[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 77.773598][ T32] audit: type=1800 audit(1569593700.833:25): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 77.796516][ T32] audit: type=1800 audit(1569593700.853:26): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 77.834896][ T32] audit: type=1800 audit(1569593700.883:27): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. 2019/09/27 14:15:12 fuzzer started 2019/09/27 14:15:16 dialing manager at 10.128.0.26:37065 2019/09/27 14:15:17 syscalls: 2385 2019/09/27 14:15:17 code coverage: enabled 2019/09/27 14:15:17 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/27 14:15:17 extra coverage: enabled 2019/09/27 14:15:17 setuid sandbox: enabled 2019/09/27 14:15:17 namespace sandbox: enabled 2019/09/27 14:15:17 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/27 14:15:17 fault injection: enabled 2019/09/27 14:15:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/27 14:15:17 net packet injection: enabled 2019/09/27 14:15:17 net device setup: enabled 14:17:55 executing program 0: syzkaller login: [ 253.160504][T11560] IPVS: ftp: loaded support on port[0] = 21 [ 253.298252][T11560] chnl_net:caif_netlink_parms(): no params data found [ 253.352806][T11560] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.360017][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.368861][T11560] device bridge_slave_0 entered promiscuous mode [ 253.378133][T11560] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.385404][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.394123][T11560] device bridge_slave_1 entered promiscuous mode [ 253.426057][T11560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.439071][T11560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.470887][T11560] team0: Port device team_slave_0 added [ 253.479903][T11560] team0: Port device team_slave_1 added [ 253.656921][T11560] device hsr_slave_0 entered promiscuous mode [ 253.862575][T11560] device hsr_slave_1 entered promiscuous mode [ 254.041724][T11560] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.048987][T11560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.056777][T11560] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.063988][T11560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.139765][T11560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.159646][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.171170][ T3838] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.185116][ T3838] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.197197][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 254.218053][T11560] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.235339][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.244683][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.251922][ T3838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.308388][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.317703][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.324943][ T3838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.335294][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.345241][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.354687][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.363691][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.377521][T11560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.412263][T11560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.453367][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:17:57 executing program 0: 14:17:57 executing program 0: 14:17:57 executing program 0: 14:17:57 executing program 0: 14:17:57 executing program 0: 14:17:57 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000010c0)={0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f0000000000), 0xfffffffffffffdd7}], 0x10000000000003db, 0xc) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 14:17:58 executing program 0: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000010c0)={0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f0000000000), 0xfffffffffffffdd7}], 0x10000000000003db, 0xc) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 14:17:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0xfffffffffffffea4, 0x0}}], 0x4000071, 0x0, 0x0) readahead(r1, 0x81, 0x6) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ipddp0\x00@\x00\x00\x00\x95K\x8dM\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150) shutdown(r0, 0x400000000000001) [ 255.093718][T11585] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:17:59 executing program 0: ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000100)={0x7, 0x9, 0x7, 0xffff}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x4002, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000340)=0x101, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r1, 0x153afe199314dbaa, &(0x7f00000000c0)={&(0x7f0000000080)=""/29, 0x1d}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4240, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000280)=""/104) 14:17:59 executing program 0: ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000100)={0x7, 0x9, 0x7, 