0: port 2(bridge_slave_1) entered forwarding state [ 1226.824872][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1226.834368][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1226.844293][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1226.853285][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.146201][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.155257][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.166934][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.187908][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.197034][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.214029][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.222995][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.233972][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.574954][ T3553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.588366][ T3562] chnl_net:caif_netlink_parms(): no params data found [ 1227.915900][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.923353][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.931603][ T3562] device bridge_slave_0 entered promiscuous mode [ 1228.219333][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.226562][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.234797][ T3562] device bridge_slave_1 entered promiscuous mode [ 1228.253760][ T3562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.265457][ T3562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 21:11:21 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:21 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:21 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x0, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:11:21 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000001c0)) fcntl$dupfd(r3, 0x0, r4) 21:11:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xf0ffffffffffff) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:11:21 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:22 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1229.233304][ T26] audit: type=1804 audit(1570050682.612:148): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2190/file0" dev="sda1" ino=16737 res=1 21:11:22 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000001c0)) fcntl$dupfd(r3, 0x0, r4) [ 1229.305746][ T26] audit: type=1800 audit(1570050682.612:149): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16737 res=0 [ 1229.426019][ T3562] team0: Port device team_slave_0 added [ 1229.869727][ T3562] team0: Port device team_slave_1 added [ 1229.963657][ T3562] device hsr_slave_0 entered promiscuous mode [ 1230.011068][ T3562] device hsr_slave_1 entered promiscuous mode [ 1230.050660][ T3562] debugfs: Directory 'hsr0' with parent '/' already present! [ 1230.218499][ T26] audit: type=1804 audit(1570050683.592:150): pid=3594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2191/file0" dev="sda1" ino=16516 res=1 [ 1230.327310][ T26] audit: type=1800 audit(1570050683.622:151): pid=3594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16516 res=0 [ 1231.336218][ T3598] IPVS: ftp: loaded support on port[0] = 21 [ 1231.387395][T25238] device bridge_slave_1 left promiscuous mode [ 1231.394176][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.442279][T25238] device bridge_slave_0 left promiscuous mode [ 1231.448479][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.493378][T25238] device bridge_slave_1 left promiscuous mode [ 1231.499618][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.561484][T25238] device bridge_slave_0 left promiscuous mode [ 1231.567662][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.612830][T25238] device bridge_slave_1 left promiscuous mode [ 1231.619018][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.662020][T25238] device bridge_slave_0 left promiscuous mode [ 1231.668445][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.743001][T25238] device bridge_slave_1 left promiscuous mode [ 1231.749193][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.811376][T25238] device bridge_slave_0 left promiscuous mode [ 1231.817729][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.371332][T25238] device hsr_slave_0 left promiscuous mode [ 1239.410749][T25238] device hsr_slave_1 left promiscuous mode [ 1239.492484][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1239.506492][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1239.518103][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.577775][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.669613][T25238] bond0 (unregistering): Released all slaves [ 1239.831522][T25238] device hsr_slave_0 left promiscuous mode [ 1239.870780][T25238] device hsr_slave_1 left promiscuous mode [ 1239.924153][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1239.938456][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1239.953484][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.005282][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.079029][T25238] bond0 (unregistering): Released all slaves [ 1240.201454][T25238] device hsr_slave_0 left promiscuous mode [ 1240.250930][T25238] device hsr_slave_1 left promiscuous mode [ 1240.325488][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1240.339410][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1240.351419][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.377665][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.478090][T25238] bond0 (unregistering): Released all slaves [ 1240.773288][T25238] device hsr_slave_0 left promiscuous mode [ 1240.830637][T25238] device hsr_slave_1 left promiscuous mode [ 1240.898238][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1240.911956][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1240.923636][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.987036][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.078428][T25238] bond0 (unregistering): Released all slaves [ 1241.190372][ T3562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.218791][ T3562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.219040][ T3602] IPVS: ftp: loaded support on port[0] = 21 [ 1241.227369][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1241.239449][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1241.247587][ T3600] IPVS: ftp: loaded support on port[0] = 21 [ 1241.283881][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1241.292757][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1241.301411][T25984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.308451][T25984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.317014][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1241.326099][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1241.334791][T25984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.341891][T25984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.349634][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1241.377553][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1241.385663][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1241.394952][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1241.405816][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1241.415410][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1241.424842][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1241.482578][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1241.495105][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1241.503924][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1241.527149][ T3598] chnl_net:caif_netlink_parms(): no params data found [ 1241.549530][ T3562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1241.562620][ T3562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1241.577769][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1241.586321][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1241.647817][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.655108][ T3598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.663974][ T3598] device bridge_slave_0 entered promiscuous mode [ 1241.675676][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.683267][ T3598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.691404][ T3598] device bridge_slave_1 entered promiscuous mode [ 1241.712665][ T3598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.767289][ T3598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.782495][ T3562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.793266][ T3600] chnl_net:caif_netlink_parms(): no params data found [ 1241.964086][ T3598] team0: Port device team_slave_0 added [ 1242.000175][ T3598] team0: Port device team_slave_1 added 21:11:35 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:11:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x100000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:11:35 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000001c0)) [ 1242.023613][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.037532][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.048959][ T3600] device bridge_slave_0 entered promiscuous mode [ 1242.106114][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.120846][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.151913][ T3600] device bridge_slave_1 entered promiscuous mode [ 1242.168786][ T3602] chnl_net:caif_netlink_parms(): no params data found [ 1242.263759][ T3598] device hsr_slave_0 entered promiscuous mode [ 1242.302239][ T3598] device hsr_slave_1 entered promiscuous mode [ 1242.341034][ T3598] debugfs: Directory 'hsr0' with parent '/' already present! 