5, 0x5}, 0x10000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xf55, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 12:13:31 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x5, 0x7fff, 0x2, 0x8, 0x1b, 0x7f, 0x3, 0x0, 0x101, 0xfff, 0xe3, 0x20}) r1 = socket$isdn(0x22, 0x3, 0x3) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) splice(r1, &(0x7f0000000040)=0x7, r2, &(0x7f0000000100)=0x4, 0x2, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xff, 0x84800) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000001c0)) getsockopt$netlink(r1, 0x10e, 0x1f, &(0x7f0000000200)=""/78, &(0x7f0000000280)=0x4e) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f00000002c0)) r5 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0xb72455513fdfb257) faccessat(r5, &(0x7f0000000340)='./file0\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) r6 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x2, 0x200000) ioctl$DRM_IOCTL_RM_MAP(r6, 0x4028641b, &(0x7f0000000440)={&(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffff801, 0x0, 0x6, &(0x7f0000ffb000/0x2000)=nil, 0x4}) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000480)) syz_extract_tcp_res(&(0x7f00000004c0), 0xffffffff, 0x0) fchmod(r3, 0x20) socket$inet6(0xa, 0xa, 0xfd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x8000, 0x4000) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r7, 0x32ac4ad78bd54d25, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff4b41}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x0, 0x2, 0x10001, 0x2]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x64}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdeea533}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40042) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcs\x00', 0x6820c0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$tipc(r8, &(0x7f0000001c00)={&(0x7f0000000780)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000007c0)="51eeb04e9d18b050a24d53c38bdd4b79cf3ed404dc4c0d08589c36008021ebc35b0bb423c7256416fbb87c93f966bf2b536b8fce7089822fddab6603ede1ea243efb6d7666f6c1b7224f9193499d", 0x4e}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="9dbe0c72c73485e6ca210a7d54a518c44a2825f4b6c95277e5b2b1a0d7cd619f408021c89a50be7ec2cfd19e0050f8f13ab1d084b3ab300af917fc6851e1fb772abcef38f0d7460afc59b36bd6c4c865cd7f1ea0a332cee9f051f064d9e11aff6f6b23a2bb7c0daafdb145f6be8d9a30cad4651e74791e3c7dbbce2678dee60627239b6089016b64c732f42969b1da45087d59d7", 0x94}, {&(0x7f0000001900)="c617ff755e32cb97bb9421a21c4a74c9d47de4bbf62984e470d205817a0df38037a026d4013bd1e643913dacffb053085ebbefb768112fb4e5b531e6813ec4f959f9a8bb10c66bada61e84648d73e72ee0ad866444bf9afecb3768b5c06c1d260ed25ae2d9203ea8dd77c5f12e10fd7bb41a0320f7cada8b45dbe88192abf7a5ca39edb1888873242f1f73b1cc6a93c3ca93a5f1eadd89ca", 0x98}, {&(0x7f00000019c0)="0888f6b21f9991e261803f9bbdee8b20b07aa29a8e10e0c3491c0af7e6a49706e8167fe3221b67575425c3f80185ac490c812d3c95be1d02d73d84810c22aff9e312ca1825c8e6f59249e0da62b76317c204ec49e15c3c1a743971b35c8416539bc6384e111dde5fa8e208478e4d1936ca50b0fc8687f4907b4734e0d2e8f017f62ce3fe37421c0ed81f8a2c9f2cd340ce410b24e0ebe191e506f05793aa91ca5a5cc454df7003bd40c2a9f22713fc2ceaa13eb2fa1ed24c3ad08ce3a161a758c9a030413359cae02de5c3907f660bf27d7a91fca3024709b51c6a8807374ba263d4253c", 0xe4}], 0x5, &(0x7f0000001b40)="20b76183b66dbcdce8e9e79d25a900b42603a7d91259d24b6aeffe9d93ca22ce5b1809832e65b966da91b06ea96c5ed432b4ef9057629e71cf53422dd10ffafd4db967668c8462a479b04b05c9ec3c72d5a8cbdcbd4badd13dc24a7fb37b71cea3af0be5204da2d0c27d638897e798b894939ad8cb9d69339b75af1d54da733883c61b6d2a8640068c8c9d7e580e7691cb7ea6d0ad5bcd37d66e837ee676d9e5f455284edf425314b9b1a8", 0xab, 0x40040c1}, 0x20000000) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$PPPIOCSMRU(r9, 0x40047452, &(0x7f0000001c80)=0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000001cc0)={0x0, 0x9, 0x4, 0x0, 0x0, [], [], [], 0x7, 0x19}) r10 = creat(&(0x7f0000001e00)='./file0\x00', 0x8) ioctl$SNDCTL_DSP_RESET(r10, 0x5000, 0x0) 12:13:31 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 12:13:31 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) [ 287.452421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 287.458669][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:13:31 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 12:13:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="b700000001edffffbfa30000000000000703000028feffff620af0fff8ffffff71a4f0ff000000000f040000000000007e400300000000006504000001ed00002700000000ffffffcc44000000000000630a00fe000000003c00000000000000b7000000000000009500000000000000023bc001b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50becb19bc461e91a7168010000000000000050e436fe275daf51efd6e86ca5f8f3fdadafa0ef01b6bf01c8e8b1b5e4fef3bef7054809000000c095199fe3ff3128e599b0eaebbd0ee0b399c3952e43c38836dff67359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a610643a98d9ec21ead2e3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc7aa4d8e30fe021397466aaa7f6df74a61265d6e0252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756d679dff67b6cca26e71ed816a39bcbac72f53aae03b28fe7c6251006ea499df64928492068e4567cb1559293c55de75f98c28686470c095a8b8df9dbf3a755c0312f0cade306604f189865936c38fba27b36f00"/577], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x621, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2300}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000080", @ANYRES16=r3, @ANYBLOB="000029bd7000fbdbdf2502000000040005000800020002000000080001004e21000014000900fe880000000000000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) 12:13:31 executing program 1 (fault-call:1 fault-nth:0): semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403175dd106776d17c3298a76d699010000001379000025da3f00000000265657800000000000000000007613e987d2f81a76e5cb8b661cbb"], 0x5b) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8001, 0x9}, @mss={0x2, 0x2}, @mss={0x2, 0xfd}, @sack_perm, @window={0x3, 0x3, 0xc2a}, @timestamp], 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x8000) [ 287.966064][T12969] IPVS: ftp: loaded support on port[0] = 21 [ 287.975652][ C1] sd 0:0:1:0: [sg0] tag#7456 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 287.986205][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB: Test Unit Ready [ 287.992854][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.002588][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.012321][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.022098][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.031850][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.041534][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.051268][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12:13:32 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r0, 0x1, 0x10, 0x0) semget$private(0x0, 0x2, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) [ 288.061028][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.070877][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.080609][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.090365][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.100138][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12:13:32 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x3, 0x1, 0x8) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r3, 