0xffff}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x4002, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000340)=0x101, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r1, 0x153afe199314dbaa, &(0x7f00000000c0)={&(0x7f0000000080)=""/29, 0x1d}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4240, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000280)=""/104) 14:17:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8b01) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'batadv0\x00', 0x200}) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = dup3(r3, r2, 0x0) sendmmsg$alg(r5, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)='\\', 0x1}], 0x1, &(0x7f0000003d00)=ANY=[@ANYBLOB="1800000000000000170100000200000000006400000000001800000000000000170100000200"/48], 0x30}], 0x1, 0x0) 14:17:59 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006040)=[{{&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="617fa43f170bfa91e418c6096082a927905a219a7b8de3213e0f2304eb512bca2b07c8441ee6378e762102dc3c19aae66b744f5069a9ce1b690602aa526399c3fbdc69c7eabf83892b179cfef4e3a502c0f729c148347a2f9693ef40010441f594384b628cd11f26ed59626e0092b48a00cd851d66b80769843080a7984ecb0d5852d3c19c1399239c73d2aba7762549c4bbe10804047b3e53f659676f27bcb63267ce8ce85d29cfa7f2539f116b892cde3a403747eaf82ead80ff003a2b5ba2a3ccdca44f892f", 0xc7}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100000001}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x6}]}}}], 0x50}}], 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r0, 0x0, r1, 0x0, 0xbc, 0x0) write$P9_RREAD(r0, &(0x7f0000000300)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200000) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0x4, 0x1, 0x2, {0x6, 0xfffffffc, 0xc07, 0x3}}) 14:17:59 executing program 1: ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x2) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1, 0x8, 0x9, 0x6, 0x3}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x8ac2, 0x0) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="90166dba1c4f207aab2ed5d16f4cfa1cc42882491c5843a6c71f9bc1456535c6840a4f684559251eb6d798a44bce0f24ea29778077ea58e377b76b37", 0x3c}, {&(0x7f0000000140)="a9207000fc559f6d24b3bf091ec27432ddcb4a38eae3281dbc36945d36", 0x1d}, {&(0x7f0000000180)="e42aac4cf79866b12ae0723415ef69f8274bb22594c6b2a69965f40ab820cdba1d73d4c0cbc030e7a042746f1adc394754c2628162708ae4d3d0a7df7280a9133b86d34504f3ea6ca081a33dd6424647d9569ef75246", 0x56}, {&(0x7f0000000200)="3cc4ecf268b63f90c2e957dabc549a047777906662094e32ec0ec67b82c1196d1de0a9d49b10a75997bcc422ade69253259078b90c91429c78343c0a696368047f20dc8c2541588d5398370962c1ca0e747b7b625df1d9f1ff1c442e3413cae20c11c6b1e53ede265ec3fe68030895fa46c21c00809b4f221c43ea9b24b61f14f7d310a819fdb868c203c71e5a7e693b9b137720ca5f1920e0301f831f734820463f640f0488ae634e3f71bfa4af6c66f0d7d8056ad12e1fda300a8504dc77cefedf329b8d69d5b90867f3a5c59f85ea613133ae4683305eef84fc7d364401e3b476906cb327ef5b870dcd082f250ced4472b78cec21fce0", 0xf8}, {&(0x7f0000000300)}, {&(0x7f0000000340)="63e2740d0e73a30fb5f8d217bb17a8dbf882e9259aa8c3914bac09cd20db273823abe1b47ceec6980fd8c9d5f02da749d9049466cc0de2baeb293d1b12594522dd355dd28b8ce92e087534c252329f35e03cb66ccfd04cecbab01cfc8824d25ebd8ba2e83b1f3626d3ab335531aac54d27e343e575a25148b49ecad76e27a8ef721d58b154e2319cdba51e2b523c57da3c2ded9ddf2ac462d32cdd2cbbf487c1eb3a6357735a59019ca9364dea3bd33fedf34f1b11d45bffa4738cd1898d17e85534858b981d6ba098b22a2a984fde2afa2da597847d6a9c8dc0e37fe7", 0xdd}], 0x6, 0x0, 0x0, 0x4004001}, {0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000004c0)="1ca369b4a2bd9453e0e504baa5bff7b0314ce14281a1a9539b4206268d1c0e0f5578074354a823fddd9c3600aaf7ab82ca4e745d77f4debb757eaebe80c998e00b0ed8661f51ce58270decd23b4a3761b8", 0x51}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f0000001580), 0x0, 0x10}], 0x2, 0x4008000) r2 = syz_open_dev$sndpcmc(&(0x7f0000001640)='/dev/snd/pcmC#D#c\x00', 0xc963, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001680)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000001780)=0xe8) bind$packet(r2, &(0x7f00000017c0)={0x11, 0xf9aaf43a92cc752c, r3, 0x1, 0x2, 0x6, @random="7664ce6e71e8"}, 0x14) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001800)='/dev/urandom\x00', 0x408000, 0x0) tee(r4, r2, 0x100000000, 0x6) r5 = dup(0xffffffffffffffff) faccessat(r5, &(0x7f0000001840)='./file0\x00', 0x10, 0x100) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000001880)) lseek(r4, 0x0, 0x2) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000001900)={0x0, 0x4, 0x8, 0x2, 0x7fffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001940)=0x0) rt_sigqueueinfo(r7, 0x12, &(0x7f0000001980)={0x10, 0x4eac3bf6, 0xff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/206, 0xce}, {&(0x7f0000001b00)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/151, 0x97}], 0x3, &(0x7f0000001cc0)=""/164, 0xa4}, 0xfff}], 0x1, 0x10142, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000001dc0)=0x2, 0x4) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000001e00)=""/171) lsetxattr$trusted_overlay_nlink(&(0x7f0000001ec0)='./file1\x00', &(0x7f0000001f00)='trusted.overlay.nlink\x00', &(0x7f0000001f40)={'U-', 