21:11:35 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1242.597206][ T3600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.664568][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.684148][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.704447][ T3602] device bridge_slave_0 entered promiscuous mode [ 1242.752036][ T3600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.789407][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state 21:11:36 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1242.800677][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.834215][ T3602] device bridge_slave_1 entered promiscuous mode [ 1242.879820][ T3598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.913205][ T26] audit: type=1804 audit(1570050696.292:152): pid=3615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2192/file0" dev="sda1" ino=16705 res=1 [ 1243.018098][ T3598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.030299][ T26] audit: type=1800 audit(1570050696.292:153): pid=3615 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16705 res=0 [ 1243.092229][ T3600] team0: Port device team_slave_0 added [ 1243.114883][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1243.131313][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1243.150889][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1243.159681][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1243.177750][T20758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.184919][T20758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.200424][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1243.209362][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1243.226184][T20758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.233426][T20758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.241887][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1243.251086][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1243.262379][ T3602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.292547][ T3600] team0: Port device team_slave_1 added [ 1243.646110][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1243.661908][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1243.677544][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1243.687401][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1243.704512][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1243.717946][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1243.730100][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1243.748294][ T3602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.775986][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1243.815398][ T3598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1243.855939][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1243.913815][ T3600] device hsr_slave_0 entered promiscuous mode [ 1243.961159][ T3600] device hsr_slave_1 entered promiscuous mode [ 1244.000639][ T3600] debugfs: Directory 'hsr0' with parent '/' already present! [ 1244.017129][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1244.031322][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1244.069942][ T3598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.093931][ T3602] team0: Port device team_slave_0 added [ 1244.153552][ T3602] team0: Port device team_slave_1 added [ 1244.243858][ T3602] device hsr_slave_0 entered promiscuous mode [ 1244.301184][ T3602] device hsr_slave_1 entered promiscuous mode [ 1244.360635][ T3602] debugfs: Directory 'hsr0' with parent '/' already present! [ 1244.477708][ T3634] IPVS: ftp: loaded support on port[0] = 21 [ 1244.518696][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.549600][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.584002][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1244.592254][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1244.712576][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1244.741926][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1244.750605][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.757694][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.781146][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1244.789133][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1244.806810][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1244.819120][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.826317][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.858762][ T3602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.884394][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1244.938019][ T3602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.962748][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1244.980219][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1244.993099][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1245.003087][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1245.011665][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1245.046932][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1245.055070][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1245.064424][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1245.073067][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1245.082649][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1245.091834][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1245.100660][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1245.109401][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.116520][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.124856][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1245.133997][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1245.142758][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.149822][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.157860][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1245.210092][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1245.221378][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1245.230376][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1245.239632][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1245.248697][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1245.265967][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1245.278029][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1245.291152][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1245.312027][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1245.320910][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1245.331565][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1245.339488][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1245.348168][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1245.358249][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1245.391087][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1245.441671][ T3634] chnl_net:caif_netlink_parms(): no params data found [ 1245.459637][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.473251][ T3602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.540308][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.568719][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.577783][ T3634] device bridge_slave_0 entered promiscuous mode [ 1245.589058][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.615833][ T3634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.629665][ T3634] device bridge_slave_1 entered promiscuous mode [ 1245.720338][ T3634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.741131][ T3648] IPVS: ftp: loaded support on port[0] = 21 [ 1245.784991][ T3634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.848008][ T3634] team0: Port device team_slave_0 added [ 1245.895901][ T3634] team0: Port device team_slave_1 added [ 1245.992752][ T3634] device hsr_slave_0 entered promiscuous mode [ 1246.021278][ T3634] device hsr_slave_1 entered promiscuous mode [ 1246.060596][ T3634] debugfs: Directory 'hsr0' with parent '/' already present! 