0xffffffff}, 0x8) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f00000001c0)={0x4, 0x20001000, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) getpgid(0xffffffffffffffff) r4 = open(0x0, 0x141042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x800000000024) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000180)={0x8, "0e9979dc17deddf25c79fee6836b8d57e9289f05a0fd1c1d7022572df7af1085", 0x1, 0x1}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="04000000e7b7c7eb16ca187a98cbeb3ad8b7dd18990c0200ff0700000900"], 0xc) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000240)=0xfff, 0x4) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x6}, 0x8) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000140)=0x4c20, 0x4) ftruncate(0xffffffffffffffff, 0x9) unshare(0x40000000) [ 288.109889][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.119635][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.129386][ C1] sd 0:0:1:0: [sg0] tag#7456 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.177907][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 288.177942][ T33] audit: type=1800 audit(1576066412.225:31): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 288.264669][ T33] audit: type=1800 audit(1576066412.305:32): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 [ 288.397736][T12980] IPVS: ftp: loaded support on port[0] = 21 12:13:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403175dd106776d17c3298a76d699010000001379000025da3f00000000265657800000000000000000007613e987d2f81a76e5cb8b661cbb"], 0x5b) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8001, 0x9}, @mss={0x2, 0x2}, @mss={0x2, 0xfd}, @sack_perm, @window={0x3, 0x3, 0xc2a}, @timestamp], 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x8000) 12:13:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403175dd106776d17c3298a76d699010000001379000025da3f00000000265657800000000000000000007613e987d2f81a76e5cb8b661cbb"], 0x5b) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8001, 0x9}, @mss={0x2, 0x2}, @mss={0x2, 0xfd}, @sack_perm, @window={0x3, 0x3, 0xc2a}, @timestamp], 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x8000) [ 288.574872][ C1] sd 0:0:1:0: [sg0] tag#7457 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 288.585476][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB: Test Unit Ready [ 288.592123][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.594451][ C0] sd 0:0:1:0: [sg0] tag#7458 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 288.601854][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.612354][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB: Test Unit Ready [ 288.622049][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.628444][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.638065][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.647712][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.657302][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.666898][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.676520][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.686116][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.695740][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.705341][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.714968][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.724579][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.734201][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.743934][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.753506][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.763109][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.772768][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.782333][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.791970][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.801535][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.811152][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.820751][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.830378][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.839994][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.849658][ C1] sd 0:0:1:0: [sg0] tag#7457 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 12:13:32 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000040)) [ 288.859276][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.877508][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.887295][ C0] sd 0:0:1:0: [sg0] tag#7458 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 288.908306][ T33] audit: type=1800 audit(1576066412.955:33): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 [ 289.038334][ T33] audit: type=1800 audit(1576066413.015:34): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 289.060232][T12969] chnl_net:caif_netlink_parms(): no params data found [ 289.232443][T12969] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.239655][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.248504][T12969] device bridge_slave_0 entered promiscuous mode [ 289.260503][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.267737][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.276553][T12969] device bridge_slave_1 entered promiscuous mode [ 289.310362][T12969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.323822][T12969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.356762][T12969] team0: Port device team_slave_0 added [ 289.366235][T12969] team0: Port device team_slave_1 added [ 289.469312][T12969] device hsr_slave_0 entered promiscuous mode [ 289.504451][T12969] device hsr_slave_1 entered promiscuous mode [ 289.563536][T12969] debugfs: Directory 'hsr0' with parent '/' already present! [ 289.646820][T12969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.900210][T12969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.136332][T12969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.365868][T12969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.785558][T12969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.829879][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 290.838946][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.855081][T12969] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.890522][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.900583][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.909825][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.917024][T12750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.979549][T12969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.990619][T12969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.007490][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.016434][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.025767][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.034725][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.041911][T12750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.050338][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.060243][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.070114][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.079828][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.089369][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.099052][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.108616][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.117712][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.127250][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.136493][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.155976][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.164918][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.191123][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.199139][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.219668][T12969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.446641][T13003] mmap: syz-executor.4 (13003) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 12:13:35 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mknod(&(0x7f0000000200)='./bus\x00', 0xff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000002c0)={0x7, 0x1c, 0x5a5, 0x0, 0x0, [], [], [], 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0'}, 0xb) write$P9_RREADDIR(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="64000000290200400000004102000000000000000000000007000000000000000605002e2f6275730001000000040000002100000001000000010000009507002e2f66696c6530080200000002000000000005002e2f627573"], 0x64) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 12:13:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403175dd106776d17c3298a76d699010000001379000025da3f00000000265657800000000000000000007613e987d2f81a76e5cb8b661cbb"], 0x5b) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x8001, 0x9}, @mss={0x2, 0x2}, @mss={0x2, 0xfd}, @sack_perm, @window={0x3, 0x3, 0xc2a}, @timestamp], 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[]}}, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x8000) 12:13:35 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x7, "897eb7d6318580de17a85b4c338a2c5cf535faac2c0f54be1e2c03827bb4f7f1", 0x20, 0x4000dcdc, 0x400, 0x1, 0x1}) socket$unix(0x1, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='ns\x00') ptrace$peek(0x3, r1, &(0x7f0000000100)) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) 12:13:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e20, 0x1, @mcast1, 0x7f}}, 0x7, 0x7fff, 0x1ff, 0x8}, &(0x7f00000000c0)=0x98) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x4080000100, 0x0, 0x0, 0x0) 12:13:35 executing program 0: gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f00000001c0)='\\&selinuxuser.\x00'}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000500)='projid_map\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x2b9) getsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/188, 0xbc}, &(0x7f00000000c0), 0x20}, 0x20) [ 291.647323][ C0] sd 0:0:1:0: [sg0] tag#7459 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 291.657966][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB: Test Unit Ready [ 291.664581][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.674308][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.685161][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.694926][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.704642][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.714362][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.724068][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.733782][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.743505][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.746742][ T33] audit: type=1400 audit(1576066415.795:35): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13014 comm="syz-executor.4" [ 291.753405][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.779274][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12:13:35 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000000)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) r1 = dup(r0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)) 12:13:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x80, 0xab, 0x2, 0x3f, 0x81, 0xfc}, 0x1}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [{}, {}, {}, {}]}]}}, @icmp=@timestamp_reply={0xffffff86, 0xa}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="8bfcbe0a1092424fa5eaa7841cfbfa02ddf4f2fa87ded6d900dfb38aaa4dc682a2d061de06cd83", 0x27, r1}, 0x68) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'vxcan1\x00', 0x1}) [ 291.788996][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.798711][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.808441][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.818155][ C0] sd 0:0:1:0: [sg0] tag#7459 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 291.895190][ T33] audit: type=1800 audit(1576066415.895:36): pid=13016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 12:13:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r5, 0x9}, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee", 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) [ 292.099449][ T33] audit: type=1400 audit(1576066416.145:37): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13014 comm="syz-executor.4" 12:13:36 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fffffff, 0x200) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000080)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 12:13:36 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000040)={0x1, {0x0, 0x989680}, 0x1, 0x9}) [ 292.393828][T13052] QAT: Invalid ioctl 12:13:36 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xee00) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='\x00\xdb\x8e\xf4\x00\x00\x00') getdents64(r1, &(0x7f0000000000)=""/188, 0xbc) getdents64(r1, &(0x7f0000000df0)=""/528, 0x7f355eb8) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x8, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e8bb600005404b0e0301a4ce875f2e3ff5f163ee340b767950080e0ffebce66fd792bbf0e5bf5ff1b081602e3db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xfffffffffffffc9e) r8 = fcntl$dupfd(r5, 0xc0a, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r9, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r9, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r10 = gettid() recvmmsg(r9, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) tkill(r10, 0x14) 12:13:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000e4", 0xfffffffffffffee7}], 0x1, 0x0, 0x0, 0x89) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x609, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000240)=0x0) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000280)=r6) 12:13:36 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004f357c10b54fe720992bf6ff00b0"], 0x1}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3aec}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x9, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540), r2, 0x1, 0x1, 0x3f00}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r2, 0xd}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x40, 0x10900) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x31}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 12:13:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) r3 = accept4$inet6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x40800) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000340)={0x0, 0x3f}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000440)={0x6, 0x7, 