0x1}, 0x28, 0x2) pipe(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSIG(r8, 0x40045436, 0xa) r9 = syz_open_dev$media(&(0x7f0000001fc0)='/dev/media#\x00', 0xffffffff, 0x4000) ioctl$CAPI_CLR_FLAGS(r9, 0x80044325, &(0x7f0000002000)=0x1) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002040)='/dev/btrfs-control\x00', 0x0, 0x0) getpeername$packet(r10, &(0x7f0000002080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000020c0)=0x14) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002100)='/dev/cachefiles\x00', 0x88380, 0x0) io_uring_enter(r11, 0x9685, 0x10001, 0x1, &(0x7f0000002140)={0x771}, 0x8) [ 256.857835][T11606] IPVS: ftp: loaded support on port[0] = 21 [ 256.997600][T11606] chnl_net:caif_netlink_parms(): no params data found [ 257.053379][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.060577][T11606] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.069292][T11606] device bridge_slave_0 entered promiscuous mode [ 257.078787][T11606] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.086082][T11606] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.094752][T11606] device bridge_slave_1 entered promiscuous mode [ 257.126919][T11606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.139470][T11606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 14:18:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffee8, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x384, 0x4) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x20000, 0x0) r3 = syz_open_procfs(0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f00000003c0)=0x7000000000) timerfd_gettime(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') lsetxattr$security_smack_entry(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)='TIPCv2\x00', 0x7, 0x3) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x20000090) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 257.170754][T11606] team0: Port device team_slave_0 added [ 257.180205][T11606] team0: Port device team_slave_1 added [ 257.257142][T11606] device hsr_slave_0 entered promiscuous mode [ 257.292769][T11606] device hsr_slave_1 entered promiscuous mode [ 257.443397][T11606] debugfs: Directory 'hsr0' with parent '/' already present! [ 257.492745][T11606] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.499940][T11606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.507754][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.514970][T11606] bridge0: port 1(bridge_slave_0) entered forwarding state 14:18:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="7400000024000b2ff09529000000000000000000", @ANYRES32=r3, @ANYBLOB="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"/1011], 0x74}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r4, 0x0, r5, 0x0, 0xbc, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000040)={0xffffffffffff0000, 0x0, 0x10001, 0x5}) sendmmsg$alg(r1, &(0x7f0000000180), 0x572, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r6, &(0x7f0000000100), 0x2, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x1f4, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x8ccfed4095b56e3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d3c15c87dc7e07b, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x18}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x890) [ 257.686711][T11606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.707682][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.719235][ T3372] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.730388][ T3372] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.741338][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 257.763568][T11606] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.791656][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.800836][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.808071][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.873478][T11606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.884503][T11606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.904172][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.914021][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.921194][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.931709][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.941983][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.951346][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.961059][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.973926][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.982639][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.017480][T11606] 8021q: adding VLAN 0 to HW filter on device batadv0 14:18:01 executing program 1: r0 = socket(0x40000000015, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6}, 0x20, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_1\x00'}) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r1, &(0x7f0000000100), 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0xfffffffffffffe10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x47}, 0x1c) 14:18:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7bf070") sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r1 = socket(0x9, 0x8000a, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000008000)="4c0000001200ff3883cdcd9567a2830007a600800000000000000068354046002c001d0000000000000002003ab68211489ba5ff34cb5f3996f32314c7a4bb5dec30de33a49868c6282ca63d", 0x4c}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x300) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 14:18:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d530bcfe47bf070") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004008}, 0x20004004) 14:18:01 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f000001cff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_dest={0x15, 0x114, 0x2, {0x2, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x48}, 0x0) 14:18:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = socket$inet(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r4, 0x0, r5, 0x0, 0xbc, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e426071c172b04ec4306cd71e8f7d6d53b971ce269e56909dac965055492601482f1d03c4cf76f7e4d7aacd3bf8ad80d344bf9f008c7f1e52d494e60cf8bfba2f283c88206ddd01a1cfa8c209aa11ccf0770f3301728a1f58c90f9248907c5cfc874ef502569f700161a099def1607a06b976eea43ec88cdfd4a2f979ae0bd76156c337f3f7f0da88ca0e8ed"], 0x1c) write$FUSE_IOCTL(r6, &(0x7f0000000000)={0xe, 0xffffffffffffffda, 0x1, {0x0, 0x0, 0x70f6919a, 0x582}}, 0xffffffffffffff38) 14:18:01 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x401, 0x0, 0x0, 0x0, 0x0, 0x5}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettfilter={0x24, 0x28, 0xffffff1f, 0x0, 0x0, {0x0, r5, {0x3f00}}}, 0x24}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@rand_addr=0x100, @broadcast, r5}, 0xc) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sched_getparam(r6, &(0x7f00000000c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2000d056, 0x63}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 258.760168][T11646] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 258.796948][T11647] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:18:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @remote, @loopback}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x801) io_setup(0xc01, &(0x7f0000000100)) dup3(r1, r0, 0x0) io_setup(0x5, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e42607"], 0x1c) r5 = socket$inet(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e42607"], 0x1c) r7 = socket$inet(0x2, 0x2, 0x0) bind(r7, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) r9 = socket$inet(0x2, 0x2, 0x0) bind(r9, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r9, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) bind(r10, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r10, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r10, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) syz_open_pts(r6, 0x0) io_submit(0x0, 0x9, &(0x7f0000000c00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f00000002c0)="9a24faa0afa9341cdd80b26763360e56ccbf8823c74496a34841061f9c1a0efd36ac762a2e1fa5def6d99a45896f1ba122e714492d75c952a18d67291d62439074dfd6ec3e63a76de7b943a6acc2d34a3c595841ef622fb72a4ce96388c05f2a8274c2c08917888dc8b14419da087a8a4638f7ebf063ffce1061552e62936b30205210e5", 0x84, 0x0, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f0000000c80)="70f5955d01b4862e708d50e35b5002db69a1dd1ac68415ace554e549be7e3799d102cb88f7a4422f2dcbf10867ab59bc96ad6e52ba318160ccfd90f2051bc7fa483e99d638b59d294cd6c38e2971fc993356f49691baf7638ccd99e4d4fde3650f6ec7af3b05cbf506efb5ecfe4add6d915b040460bbdf829fba7e07c49a6ddfc8980029db9942987023461fdd98509dce77488896a94b8f340acce686f7119e9a0ba56b94d53cce54f2ac6188388bdd4590898096d1d28076d5f182cda41d0326f390ddf0dc25a77f", 0xc9, 0x3, 0x0, 0x2, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r5, &(0x7f0000000440)="9159d68c38fbffff2f558562bda622cc8b89dea79febdfa7fd5fa1fadd91f0595b9b2a42a5c393b7c6a9126356271d670b6c98680b270996ba0560a38b9eb82d1edae98cff08f6bcafddf66a66095bff8a", 0x51, 0x20, 0x0, 0x1, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000600)="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", 0xfd, 0x20}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x4, r1, &(0x7f0000000780)="1c7b14aa02e76d0486f1e5ac4f4245a307cf61faad5b0c7b3ce16c22f2e1c52d0659e7574211528f7331764f80879995bfe59356a4fc19bf860248f034d43a214cb989e53d2d1763e4674d1a3b7a837adb6837b8421158b8c1a996f6ca90649752aabfad138c2493372b8ce14694340135f36c427f08e6155796e677429181c61d8e9aa6f2f67432f5117777b2097b92aec91e2dd166dd204de29836ac789bcc8f694f192c0e77594f5dec41743b6ad9ba9cc5182c3d9a0638", 0xb9, 0x1000, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x7, r7, &(0x7f0000000840)="ff86dccb136c317e669206c845850df029a9538667774b8a2e939c5c29b2a75b3bc32f3c4129e829b4fbc93d7d7a8a170a78853739e94f385542add8dad6c83c2f93b70e7167c6f511aab31a2f93bd462ff6989e0fb933a1cf499a8b7ec30a178f4f66df6b6e7f24d7ca7c0ee309f2eb3f03e5eef6dc5905ceea936b6d8507b2d3db436e4e5765f4fc0295624aff40c7d87de1f39f38b66d6213ec59", 0x9c, 