21:11:39 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:39 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000001c0)) 21:11:39 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:11:39 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:39 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:39 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1246.263051][ T3648] chnl_net:caif_netlink_parms(): no params data found 21:11:39 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:39 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1246.476952][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.550710][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.573116][ T3648] device bridge_slave_0 entered promiscuous mode [ 1246.635309][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.670927][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.688108][ T3648] device bridge_slave_1 entered promiscuous mode [ 1246.706979][ T3634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.818419][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1246.835096][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1246.857077][ T3648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.882676][ T3634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.973237][ T26] audit: type=1804 audit(1570050700.352:154): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2193/file0" dev="sda1" ino=16785 res=1 [ 1247.051854][ T26] audit: type=1800 audit(1570050700.352:155): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16785 res=0 [ 1247.167329][ T3648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.672522][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1247.683322][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1247.691906][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.698960][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.707303][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1247.918670][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1247.928272][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1247.938265][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.945417][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.954312][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1247.969532][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1248.010082][ T3648] team0: Port device team_slave_0 added [ 1248.019071][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1248.032964][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1248.043490][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1248.052711][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1248.061941][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1248.070240][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1248.080383][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1248.088897][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1248.097706][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1248.265394][ T3648] team0: Port device team_slave_1 added [ 1248.323974][ T3648] device hsr_slave_0 entered promiscuous mode [ 1248.371194][ T3648] device hsr_slave_1 entered promiscuous mode [ 1248.410734][ T3648] debugfs: Directory 'hsr0' with parent '/' already present! [ 1248.428935][ T3634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.839872][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:11:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x200000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:11:42 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:11:42 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1249.150399][ T3648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.166546][ T3707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.573613][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.597686][ T3648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.620978][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1249.628941][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1249.652243][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1249.681198][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1249.690191][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1249.698919][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.706117][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.714497][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1249.729681][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1249.749759][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.756925][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.788101][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1250.030743][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1250.039398][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1250.048500][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1250.057920][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1250.067273][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1250.077524][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1250.091699][T20758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1250.258235][ T3648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1250.271273][ T3648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.286057][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1250.296044][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1250.305322][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1250.314043][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1250.322934][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1250.343269][ T3648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.352177][T25238] device bridge_slave_1 left promiscuous mode [ 1250.358429][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.411927][T25238] device bridge_slave_0 left promiscuous mode [ 1250.418139][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.493081][T25238] device bridge_slave_1 left promiscuous mode [ 1250.499388][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.541532][T25238] device bridge_slave_0 left promiscuous mode [ 1250.547790][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.612978][T25238] device bridge_slave_1 left promiscuous mode [ 1250.619244][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.652872][T25238] device bridge_slave_0 left promiscuous mode [ 1250.659140][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.751077][T25238] device hsr_slave_0 left promiscuous mode [ 1254.790752][T25238] device hsr_slave_1 left promiscuous mode [ 1254.856875][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1254.871289][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1254.884010][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.927033][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.024845][T25238] bond0 (unregistering): Released all slaves [ 1255.223609][T25238] device hsr_slave_0 left promiscuous mode [ 1255.270783][T25238] device hsr_slave_1 left promiscuous mode [ 1255.344711][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1255.359204][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1255.373784][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.418031][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.489941][T25238] bond0 (unregistering): Released all slaves [ 1255.651532][T25238] device hsr_slave_0 left promiscuous mode [ 1255.690690][T25238] device hsr_slave_1 left promiscuous mode [ 1255.749047][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1255.766394][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1255.779313][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.845626][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.940019][T25238] bond0 (unregistering): Released all slaves [ 1256.058734][ T3721] IPVS: ftp: loaded support on port[0] = 21 [ 1256.228410][ T3721] chnl_net:caif_netlink_parms(): no params data found [ 1256.264640][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.280129][ T3721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.288454][ T3721] device bridge_slave_0 entered promiscuous mode [ 1256.306293][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.315963][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state 21:11:49 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:11:49 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:11:49 