0x4, 0x2, 0x0, 0x0, 0x2, 0x100, r6}, &(0x7f0000000480)=0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000024000705000000000000543708000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRES32=r10, @ANYBLOB="00000002000000000300000058000100627066005000208195b5363d1f3bc445b4a79a5be60200080004000000000004000500400002003c00010000000000020000200000000000000084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x7c}}, 0x0) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_dellink={0x94, 0x11, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x2020, 0x100}, [@IFLA_PROTO_DOWN={0x8, 0x27, 0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_LINKINFO={0x3c, 0x12, @ip6gre={{0xc, 0x1, '\xef\xd8\xc9\x06\x00\x80\x9d'}, {0x2c, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr="ce6f0c61a32fcbc3a32062e4236df4a9"}]}}}, @IFLA_MTU={0x8, 0xe, 0x15}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_SWITCH_ID={0x14, 0x24, "78b920e2379d2115efd5082a95"}, @IFLA_NET_NS_FD={0x8, 0x1c, r11}]}, 0x94}}, 0x0) 12:13:36 executing program 1: r0 = semget(0x2, 0x1, 0x20) semtimedop(r0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) [ 292.715313][T13063] IPVS: ftp: loaded support on port[0] = 21 12:13:37 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0xffffffff, 0x6, 0x78c, 0x3}, 0xfffffffffffffce0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/55) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x1, 0x2000) semtimedop(0x0, 0x0, 0xffffffffffffffcf, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='ns\x00') r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000440)={0x0, 0x7, 0x6, [], &(0x7f0000000200)=0x2}) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x10) bind$rds(r1, &(0x7f0000000580)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r7, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @remote, @loopback}, &(0x7f0000000540)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x2440}, [@IFLA_MTU={0x8}, @IFLA_PORT_SELF={0x14d, 0x19, [@IFLA_PORT_REQUEST={0x8, 0x6, 0xfa}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b7b9ab30d94252500fb0bda277655464"}, @IFLA_PORT_PROFILE={0x8, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0af168814d9eacbc2c4468de81967661"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dd9c014e188c8afa5574deaa49b247e6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ad6f34612db0050c0693095347bf627a"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'bridge\x00'}]}, @IFLA_AF_SPEC={0x0, 0x1a, [{0x0, 0x1c}, {}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r10 = syz_open_procfs(r9, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000100)={r8, 0x80000001}, &(0x7f0000000140)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r13 = syz_open_procfs(r12, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r13, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) setsockopt$inet_tcp_int(r13, 0x6, 0x12, &(0x7f0000000240)=0x70, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000001c0)=r11, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r15 = syz_open_procfs(r14, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r15, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$EVIOCGABS0(r15, 0x80184540, &(0x7f0000000340)=""/235) 12:13:37 executing program 1: semtimedop(0x0, 0x0, 0x179, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:37 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xa2200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r5) bind$bt_rfcomm(r1, &(0x7f00000002c0)={0x1f, {0x3, 0x80, 0x75, 0x80, 0xff, 0xe5}, 0x4}, 0xa) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x80000, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb4f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x567}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xced5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff74ef}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7c4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0xdf5404f8995c99fa) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f0000000540)={0x0, 0x5, 0x9, 0x7, 0x2}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580)='/dev/bsg\x00', 0x2e000, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) ioctl$UI_GET_VERSION(r6, 0x8004552d, &(0x7f0000000640)) modify_ldt$write(0x1, &(0x7f0000000680)={0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000006c0)={r2, 0xd, "8f560e3bf1592b126b5b0f9912"}, &(0x7f0000000700)=0x15) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vcs\x00', 0x1000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000780)={0x0, 0x3}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000800)={r11, 0x0, 0x2, 0x80}, 0x10) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x80, 0x0) ioctl$VIDIOC_ENUMAUDIO(r12, 0xc0345641, &(0x7f0000000880)={0x101, "6d295aa41ed2162a867963390b64d9d46b6707b7d158eec0176f81a567ecdd5b", 0x6}) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer\x00', 0x501000, 0x0) write$P9_RSETATTR(r13, &(0x7f0000000900)={0x7, 0x1b, 0x2}, 0x7) r14 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r14, 0x1, 0x40, &(0x7f0000000940), &(0x7f0000000980)=0x4) r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vga_arbiter\x00', 0x20003, 0x0) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) 12:13:37 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x7bf94e8ce453dcc7, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/144) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:37 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="e5f51a0f01159dfda8a65698b953c8c7f3d81ab246cb61c1cf552426bbf93ff42abc2287b8b50a8755e098f8c591b21db2824b88a24be924db6559de984c621ab70f8251753f2ce678720e4eba4d7027261d1b3a1f802576a57bee7ba47d84cd27dca26dc11a365861d8c9574469971febaa95820ec7c9e0e023c57ddabd694eee00dc42f9ea8aa180ab0e368676996a9c9b991ad8eac1cddc1f984f4486fe621cfcd7ca806bc4b4ef727dc608fd1804046a423e7eb6586c15598da82fdbdfdbfe0fb594d215baf2a3ff60a972db4d2f97ae68785f0ada8ce881df76a457b40f8ac08f80d8bd448412527b4a70640ec984ae7309", 0xff99}], 0x227) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) recvmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/136, 0x88}, {&(0x7f00000007c0)=""/254, 0xfe}], 0x5, &(0x7f0000000940)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000019c0)=""/204, 0xcc}, {&(0x7f0000001ac0)=""/191, 0xbf}, {&(0x7f0000001b80)=""/116, 0x74}, {&(0x7f0000001c00)=""/114, 0x72}, {&(0x7f0000001c80)=""/132, 0x84}, {&(0x7f0000001d40)=""/116, 0x74}], 0x6, &(0x7f0000001e40)=""/75, 0x4b}, 0x10000}, {{&(0x7f0000001ec0)=@nfc_llcp, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f40)=""/105, 0x69}, {&(0x7f0000001fc0)=""/124, 0x7c}], 0x2, &(0x7f0000002080)=""/138, 0x8a}, 0xe2}], 0x3, 0x2002, &(0x7f0000002200)={0x77359400}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x3e5) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x2000, {0x42, 0x2, 0x6}, 0x0, r6, r7, 0x7, 0x8000, 0x9, 0x1f, 0x4, 0x9, 0x0, 0xfffffffffffffff9, 0x99, 0x5, 0x80, 0x0, 0xff, 0x9, 0x7}}, 0xa0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r3, r4, r7}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000400000084) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00bK\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={r11}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r11, 0x7f, 