0xffffffff, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x9, r8, &(0x7f0000000900)="55fb99e1889fa7aedfac26fc9c1ed13a62936d0d99ffb8b54f8ebb3b3531ac5fc0a92fc632f1b5656d452a66d55a85f79f30a19f909255d4115b718371a2ea873c105cb8015742904f01110e3c9347eef68c19dff730f98d5b489bf09db8a91a342327c0b0e4cda3c18af11615a6af92faf4a482d5a4ad22e0195318b03e5bd9bee87f82e2babb1df32fb8dcd67c53a21eeb5ee31a8411dc35369610affb8f86c2fd07232bc8e2aaaa1a32d9acc6f686863e18cfe26be4cefa83", 0xba, 0x3, 0x0, 0x881d98e2e6e2ef90, r6}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x200, r9, &(0x7f0000000a00)="c27953a6b4b8599d1fe2765bb5a6508cdc25f67c9357dcb34476c022394f757c766db82196b793b4b5ab072d42f10cc0eb3f95c3da9fceb500a57badff17afb3207ba40d0058b3034ee58e52af8504e4153083e9fe3f3d3f663a958b70df9a6c89ee12", 0x63, 0x4, 0x0, 0x2}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0xc, 0xfeff, r10, &(0x7f0000000ac0)="5e890e2e4d2e5c9ce4295438004b55c5ffde1b46c3d58ab5b513b434c2b0055a561864aa5d7dd0d3336f36dd9994e788a4d3a55c185d4a4abd55e7b622af817853e0d698aafbf080412476af87e3ca14174955a18ec6a0c45f4c93eb2846d37c5533014d8fd607d6ca16bf379e100520441585f9499b31cd8a3c1b419a026015e7efd48d0a8e8f41188fea28535fb18610f560b59abf9aec5c4d5e38cd4fe2c146525c9697a8453d814980bb2d4a7953fd49095c1d4fd1215495a18b1c9978019703f4a9a8ce5970150c94966b69be17c43ec47dbc6365d15042d7e93b27ded63fb8cd5c802f9e3efb63403ae87ef560a6fdd41e8b95d10cee64be", 0xfb, 0x3f, 0x0, 0x1}]) 14:18:02 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x401, 0x0, 0x0, 0x0, 0x0, 0x5}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettfilter={0x24, 0x28, 0xffffff1f, 0x0, 0x0, {0x0, r5, {0x3f00}}}, 0x24}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000180)={@rand_addr=0x100, @broadcast, r5}, 0xc) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sched_getparam(r6, &(0x7f00000000c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x2000d056, 0x63}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 14:18:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r1, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket(0x40000000002, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r3, r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e42607"], 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r8, 0x0, r9, 0x0, 0xbc, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000040)={0x0, r10}) r11 = fsopen(&(0x7f0000000100)='cpuset\x00', 0x0) close(r11) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r12, &(0x7f0000000240)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e42607"], 0x1c) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, &(0x7f0000000140)='ip_vti0\x00', &(0x7f00000001c0)='./file0\x00', r12) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 14:18:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r2 = accept(r1, 0x0, &(0x7f0000000040)) connect(r2, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev={[], 0x1b}, 'erspan0\x00'}}, 0x80) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000018008103e00f80ecdb4cb92e0a60042c000cd300e8bd6efb120009000e0014a00400000006000500fec0", 0x2e}], 0x1, 0x0, 0x0, 0xa13}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0x22c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x138, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc0}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x63e6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffe01, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b76}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0xfffffffffffffe26, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfff, @remote, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xef7c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb91}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0xffffffffffffffab, 0x1, 0x5}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x80}, 0x810) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="af2f42e1c8e5e985abc0e716f0abddede895471273a4a0ff31e42607"], 0x1c) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000002c0)={0x80fd, 0x3}) 14:18:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x81) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x3, r1}) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x202) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = dup(0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400100, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f08c4c21993347f66410f3acf4b0f22c744240064000000c744240209000000ff1c2466baf80cb8e82fdb87ef66bafc0cedc7442400e61dcce3c744240200000100c7442406000000000f011c24b805000000b9020000000f01d96465650f0866ba610066b8001066efb805000000b9003000000f01c1", 0x77}], 0x1, 0x31, &(0x7f0000000200)=[@cstype0={0x4, 0xc}, @flags={0x3, 0x90002}], 0x2) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000240)=[0xaf12, 0x9]) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000002c0)={{0x1, 0x0, @descriptor="919071144ce6af03"}}) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bind$tipc(r5, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) syz_usb_connect$cdc_ecm(0xe3a3e9129529354b, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x81, 0x90, 0xe0, [{{0x9, 0x4, 0x0, 0x20, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "cb633e43"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3dd966e, 0x1, 0x2, 0x81}, [@ncm={0x6, 0x24, 0x1a, 