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:11:49 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000001c0)) 21:11:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x300000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1256.326065][ T3721] device bridge_slave_1 entered promiscuous mode [ 1256.387138][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1256.583573][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1256.682691][ T3721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 21:11:50 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:11:50 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:11:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x400000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1256.752175][ T3721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.170659][ T26] audit: type=1804 audit(1570050710.542:156): pid=3745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2194/file0" dev="sda1" ino=16818 res=1 21:11:50 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) [ 1257.239585][ T26] audit: type=1800 audit(1570050710.542:157): pid=3745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16818 res=0 [ 1257.671792][ T3721] team0: Port device team_slave_0 added [ 1258.160557][ T26] audit: type=1804 audit(1570050711.532:158): pid=3751 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2195/file0" dev="sda1" ino=16532 res=1 21:11:51 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) [ 1258.278119][ T26] audit: type=1800 audit(1570050711.532:159): pid=3751 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16532 res=0 [ 1258.679349][ T3721] team0: Port device team_slave_1 added [ 1258.813911][ T3721] device hsr_slave_0 entered promiscuous mode [ 1258.911027][ T3721] device hsr_slave_1 entered promiscuous mode [ 1258.950688][ T3721] debugfs: Directory 'hsr0' with parent '/' already present! [ 1259.088654][ T3721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.135489][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1259.154712][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:11:52 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) [ 1259.157648][ T26] audit: type=1804 audit(1570050712.532:160): pid=3755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2196/file0" dev="sda1" ino=16532 res=1 [ 1259.176478][ T3721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.245285][ T26] audit: type=1800 audit(1570050712.572:161): pid=3755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16532 res=0 [ 1259.246735][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1259.333598][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1259.360888][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.368040][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1259.438549][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1259.453396][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1259.477516][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1259.496916][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.504095][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.529660][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1259.561640][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1259.581972][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1259.607380][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1259.640568][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1259.652220][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1259.677487][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1259.697986][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1259.727335][ T3721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1259.761737][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1259.779774][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1259.848554][ T3721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.214390][ T26] audit: type=1804 audit(1570050713.592:162): pid=3758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2197/file0" dev="sda1" ino=16530 res=1 [ 1260.253483][ T26] audit: type=1800 audit(1570050713.592:163): pid=3758 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16530 res=0 [ 1260.504695][ T3766] IPVS: ftp: loaded support on port[0] = 21 [ 1260.718380][ T3766] chnl_net:caif_netlink_parms(): no params data found [ 1260.807534][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.820762][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.828845][ T3766] device bridge_slave_0 entered promiscuous mode [ 1260.883889][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.900709][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.908812][ T3766] device bridge_slave_1 entered promiscuous mode [ 1261.987282][ T3766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.006078][ T3773] IPVS: ftp: loaded support on port[0] = 21 [ 1262.017157][ T3766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.018011][ T3775] IPVS: ftp: loaded support on port[0] = 21 [ 1262.037121][ T3774] IPVS: ftp: loaded support on port[0] = 21 [ 1262.528964][ T3766] team0: Port device team_slave_0 added [ 1262.545593][ T3766] team0: Port device team_slave_1 added [ 1262.574917][ T3777] IPVS: ftp: loaded support on port[0] = 21 [ 1263.525081][ T3766] device hsr_slave_0 entered promiscuous mode [ 1263.571052][ T3766] device hsr_slave_1 entered promiscuous mode [ 1263.610739][ T3766] debugfs: Directory 'hsr0' with parent '/' already present! [ 1264.557891][ T3773] chnl_net:caif_netlink_parms(): no params data found [ 1264.714180][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.723815][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.732270][ T3773] device bridge_slave_0 entered promiscuous mode [ 1264.742357][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.749506][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.757850][ T3773] device bridge_slave_1 entered promiscuous mode [ 1265.202165][ T3774] chnl_net:caif_netlink_parms(): no params data found [ 1265.220371][ T3775] chnl_net:caif_netlink_parms(): no params data found [ 1265.248679][ T3777] chnl_net:caif_netlink_parms(): no params data found [ 1265.736659][ T3773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.751419][ T3773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.814963][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.826379][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.836695][ T3775] device bridge_slave_0 entered promiscuous mode [ 1265.847052][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.854433][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.862770][ T3775] device bridge_slave_1 entered promiscuous mode [ 1266.362769][ T3773] team0: Port device team_slave_0 added [ 1266.368869][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.376271][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.384527][ T3774] device bridge_slave_0 entered promiscuous mode [ 1266.421728][ T3773] team0: Port device team_slave_1 added [ 1266.433029][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.440126][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.448733][ T3774] device bridge_slave_1 entered promiscuous mode [ 1266.463783][T25238] device bridge_slave_1 left promiscuous mode [ 1266.469999][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.521859][T25238] device bridge_slave_0 left promiscuous mode [ 1266.528027][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.603507][T25238] device bridge_slave_1 left promiscuous mode [ 1266.609958][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.681407][T25238] device bridge_slave_0 left promiscuous mode [ 1266.687842][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.765601][T25238] device bridge_slave_1 left promiscuous mode [ 1266.778464][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.822291][T25238] device bridge_slave_0 left promiscuous mode [ 1266.828525][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.863760][T25238] device bridge_slave_1 left promiscuous mode [ 1266.869980][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.901812][T25238] device bridge_slave_0 left promiscuous mode [ 1266.908024][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.952896][T25238] device bridge_slave_1 left promiscuous mode [ 1266.959084][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.011592][T25238] device bridge_slave_0 left promiscuous mode [ 1267.017799][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.052806][T25238] device bridge_slave_1 left promiscuous mode [ 1267.059034][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.101469][T25238] device bridge_slave_0 left promiscuous mode [ 