0xfff}, &(0x7f0000000280)=0xc) pwrite64(r8, &(0x7f00000002c0)="ec130b69da10218f47d8097adf879fefb9e8f9089c476375aee49c60bc04dd617f9f1ef40d2a9e233644c5e8df0c8df8a34ffd2d33f8887816c9f84f060d95bd6ef0b3fe3444a36fcab67ba4eb178492bdd52f15c859204c4e6682445e1c0e1414fcc9582cbf1d06488320f35d006a998c8bcbd465c8e980e5a514d2c04909e5ae943a7e92d5ee0414c958f753585968cba51b2576f3e6533c18a3f363738aebe7", 0xa1, 0xfffffffffffffffa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r8, 0x0) close(r0) [ 293.535855][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.542242][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 293.552634][T13086] IPVS: ftp: loaded support on port[0] = 21 [ 293.612253][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 293.618575][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 293.702294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.708627][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:13:37 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x3, 0x5a, &(0x7f0000000000)="ef9bccda4bd18e747edb9f556677a83396d4256a7121a5b57438c0002a74c1bf029e4ca9ba9cfe3d1b9273098edbf5efc68d9064b1e2c9922ecacfd8c4c08e110145ba38573791628b07fdc6aa124b0dc038d504f40c7ef5e5e0"}) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) [ 293.872203][ T243] tipc: TX() has been purged, node left! 12:13:38 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr, @empty}, @igmp={0x0, 0x0, 0x0, @dev}}}}}, 0x0) 12:13:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\a\x00'/20, @ANYRES32=r2, @ANYBLOB="ecff120000000000000000de"], 0x24}}, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 12:13:38 executing program 1: r0 = semget$private(0x0, 0x4, 0x30) semtimedop(r0, 0x0, 0xffffffffffffffc4, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:38 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x22a, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0xfffffffffffffde9}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="39c355dc6cd53a13696d7c61b9d18ca7035979551077e7060f4d3ef077a4505bffc484946997aa44abba1fdc1916d1e8f37ca52b2cfa4f7713a6f05c6c76800e775318c862", 0x45) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x28, &(0x7f00000000c0)}, 0x10) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 12:13:38 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x0, 0x0, 0x34565348}}) 12:13:38 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x0, 0x0) [ 294.427556][T13126] IPVS: ftp: loaded support on port[0] = 21 [ 294.747602][T13126] chnl_net:caif_netlink_parms(): no params data found 12:13:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000014c0)) 12:13:38 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0affefff7f000000001e6ea64aa8e1c9", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) [ 294.814167][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.821360][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.830341][T13126] device bridge_slave_0 entered promiscuous mode [ 294.841019][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.848338][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.857166][T13126] device bridge_slave_1 entered promiscuous mode [ 294.889099][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.934877][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.026197][T13126] team0: Port device team_slave_0 added [ 295.056870][T13126] team0: Port device team_slave_1 added [ 295.216559][T13126] device hsr_slave_0 entered promiscuous mode [ 295.233422][T13126] device hsr_slave_1 entered promiscuous mode [ 295.304232][T13126] debugfs: Directory 'hsr0' with parent '/' already present! [ 295.367732][T13126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.415585][T13126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.458068][T13126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.511888][T13126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.583117][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.590412][T13126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.598317][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.605555][T13126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.671994][ T243] tipc: TX() has been purged, node left! [ 295.695962][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.728713][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.736150][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.752374][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.782291][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.805755][T12750] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 295.852046][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.861291][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.870268][T12746] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.877462][T12746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.925386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.934834][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.943700][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.950876][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.959252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.969057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.978728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.988386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.997747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.007525][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.023597][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.032321][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.041110][T12746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.072174][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.081104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.098671][T13126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.141389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.149746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.175611][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 12:13:40 executing program 5: getresuid(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) 12:13:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x28, 0x6}, @IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x38}}, 0x0) 12:13:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="ddf81eb42049bcbcfd243ace3e26d7d786180788c9e3ad64e020b01963540cf3b454e83125414deb813c57d1bdacf1279115c6591c18c187436e8d6950662e8e94273a0cdcc712bf5e0840320ab37f536fa85843b71b5069de2b964fc6941569b5bfaec90876fb996b42"}, {&(0x7f00000000c0)="bd019d"}, {&(0x7f0000000100)="5d78490190ce9cd94f4c4240a25eb7a18eef3030490eb725e3a021eefbc88bc649a3d939e38d72a2eec0457721aefaf267db67d0a703fae3e48313f94ed931f67effbf4c413d47afe0e5b02ce51f471803d639caa5c0f68564db639d"}, {&(0x7f0000000240)="32990fafa0c40b5b5fb625fa114efe05e3b1f6e4425f71e76228fc027c831d3bd5270e4ddc6706a7840e09da9270338288d588005b17022650bf24be8e33f024c3e223c64ffd07985c9dc8f3527152199a931c213a56c2a0f9480b67b20b46c178464c8a48cd71cd12ab8137fc8668364a1fd8fb66e5ac08f496c148772276bf1f1d0e9c46268924d34a290d823f7f92610be4ca94358c0bb42c3f60d1afbb43cf81e14c876122441ecf8afe069d586105dc8303f99dc181ed0f3c4fc1334a20e97e2a1555083d4441d353b86763bd"}, {&(0x7f0000000180)="f747c1d35b61e6385bad17f104512d6668d363f2e2aaf56ab6953c5215ed8cbe56663ba7329aa52c180dc15f07f2445da3a327e76a84059ec17e28e14cca09ff825f9d8037dada10e917d1f6eea6641f52f39b16db62e7489d143274a44fe92ecf50abd1d9f281cb721cde"}]}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x7, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:13:40 