0x81, 0x1}, @country_functional={0xc, 0x24, 0x7, 0xff, 0x4, [0x7f, 0x9, 0x5]}, @mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x8, 0xff6e}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2, 0x9a79}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x2c5, 0x6b, 0x1, 0xdc}}, {{0x9, 0x5, 0x3, 0x2, 0x24c, 0x8, 0x55, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x311, 0x80, 0x0, 0x91, 0x40, 0x64}, 0x6d, &(0x7f0000000480)={0x5, 0xf, 0x6d, 0x2, [@generic={0x54, 0x10, 0x1, "b791a12b59a17c8ab3c1597d19b7d3fbfed1cbe7e41a3bc03b5130ce99d57e18945e47907cbc3dc7ed2d3af6325c537dae51e76f741af65e66f57b31c5e755dbb4a3736b920aa2f28e87d9a8592de18d89"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "2c84a0cec6a8877e936c8f99b6ede209"}]}, 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3a57}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x42f}}]}) r6 = syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0x6, 0x408280) getsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r7 = syz_open_dev$cec(&(0x7f0000000800)='/dev/cec#\x00', 0x2, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000840)={'security\x00', 0x6b, "d60faa5fd048159444d54fb7fe4802bed13cf74848b3cb3e87b3452dbfecd7af0015aa7b479c8eab97a1d660115f570f15853a17016a62484a9b355cb3af63496989310d27c58bb694a4f795439e2ebc95c142c985f53c97018c8f42df34caca3f46f2a7ff7b515f4327ce"}, &(0x7f0000000900)=0x8f) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000940)='/dev/ion\x00', 0x40000, 0x0) r9 = socket$inet(0x2, 0x80801, 0x7f) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000980)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/pid_for_children\x00') poll(&(0x7f0000000a40)=[{r8, 0x4000}, {r9}, {r10, 0x8000}, {r11, 0x1}, {0xffffffffffffffff, 0x10}, {r12, 0x10}, {r2, 0x100}], 0x7, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f0000000a80)={0x0, 0x9, 0x2013, 0x1}) r13 = socket$rxrpc(0x21, 0x2, 0xa) getpeername(r13, &(0x7f0000000ac0)=@ax25={{0x3, @bcast}, [@netrom, @null, @default, @null, @bcast, @null, @remote, @default]}, &(0x7f0000000b40)=0x80) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000b80)={{0x0, 0x3, 0xcc91, 0x0, 0xe633}, 0x8, 0x401, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x60af, 0x81, 0xfff}) r14 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_POWER(r14, 0x112, 0x9, &(0x7f0000000c80)=0x7, &(0x7f0000000cc0)=0x1) [ 260.715101][T11674] IPv6: Can't replace route, no match found [ 260.946548][T11675] IPVS: ftp: loaded support on port[0] = 21 [ 261.088715][T11675] chnl_net:caif_netlink_parms(): no params data found [ 261.167656][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.174916][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.183681][T11675] device bridge_slave_0 entered promiscuous mode 14:18:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000002740)="11dca5055e0bcfe47bf070") syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000240000000000019078ac70ff4100000000141400000000000000000000000000944f440ba4f2087aedcba9a761e96fa8307f3e3d246658c9a7bf26b15fb0925e06f189bf60ae1930de88613c2a1c4e9a98cb086cbfe3b4e18f77ebdbffaaf59d9c186ea692cb460d5373fe094c20f8d1619ebb89cb2179427d4b21609cb1dd"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r0, @ANYRES64=r4, @ANYRES32=0x0, @ANYRES64, @ANYRESOCT=r5, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=0x0], @ANYRESOCT], 0xffffffffffffffd1) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x5, 0x9, 0x2001, 0x2, 0xb, 0x6, 0x1, 0xdbd44c89a68c2371}}) [ 261.251012][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.258372][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.267096][T11675] device bridge_slave_1 entered promiscuous mode [ 261.307297][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.326495][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.360883][T11675] team0: Port device team_slave_0 added [ 261.370400][T11675] team0: Port device team_slave_1 added [ 261.488352][T11675] device hsr_slave_0 entered promiscuous mode [ 261.573578][T11675] device hsr_slave_1 entered promiscuous mode [ 261.703124][T11675] debugfs: Directory 'hsr0' with parent '/' already present! [ 261.711269][T11683] IPv6: Can't replace route, no match found 14:18:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) [ 261.756231][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.763516][T11675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.771251][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.778540][T11675] bridge0: port 1(bridge_slave_0) entered forwarding state 14:18:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_ve_0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r3, 0x0, r4, 0x0, 0xbc, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x22e, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1a00"], 0x24}}, 0x0) r5 = socket(0x6000000000010, 0x9, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x492492492492540, 0x0) [ 261.941279][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.976375][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.993208][ T3372] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.003355][ T3372] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.015983][ T3372] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 262.035269][T11675] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.058439][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.068670][ T3838] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.075956][ T3838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.134151][T11675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.145249][T11675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.163743][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.174459][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.183959][ T3838] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.191292][ T3838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.200442][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.210447][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.224276][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.233863][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.244709][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.254503][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.263789][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.274049][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 14:18:05 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") writev(r1, &(0x7f0000000080), 0x0) close(r1) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/99, 0x63}], 0x1, &(0x7f0000000540)=""/243, 0xf3}, 0x0) [ 262.283604][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.292742][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.323304][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.332326][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.364900][T11675] 8021q: adding VLAN 0 to HW filter on device batadv0 14:18:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x6) 14:18:05 executing program 0: socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 14:18:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, 0x0) r2 = socket$inet_tcp(0x2, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r3, 0x0, r4, 0x0, 0xbc, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000004907750002"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) r6 = socket$inet(0x2, 0x2, 0x0) bind(r6, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f00000002c0)={'ipddp0\x00', 0x6}) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r7 = socket$inet(0x2, 0x2, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) bind(r8, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) bind(r7, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r7, 0x0, 0x0, 0x4000000, &(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) getsockopt$inet_int(r7, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 262.792399][ T3838] usb 3-1: new high-speed USB device number 2 using dummy_hcd 14:18:06 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000028000200140001000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x401, 0x0, 0x0, 0x0, 0x0, 0x5}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettfilter={0x24, 0x28, 0xffffff1f, 0x0, 0x0, {0x0, r5, {0x3f00}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, r5, {0xffff, 0x5}, {0x3, 0xa}, {0x8, 0xfff2}}, [@TCA_RATE={0x8, 0x5, {0x6, 0x3}}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xb, 0x8}}]}}, @TCA_RATE={0x8, 0x5, {0x80, 0x40}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x2e717ba1eaea7780) r6 = socket$inet(0x2, 0x2, 0x0) bind(r6, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x82, 0x0) splice(r7, 0x0, r8, 0x0, 0xbc, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) bind(r9, &(0x7f0000000580)=@in={0x2, 0x4e20}, 0x70) setsockopt$inet_int(r9, 0x0, 0x6, &(0x7f0000000140)=0x9, 0x2) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x4000071, 0x0, 0x0) sendto(r6, &(0x7f0000000480)="07bc0709e67976e335c8c212a8ee2146cb355ef5590b6929ddbc7d5051ca1e0e69ef0a60911016e1ad351060b295110bae4fd3fd32e29a7ac7fa7c5233b7c19de4a22b844e35c69fb3cfe11e3f14c78759e2554e87759dc70fbdce05cee33840f2542dc66dee81896c6d930ddfeca90308489275f5e2836b4a80128ea3eea74decb63567155967cd00e76100e9f6babf61d70787cbfd8ce695ed9e1bfb96cc8ce09c3e56b2", 0xa5, 0x20000000, &(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x0, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0xfa85, @mcast1, 0x7ff}}}, 0x80) r10 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000002500f3ff260000020000354855770000", @ANYRES32=r11, @ANYBLOB="00000000ffffffffffffffff080001007366710005000500fffff0000010e104deccbbbde735b9a00000000000000000000000000033cc3598c9aa8178bdf1000000000000000000000000de7f46000000000000007f0000000000009900007cf76567e30e03c32824f1583940ea0e363002e94564838f548258a632963f8262d0485c9b90c19b6ca74fb97882f65eb406caf163fe646c248656cb5d845549c5ceffcfeaab4260fca524afef20c0034fbd36262c964c61f3771603fd386dc70a77e574632bd950e808d63007d6c6683e251ac28f6b621f863af06767151428925f8dd87c3994ef3645d77e7281ab057d2bef3b8444014c8752a4a8a434ac70810633f2eb7d7a89d0f3cf2074bb2e180772593cd728026dfe9b7bc2cbc70a0cb6088e18f3326fa3a5dcd32cb951da688b87961591b4671e63cf37feaac76f85b3bdaad65e1cd467ba853423df0e000000000000000000e1cf7d55848be0f405c78f5a56c1e95451864bf9fbef7bde2667d4efd9d93a2891e7a922d0137c5fc0d077e4e61bc574418c18b8774f376f12a725b0146c291ade0c82e3d68a0704ab7ca369e014cde4fbfbb2267345e7afb6e27df356d3566411220610d72fd145be834cf4e333319cf0d7c98d0050db27a51c6178df46c6ff661d7927befa3d95c24d71ecd66b2c"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180), 