1267.107641][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.111343][T25238] device hsr_slave_0 left promiscuous mode [ 1280.150815][T25238] device hsr_slave_1 left promiscuous mode [ 1280.208187][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1280.225724][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1280.243295][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.306083][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.404879][T25238] bond0 (unregistering): Released all slaves [ 1280.571869][T25238] device hsr_slave_0 left promiscuous mode [ 1280.610774][T25238] device hsr_slave_1 left promiscuous mode [ 1280.658387][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1280.674775][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1280.693510][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.755361][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.855562][T25238] bond0 (unregistering): Released all slaves [ 1281.042263][T25238] device hsr_slave_0 left promiscuous mode [ 1281.090766][T25238] device hsr_slave_1 left promiscuous mode [ 1281.165566][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1281.180183][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1281.193567][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.227107][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.312433][T25238] bond0 (unregistering): Released all slaves [ 1281.451577][T25238] device hsr_slave_0 left promiscuous mode [ 1281.490957][T25238] device hsr_slave_1 left promiscuous mode [ 1281.545579][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1281.558731][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1281.572645][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.608720][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.699599][T25238] bond0 (unregistering): Released all slaves [ 1281.831627][T25238] device hsr_slave_0 left promiscuous mode [ 1281.870701][T25238] device hsr_slave_1 left promiscuous mode [ 1281.919107][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1281.934891][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1281.947843][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.014774][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.090097][T25238] bond0 (unregistering): Released all slaves [ 1282.221511][T25238] device hsr_slave_0 left promiscuous mode [ 1282.260743][T25238] device hsr_slave_1 left promiscuous mode [ 1282.309121][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1282.324911][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1282.339940][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.385595][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.478915][T25238] bond0 (unregistering): Released all slaves [ 1282.587171][ T3775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.601649][ T3775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.611569][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.618628][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.627251][ T3777] device bridge_slave_0 entered promiscuous mode [ 1282.637951][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.645247][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.653642][ T3777] device bridge_slave_1 entered promiscuous mode [ 1282.696785][ T3774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.715689][ T3777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.728032][ T3777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.738957][ T3775] team0: Port device team_slave_0 added [ 1282.752764][ T3774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.774477][ T3766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.788222][ T3775] team0: Port device team_slave_1 added [ 1282.843677][ T3773] device hsr_slave_0 entered promiscuous mode [ 1282.886860][ T3773] device hsr_slave_1 entered promiscuous mode [ 1282.940687][ T3773] debugfs: Directory 'hsr0' with parent '/' already present! [ 1282.959584][ T3774] team0: Port device team_slave_0 added [ 1282.979581][ T3777] team0: Port device team_slave_0 added [ 1282.991242][ T3777] team0: Port device team_slave_1 added [ 1283.016933][ T3766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.026449][ T3774] team0: Port device team_slave_1 added [ 1283.054561][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1283.062682][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1283.102763][ T3775] device hsr_slave_0 entered promiscuous mode [ 1283.146372][ T3775] device hsr_slave_1 entered promiscuous mode [ 1283.200746][ T3775] debugfs: Directory 'hsr0' with parent '/' already present! [ 1283.273882][ T3774] device hsr_slave_0 entered promiscuous mode [ 1283.331255][ T3774] device hsr_slave_1 entered promiscuous mode [ 1283.370756][ T3774] debugfs: Directory 'hsr0' with parent '/' already present! [ 1283.412510][ T3777] device hsr_slave_0 entered promiscuous mode [ 1283.450952][ T3777] device hsr_slave_1 entered promiscuous mode [ 1283.510612][ T3777] debugfs: Directory 'hsr0' with parent '/' already present! [ 1283.521742][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1283.530452][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1283.538869][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.545985][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.554249][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1283.595828][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1283.604638][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1283.614597][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.621718][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.629312][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1283.639971][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1283.648939][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1283.658228][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1283.666798][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1283.675330][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1283.684471][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1283.714271][ T3766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1283.728183][ T3766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1283.755062][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1283.763822][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1283.772572][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1283.782228][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1283.791684][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1283.812749][ T3766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.920335][ T3773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.986188][ T3774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.000042][ T3777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.016266][ T3775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.030769][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.038581][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.057839][ T3777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.070420][ T3773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.081915][ T3774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.100864][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.110442][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.118725][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.129937][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.139572][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.150250][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.167155][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.174297][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.183153][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1284.191318][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.212500][ T3775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.246250][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.262186][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.273861][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.282610][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.289671][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.305609][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.316765][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.326157][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.333260][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.341163][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.349855][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.359035][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.368581][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.377726][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.387234][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.397040][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.404190][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.412447][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.421700][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.430188][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.437292][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.506980][ T3774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1284.518629][ T3774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1284.536013][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.544277][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.552698][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.560783][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1284.569599][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.578785][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.586082][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.594794][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.604259][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.612965][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.620116][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.627884][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.637023][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.645924][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.655088][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.663647][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.672809][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1284.682817][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1284.691497][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.700024][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.709030][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.717493][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1284.726394][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1284.735366][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1284.744293][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1284.753360][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.760411][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.768775][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1284.777570][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1284.786540][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1284.795197][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1284.803820][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1284.812710][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1284.821210][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1284.829505][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1284.837927][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1284.846716][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1284.855263][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1284.863825][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1284.872749][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1284.880866][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.888714][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.896790][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.905319][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1284.937210][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1284.945914][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1284.955089][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1284.964533][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1284.976729][ T3775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1284.988842][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1285.050777][ T3774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.061866][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1285.070355][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1285.085939][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1285.095606][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1285.193248][ T3773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.324338][ T3775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.332581][ T3777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1285.348904][ T3777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.361553][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1285.369992][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1285.378769][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1285.388151][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1285.396998][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1285.516082][ T3777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.795569][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1286.155869][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:19 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:19 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r2, 0x0, 0x0, 0x0) 21:12:19 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:12:19 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:19 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x500000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:19 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:19 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1286.486837][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:20 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1286.642476][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x600000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1286.926924][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:20 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1287.039598][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1287.125912][ T26] audit: type=1804 audit(1570050740.502:164): pid=3847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2198/file0" dev="sda1" ino=17041 res=1 21:12:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x700000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1287.326948][ T26] audit: type=1800 audit(1570050740.552:165): pid=3847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17041 res=0 [ 1287.532284][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:20 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:20 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) 21:12:20 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xa00000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1287.612484][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:21 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1288.415686][ T26] audit: type=1800 audit(1570050741.792:166): pid=3887 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16690 res=0 21:12:21 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:12:22 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:22 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1288.887983][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1288.926474][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xa02000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1289.431964][ T26] audit: type=1804 audit(1570050742.812:167): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2200/file0" dev="sda1" ino=16547 res=1 21:12:22 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1289.487882][ T26] audit: type=1800 audit(1570050742.842:168): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16547 res=0 [ 1290.470425][ T26] audit: type=1804 audit(1570050743.842:169): pid=3913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2201/file0" dev="sda1" ino=16626 res=1 [ 1290.543509][ T26] audit: type=1800 audit(1570050743.882:170): pid=3913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16626 res=0 [ 1291.242470][ T3917] IPVS: ftp: loaded support on port[0] = 21 [ 1291.358348][ T3917] chnl_net:caif_netlink_parms(): no params data found [ 1291.397315][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.405407][ T3917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.413718][ T3917] device bridge_slave_0 entered promiscuous mode [ 1291.422537][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.429691][ T3917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.437997][ T3917] device bridge_slave_1 entered promiscuous mode [ 1291.461134][ T3917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.472857][ T3917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.504975][ T3917] team0: Port device team_slave_0 added [ 1291.512650][ T3917] team0: Port device team_slave_1 added [ 1291.573771][ T3917] device hsr_slave_0 entered promiscuous mode [ 1291.618987][ T3917] device hsr_slave_1 entered promiscuous mode [ 1291.690671][ T3917] debugfs: Directory 'hsr0' with parent '/' already present! [ 1291.719188][ T3917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.726346][ T3917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.733790][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.740901][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.827300][ T3917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.852277][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1291.869365][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.880411][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.921030][ T3917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.947103][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.977530][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.984717][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.011908][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.018970][ T3920] IPVS: ftp: loaded support on port[0] = 21 [ 1292.020344][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.032963][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.051711][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1292.068830][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1292.093351][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1292.102355][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1292.123903][ T3917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1292.137346][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1292.155570][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1292.195999][ T3917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.290336][ T3920] chnl_net:caif_netlink_parms(): no params data found [ 1292.329207][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.337051][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.345200][ T3920] device bridge_slave_0 entered promiscuous mode [ 1292.367471][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.390632][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.398759][ T3920] device bridge_slave_1 entered promiscuous mode [ 1292.472894][ T3920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.499069][ T3920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.519289][ T3929] IPVS: ftp: loaded support on port[0] = 21 21:12:25 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:12:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xf00000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:25 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1292.568432][ T3920] team0: Port device team_slave_0 added [ 1292.584929][ T3920] team0: Port device team_slave_1 added [ 1292.627093][ T3933] IPVS: ftp: loaded support on port[0] = 21 [ 1292.661758][ T3937] __nla_validate_parse: 2 callbacks suppressed [ 1292.661767][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:26 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1292.765256][ T3920] device hsr_slave_0 entered promiscuous mode [ 1292.841749][ T3920] device hsr_slave_1 entered promiscuous mode [ 1292.880654][ T3920] debugfs: Directory 'hsr0' with parent '/' already present! [ 1292.895896][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x2000000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1293.028563][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.035706][ T3920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.043145][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.050235][ T3920] bridge0: port 1(bridge_slave_0) entered forwarding state 21:12:26 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1293.179866][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1293.277179][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1293.344426][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.387116][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.426986][ T26] audit: type=1804 audit(1570050746.802:171): pid=3945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2202/file0" dev="sda1" ino=16897 res=1 [ 1293.502195][ T26] audit: type=1800 audit(1570050746.802:172): pid=3945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16897 res=0 [ 1294.133519][ T3929] chnl_net:caif_netlink_parms(): no params data found [ 1294.511224][ T3933] chnl_net:caif_netlink_parms(): no params data found [ 1294.826117][ T3920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.847427][ T3929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.854750][ T3929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.863588][ T3929] device bridge_slave_0 entered promiscuous mode [ 1294.877202][ T3929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.885724][ T3929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.894296][ T3929] device bridge_slave_1 entered promiscuous mode [ 1294.931523][ T3929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.942749][ T3929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.953945][ T3933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.962376][ T3933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.970282][ T3933] device bridge_slave_0 entered promiscuous mode [ 1295.282958][ T3920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.291058][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1295.298880][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1295.313281][ T3933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.320355][ T3933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.328783][ T3933] device bridge_slave_1 entered promiscuous mode [ 1295.664605][ T3933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.684118][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1295.694031][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1295.702983][T25984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.710170][T25984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.718478][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1295.727848][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1295.736864][T25984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.743950][T25984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.753744][ T3929] team0: Port device team_slave_0 added [ 1295.762805][ T3929] team0: Port device team_slave_1 added [ 1295.770288][ T3933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.106316][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1296.116700][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1296.125499][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1296.134228][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1296.165237][ T3933] team0: Port device team_slave_0 added [ 1296.177165][ T3933] team0: Port device team_slave_1 added [ 1296.184382][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1296.193875][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1296.203096][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1296.211614][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1296.220033][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1296.228550][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1296.237183][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1296.249260][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1296.303742][ T3929] device hsr_slave_0 entered promiscuous mode [ 1296.341128][ T3929] device hsr_slave_1 entered promiscuous mode [ 1296.380725][ T3929] debugfs: Directory 'hsr0' with parent '/' already present! [ 1296.734656][ T3933] device hsr_slave_0 entered promiscuous mode [ 1296.791093][ T3933] device hsr_slave_1 entered promiscuous mode [ 1296.841104][ T3933] debugfs: Directory 'hsr0' with parent '/' already present! [ 1296.861957][ T3920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.572544][ T3929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.590463][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1297.604604][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1297.624929][T25238] device bridge_slave_1 left promiscuous mode [ 1297.649507][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.751775][T25238] device bridge_slave_0 left promiscuous mode [ 1297.758119][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.802965][T25238] device bridge_slave_1 left promiscuous mode [ 1297.809171][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.852201][T25238] device bridge_slave_0 left promiscuous mode [ 1297.858625][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.912861][T25238] device bridge_slave_1 left promiscuous mode [ 1297.919077][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.971795][T25238] device