executing program 4: creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000006c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f00000006c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x1002, 0x0) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000880)='./file0\x00', 0x0, 0x5010, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 12:13:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00001cb000)={0x0, 0x0, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x2a, 0x311}, 0x14}}, 0x0) 12:13:40 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x0, 0x0, [0x0, 0x3]}], @icmpv6=@ndisc_ra}}}}}, 0x0) 12:13:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1b0000001a005f3814f9f407000904018000"/27, 0x1b) 12:13:40 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @multicast2}, 0x10) sendto(r0, &(0x7f00000003c0)="879d", 0x2, 0x8000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="00dd", 0x2, 0x0, 0x0, 0x0) 12:13:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:13:40 executing program 4: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0xb0, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x88, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x78, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_ERSPAN_DIR={0x8}, @IFLA_GRE_IGNORE_DF={0xfffffffffffffff2}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x1, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xb0}}, 0x0) 12:13:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000bc0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000b80)='keyring\x00', &(0x7f0000000bc0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x8, r0, r1, 0x0, 0x0) [ 296.896277][T13189] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 296.905163][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 12:13:41 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x0, 0x0, [0x0, 0x3]}], @icmpv6=@ndisc_ra}}}}}, 0x0) 12:13:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 12:13:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@typed={0x4, 0x0, @binary}]}, @typed={0x8, 0x3, @fd=r0}]}, 0x24}}, 0x0) 12:13:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket(0x11, 0xa, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 12:13:41 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x0, 0x0, [0x0, 0x3]}], @icmpv6=@ndisc_ra}}}}}, 0x0) 12:13:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) [ 297.232605][T13205] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 297.240807][T13205] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 12:13:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) r4 = open(&(0x7f00000003c0)='./bus\x00', 0xccf82b8c3d0385e2, 0x0) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 12:13:41 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x0, 0x2, 0x8}) 12:13:41 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[@dstopts={0x0, 0x0, [0x0, 0x3]}], @icmpv6=@ndisc_ra}}}}}, 0x0) 12:13:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000500)={0x0, 0x42474752}) [ 297.608811][T13223] device nr0 entered promiscuous mode 12:13:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket(0x11, 0xa, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 297.772251][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 297.778368][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:13:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') readahead(r0, 0x0, 0xfffffffffffffff9) 12:13:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32=r1, @ANYBLOB="020000053f0008000c001a000400e1e65e128ff9d9f551dd94d768339d1a0300000000000000b8af"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x2, 0x0) 12:13:41 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 297.852969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 297.859315][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:13:42 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL#\xa0(\x00') 12:13:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 12:13:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket(0x11, 0xa, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 12:13:42 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x1, 0x0) writev(r0, &(0x7f0000003b40)=[{&(0x7f0000001300)="2fc4e914fb3160d275f595283bd71ae6cf2e57d867f781a523f1ef0798fc4f9c3e31d56ee31a2240934310977337a13746013bba128709b63c713efc7d6ab9702f099d5bb1755c6d2443e0b25c2fd4ba4a0ab0b55589cc0f6b92d30d", 0x5c}], 0x1) [ 298.543446][T13223] device nr0 entered promiscuous mode 12:13:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000100)=@random={'user.', ',procposix_acl_accesssystem-lowlan0self!\'{vboxnet1*.\x00'}) 12:13:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005780)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4}}}]}, 0x34}}, 0x0) 12:13:42 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL#\xa0(\x00') 12:13:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket(0x11, 0xa, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 12:13:42 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000dc0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=[@hoplimit={{0x14, 0x29, 0x34, 0x1000}}], 0x18}}], 0x2, 0x0) 12:13:42 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = accept$alg(r2, 0x0, 0x0) fstatfs(r3, &(0x7f00000002c0)=""/4096) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)) r4 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, 0x5, 0x8000, 0x5, 0x1, 0x3}) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x20, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$nbd(r4, &(0x7f0000000100)={0x67446698, 0x0, 0x3, 0x4, 0x1, "9df92fd0abfa0255e6eda3b62f6c84cec36353c59e4a30ef967bff9c5fd2"}, 0x2e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x80082102, &(0x7f00000000c0)=r8) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000080)={r8, 0x5, 0x3}) 12:13:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) 12:13:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000400)=@getae={0x40, 0x1f, 0x1, 0x0, 0x0, {{@in=@remote}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x40}}, 0x0) 12:13:43 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL#\xa0(\x00') 12:13:43 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12e) read(r0, &(0x7f00000006c0)=""/240, 0xfffffff6) [ 299.190152][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:43 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) [ 299.264880][T13286] device veth3 entered promiscuous mode [ 299.273548][T13286] batman_adv: batadv0: Adding interface: veth3 [ 299.279784][T13286] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.305726][T13286] batman_adv: batadv0: Interface activated: veth3 12:13:43 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000e80)="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", 0x480, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x81) [ 299.376756][T12746] hid-generic 0000:0000:D9BC0D6B.0001: ignoring exceeding usage max 12:13:43 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL#\xa0(\x00') [ 299.478397][T12746] hid-generic 