0x4924acf, 0x0) [ 262.999438][T11724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.152169][ T3838] usb 3-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 709 [ 263.162420][ T3838] usb 3-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 588 [ 263.172520][ T3838] usb 3-1: config 1 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.185627][ T3838] usb 3-1: config 1 interface 0 has no altsetting 0 [ 263.194179][T11728] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.352602][ T3838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.362683][ T3838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.370782][ T3838] usb 3-1: Product: Ќ [ 263.375044][ T3838] usb 3-1: Manufacturer: ⠉ [ 263.379727][ T3838] usb 3-1: SerialNumber: Я [ 263.872574][ T3838] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 263.913751][ T3838] ================================================================== [ 263.921979][ T3838] BUG: KMSAN: uninit-value in kcov_remote_start+0xfe/0x2a0 [ 263.929204][ T3838] CPU: 1 PID: 3838 Comm: kworker/1:2 Not tainted 5.3.0-rc7+ #0 [ 263.936905][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.947029][ T3838] Workqueue: usb_hub_wq hub_event [ 263.954299][ T3838] Call Trace: [ 263.957695][ T3838] dump_stack+0x191/0x1f0 [ 263.962055][ T3838] kmsan_report+0x162/0x2d0 [ 263.966659][ T3838] kmsan_internal_check_memory+0x3ce/0x4e0 [ 263.972460][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 263.978362][ T3838] kmsan_check_memory+0xd/0x10 [ 263.983292][ T3838] kcov_remote_start+0xfe/0x2a0 [ 263.988152][ T3838] hub_event+0x159/0x72f0 [ 263.992670][ T3838] ? kmsan_set_origin+0x6a/0xf0 [ 263.997513][ T3838] ? kmsan_set_origin+0x6a/0xf0 [ 264.002384][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.008273][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.014151][ T3838] ? led_work+0x720/0x720 [ 264.018466][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.024351][ T3838] ? led_work+0x720/0x720 [ 264.028678][ T3838] ? led_work+0x720/0x720 [ 264.033062][ T3838] process_one_work+0x1572/0x1ef0 [ 264.038104][ T3838] worker_thread+0x189c/0x2460 [ 264.042899][ T3838] kthread+0x4b5/0x4f0 [ 264.046967][ T3838] ? process_one_work+0x1ef0/0x1ef0 [ 264.052155][ T3838] ? kthread_blkcg+0xf0/0xf0 [ 264.056751][ T3838] ret_from_fork+0x35/0x40 [ 264.061156][ T3838] [ 264.063464][ T3838] Uninit was created at: [ 264.067696][ T3838] kmsan_save_stack_with_flags+0x37/0x70 [ 264.073314][ T3838] kmsan_alloc_page+0x151/0x360 [ 264.078192][ T3838] __alloc_pages_nodemask+0x142d/0x5fa0 [ 264.083763][ T3838] alloc_pages_current+0x68d/0x9a0 [ 264.088859][ T3838] __vmalloc_node_range+0x82c/0x14b0 [ 264.094129][ T3838] vmalloc+0xd7/0xf0 [ 264.098025][ T3838] kcov_remote_start+0x167/0x2a0 [ 264.102951][ T3838] hub_event+0x159/0x72f0 [ 264.107267][ T3838] process_one_work+0x1572/0x1ef0 [ 264.112286][ T3838] worker_thread+0x111b/0x2460 [ 264.117032][ T3838] kthread+0x4b5/0x4f0 [ 264.121089][ T3838] ret_from_fork+0x35/0x40 [ 264.125483][ T3838] [ 264.127797][ T3838] Bytes 0-15 of 16 are uninitialized [ 264.133062][ T3838] Memory access of size 16 starts at ffffc9000bcc4000 [ 264.139802][ T3838] ================================================================== [ 264.147870][ T3838] Disabling lock debugging due to kernel taint [ 264.154006][ T3838] Kernel panic - not syncing: panic_on_warn set ... [ 264.160581][ T3838] CPU: 1 PID: 3838 Comm: kworker/1:2 Tainted: G B 5.3.0-rc7+ #0 [ 264.169493][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.179553][ T3838] Workqueue: usb_hub_wq hub_event [ 264.184560][ T3838] Call Trace: [ 264.187844][ T3838] dump_stack+0x191/0x1f0 [ 264.192238][ T3838] panic+0x3c9/0xc1e [ 264.196143][ T3838] kmsan_report+0x2ca/0x2d0 [ 264.200986][ T3838] kmsan_internal_check_memory+0x3ce/0x4e0 [ 264.206786][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.212704][ T3838] kmsan_check_memory+0xd/0x10 [ 264.217456][ T3838] kcov_remote_start+0xfe/0x2a0 [ 264.222296][ T3838] hub_event+0x159/0x72f0 [ 264.226618][ T3838] ? kmsan_set_origin+0x6a/0xf0 [ 264.231457][ T3838] ? kmsan_set_origin+0x6a/0xf0 [ 264.236311][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.242194][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.248073][ T3838] ? led_work+0x720/0x720 [ 264.252392][ T3838] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 264.258278][ T3838] ? led_work+0x720/0x720 [ 264.262591][ T3838] ? led_work+0x720/0x720 [ 264.266910][ T3838] process_one_work+0x1572/0x1ef0 [ 264.272990][ T3838] worker_thread+0x189c/0x2460 [ 264.277761][ T3838] kthread+0x4b5/0x4f0 [ 264.281817][ T3838] ? process_one_work+0x1ef0/0x1ef0 [ 264.287003][ T3838] ? kthread_blkcg+0xf0/0xf0 [ 264.291582][ T3838] ret_from_fork+0x35/0x40 [ 264.297267][ T3838] Kernel Offset: disabled [ 264.301603][ T3838] Rebooting in 86400 seconds..