0000:0000:D9BC0D6B.0001: hidraw0: HID v0.00 Device [syz1] on sz1 [ 299.552009][T12746] hid-generic 0000:0000:D9BC0D6B.0002: ignoring exceeding usage max [ 299.579810][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.589743][T13281] batman_adv: batadv0: Interface deactivated: veth3 12:13:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff81, 0x10000000200008c5, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) [ 299.609699][T12746] hid-generic 0000:0000:D9BC0D6B.0002: hidraw0: HID v0.00 Device [syz1] on sz1 12:13:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') sync_file_range(r0, 0x0, 0x0, 0x0) 12:13:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x5}, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:13:43 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) dup3(r1, r0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7ff, 0x5) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) [ 299.967330][T13286] batman_adv: batadv0: Interface activated: veth3 [ 300.066378][T13315] kvm: emulating exchange as write 12:13:44 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{0x0, 0x0, 0x280040000000000}, {0xffffffff}]}) 12:13:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x3a9) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000002c0)={0xfff, 0x0, 0x7, 0x80000001, 0xffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x27849c0ca24d9ba9, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendto$inet(r2, 0x0, 0xd1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r2, r2) getpid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)) keyctl$describe(0x6, 0x0, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000500)='vxcan1\x00', 0x0) sendmsg$tipc(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fe", 0x1}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendto$inet(r2, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) close(r5) fstatfs(0xffffffffffffffff, 0x0) 12:13:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000028c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000002900)={0x2}) 12:13:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd057729815c9cc5938b6c157ffd6fc0f8a3f3f601f6bcc3803aabccc51659fb83fd37dee75a54c7fe3e35023de62408474b410b781f6c1421d89c58fad055e810f1e89f82e4450e10aa40b01c42026d47255a4212a96c7dd5026e46692213b5e9c14f59b5da862283bdba689d0383cab344009a589852494f64bc3f46e84e801813a17e6c5811231394d4b2ab733681bdd95a1ba78ed3def72d3271dd894b", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) 12:13:44 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$KDENABIO(r0, 0x4b36) 12:13:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x5}, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 300.372412][T13329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.437356][T13329] device veth5 entered promiscuous mode [ 300.446066][T13329] batman_adv: batadv0: Adding interface: veth5 [ 300.452374][T13329] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.477562][T13329] batman_adv: batadv0: Interface activated: veth5 12:13:44 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{0x0, 0x0, 0x280040000000000}, {0xffffffff}]}) 12:13:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd057729815c9cc5938b6c157ffd6fc0f8a3f3f601f6bcc3803aabccc51659fb83fd37dee75a54c7fe3e35023de62408474b410b781f6c1421d89c58fad055e810f1e89f82e4450e10aa40b01c42026d47255a4212a96c7dd5026e46692213b5e9c14f59b5da862283bdba689d0383cab344009a589852494f64bc3f46e84e801813a17e6c5811231394d4b2ab733681bdd95a1ba78ed3def72d3271dd894b", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) [ 300.887134][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.897198][T13329] batman_adv: batadv0: Interface deactivated: veth5 12:13:45 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000180)=""/140) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x140000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) 12:13:45 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xa0000000}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 301.149305][T13350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.169433][T13355] device veth3 entered promiscuous mode [ 301.177694][T13355] batman_adv: batadv0: Adding interface: veth3 12:13:45 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{0x0, 0x0, 0x280040000000000}, {0xffffffff}]}) [ 301.184062][T13355] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.209557][T13355] batman_adv: batadv0: Interface activated: veth3 12:13:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x5}, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 301.315853][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.326009][T13357] batman_adv: batadv0: Interface deactivated: veth3 12:13:45 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{0x0, 0x0, 0x280040000000000}, {0xffffffff}]}) 12:13:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) 12:13:45 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x1a011, r0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x0, 0x0, &(0x7f0000001000)) [ 301.554255][T13374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.606321][T13381] device veth7 entered promiscuous mode [ 301.614875][T13381] batman_adv: batadv0: Adding interface: veth7 [ 301.621104][T13381] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.646418][T13381] batman_adv: batadv0: Interface activated: veth7 12:13:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @local}, 0x1c, 0x0}, 0x0) 12:13:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) [ 301.820669][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.855397][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106, 0x8}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000400) fchmod(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/icmp\x00') openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x129200, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r1, 0x8001}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') fstat(r2, &(0x7f00000022c0)) syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000280)='/dev/raeio#\x00', 0x0, 0x2) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, 0x0) unshare(0x0) [ 301.864996][T13374] batman_adv: batadv0: Interface deactivated: veth7 12:13:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r3, 0x0, 0x5}, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:13:46 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000000)=0x101) 12:13:46 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = semget(0x1, 0x2, 0x10) semctl$SETVAL(r0, 0x3, 0x10, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x81}], 0x3c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) [ 302.138940][T13390] device veth5 entered promiscuous mode [ 302.147402][T13390] batman_adv: batadv0: Adding interface: veth5 [ 302.153709][T13390] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.179019][T13390] batman_adv: batadv0: Interface activated: veth5 [ 302.197918][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.207614][T13388] batman_adv: batadv0: Interface deactivated: veth5 12:13:46 executing program 0: unshare(0x4000400) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x80003, 0x0) fcntl$setpipe(r1, 0x407, 0x0) 12:13:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) 12:13:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002100000000000000c0", 0x31}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 12:13:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1181}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001000250800000000000000000a000000", @ANYRES32=r5, @ANYBLOB="92bb0000"], 0x2c}}, 0x0) 12:13:46 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0xffffff80, 0x6, 0x78c, 0x3}, 0x10) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) [ 302.485634][T13415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:46 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="fc0000004a000700ab092500090007000aab80ff000000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d92c8334b3863032000048b6e4170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43d3f000000000000003b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b00417cc821d9565187dc48deac270e33429fd3000175e63fb8d38a873cf10000000000f7", 0xfc) [ 302.583406][T13420] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.629026][T13415] device veth9 entered promiscuous mode [ 302.637501][T13415] batman_adv: batadv0: Adding interface: veth9 [ 302.643842][T13415] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.669242][T13415] batman_adv: batadv0: Interface activated: veth9 12:13:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000100e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 302.676798][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.687054][T13429] batman_adv: batadv0: Interface deactivated: veth9 [ 302.707091][T13430] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 12:13:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8), &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) utime(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)) 12:13:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@ipv6_getroute={0x30, 0x1a, 0x401, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x1e, @mcast1}]}, 0x30}}, 0x0) 12:13:46 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r0, 0x1, 0x10, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x4, 0x800}, {0x0, 0x6, 0x800}, {0x0, 0x9, 0x800}, {0x4, 0x8, 0x1000}], 0x4, &(0x7f0000000040)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10100, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f00000000c0)) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) 12:13:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') [ 302.978141][T13444] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 303.005226][T13446] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 303.015848][T13420] device veth7 entered promiscuous mode [ 303.024270][T13420] batman_adv: batadv0: Adding interface: veth7 [ 303.030504][T13420] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.055998][T13420] batman_adv: batadv0: Interface activated: veth7 12:13:47 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) r0 = semget$private(0x0, 0x20000000107, 0x0) r1 = semget(0x3, 0x4, 0x108) semtimedop(r1, &(0x7f0000000100), 0x29a, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000100)={0x20, 0x5, 0x1, 0x867, 0x506b}) semctl$SETVAL(r0, 0x1, 0x10, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000000)=""/176) [ 303.111917][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.121491][T13432] batman_adv: batadv0: Interface deactivated: veth7 12:13:47 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x2000000000000043}, 0x10}}, 0x0) 12:13:47 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 12:13:47 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 303.436617][T13434] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 12:13:47 executing program 1: r0 = semget$private(0x0, 0x4, 0x410) semget$private(0x0, 0x0, 0x104) r1 = semget$private(0x0, 0x0, 0x10) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r1, 0x1, 0x10, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) r2 = semget$private(0x0, 0x20000000107, 0x415) semtimedop(r2, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r2, 0x1, 0x10, 0x0) semtimedop(r2, 0x0, 0xfffffffffffffc9a, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = semget$private(0x0, 0x20000000107, 0x0) semtimedop(r4, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) semctl$SETVAL(r4, 0x1, 0x10, 0x0) semctl$SETVAL(r4, 0x4, 0x10, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) 12:13:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af20, &(0x7f0000000000)) 12:13:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) 12:13:47 executing program 4: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x9) 12:13:47 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x0) 12:13:47 executing program 2: r0 = eventfd(0x5) readv(r0, &(0x7f0000003900)=[{0x0, 0xfffffd4d}, {&(0x7f00000000c0)=""/175, 0xaf}], 0x1000000000000069) [ 303.787248][T13478] ===================================================== [ 303.794246][T13478] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x194/0x410 [ 303.801972][T13478] CPU: 1 PID: 13478 Comm: vhost-13477 Not tainted 5.5.0-rc1-syzkaller #0 [ 303.810379][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.820433][T13478] Call Trace: [ 303.823740][T13478] dump_stack+0x1c9/0x220 [ 303.828076][T13478] kmsan_report+0x128/0x220 [ 303.832571][T13478] __msan_warning+0x57/0xa0 [ 303.837064][T13478] __list_del_entry_valid+0x194/0x410 [ 303.842430][T13478] kcov_remote_start+0x13e/0x2e0 [ 303.847355][T13478] vhost_worker+0x373/0x690 [ 303.851860][T13478] kthread+0x4b5/0x4f0 [ 303.855940][T13478] ? vhost_dev_set_owner+0xd80/0xd80 [ 303.861220][T13478] ? kthread_blkcg+0xf0/0xf0 [ 303.865808][T13478] ret_from_fork+0x35/0x40 [ 303.870211][T13478] [ 303.872521][T13478] Uninit was created at: [ 303.876748][T13478] kmsan_save_stack_with_flags+0x3c/0x90 [ 303.882365][T13478] kmsan_alloc_page+0x133/0x320 [ 303.887198][T13478] __alloc_pages_nodemask+0x1421/0x5fd0 [ 303.892727][T13478] alloc_pages_current+0x68d/0x9a0 [ 303.897831][T13478] __vmalloc_node_range+0x8c9/0x1270 [ 303.903112][T13478] vmalloc+0x106/0x120 [ 303.907165][T13478] kcov_remote_start+0x18e/0x2e0 [ 303.912087][T13478] vhost_worker+0x373/0x690 [ 303.916583][T13478] kthread+0x4b5/0x4f0 [ 303.920635][T13478] ret_from_fork+0x35/0x40 [ 303.925030][T13478] ===================================================== [ 303.931940][T13478] Disabling lock debugging due to kernel taint [ 303.938076][T13478] Kernel panic - not syncing: panic_on_warn set ... [ 303.944647][T13478] CPU: 1 PID: 13478 Comm: vhost-13477 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 303.954428][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.964466][T13478] Call Trace: [ 303.967746][T13478] dump_stack+0x1c9/0x220 [ 303.972065][T13478] panic+0x3c9/0xc1e [ 303.975966][T13478] kmsan_report+0x215/0x220 [ 303.980456][T13478] __msan_warning+0x57/0xa0 [ 303.984962][T13478] __list_del_entry_valid+0x194/0x410 [ 303.990344][T13478] kcov_remote_start+0x13e/0x2e0 [ 303.995276][T13478] vhost_worker+0x373/0x690 [ 303.999785][T13478] kthread+0x4b5/0x4f0 [ 304.003842][T13478] ? vhost_dev_set_owner+0xd80/0xd80 [ 304.009136][T13478] ? kthread_blkcg+0xf0/0xf0 [ 304.013714][T13478] ret_from_fork+0x35/0x40 [ 304.019560][T13478] Kernel Offset: 0x2a200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 304.031177][T13478] Rebooting in 86400 seconds..