bridge_slave_0 left promiscuous mode [ 1297.978064][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.032869][T25238] device bridge_slave_1 left promiscuous mode [ 1298.039115][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.091894][T25238] device bridge_slave_0 left promiscuous mode [ 1298.098248][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.291250][T25238] device hsr_slave_0 left promiscuous mode [ 1306.330792][T25238] device hsr_slave_1 left promiscuous mode [ 1306.404112][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1306.417803][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1306.429392][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.466496][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1306.568904][T25238] bond0 (unregistering): Released all slaves [ 1306.751378][T25238] device hsr_slave_0 left promiscuous mode [ 1306.800963][T25238] device hsr_slave_1 left promiscuous mode [ 1306.878734][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1306.893812][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1306.905287][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1306.949402][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.029098][T25238] bond0 (unregistering): Released all slaves [ 1307.152458][T25238] device hsr_slave_0 left promiscuous mode [ 1307.200912][T25238] device hsr_slave_1 left promiscuous mode [ 1307.279904][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1307.300888][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1307.316223][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.379411][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.469448][T25238] bond0 (unregistering): Released all slaves [ 1307.601566][T25238] device hsr_slave_0 left promiscuous mode [ 1307.640773][T25238] device hsr_slave_1 left promiscuous mode [ 1307.689708][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1307.706295][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1307.719994][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.761177][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.859944][T25238] bond0 (unregistering): Released all slaves [ 1307.967347][ T3929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.993656][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1308.003093][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1308.012134][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.019174][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.029457][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1308.054748][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.070660][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1308.079272][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1308.089104][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.096201][T10596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.104527][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 21:12:41 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x3202000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1308.113403][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1308.122193][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1308.130814][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1308.139847][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1308.195432][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1308.206411][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1308.226213][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1308.243697][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1308.252385][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1308.261976][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1308.289946][ T3933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.298988][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1308.309588][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1308.327137][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1308.336970][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1308.389005][ T3929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.396669][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1308.422979][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1308.441896][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1308.450395][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.457500][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.479144][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1308.489472][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1308.519724][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.526888][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.538005][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1308.580680][ T3933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1308.592033][ T3933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1308.607706][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1308.616100][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1308.625750][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1308.635332][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1308.644887][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1308.654891][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1308.663319][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1308.671874][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1308.680268][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1308.689280][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1308.698008][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1308.706090][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1308.763410][ T3933] 8021q: adding VLAN 0 to HW filter on device batadv0 21:12:42 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:43 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:43 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:12:43 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) 21:12:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x3f00000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:43 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:43 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:43 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1309.836975][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:43 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1309.994510][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:43 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:12:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x4000000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:43 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:43 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:43 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1310.292317][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1310.406790][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:43 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1310.588720][ T26] audit: type=1800 audit(1570050763.962:173): pid=4030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17201 res=0 21:12:44 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) 21:12:44 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:12:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x4004000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:44 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:12:44 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:12:44 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1311.473853][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1311.797087][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x4800000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1311.864114][ T26] audit: type=1804 audit(1570050765.242:174): pid=4076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2204/file0" dev="sda1" ino=16689 res=1 21:12:45 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) [ 1311.934047][ T26] audit: type=1800 audit(1570050765.242:175): pid=4076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16689 res=0 21:12:45 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1312.561468][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1312.615692][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x4c00000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x6000000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:12:46 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1312.960428][ T26] audit: type=1804 audit(1570050766.332:176): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2205/file0" dev="sda1" ino=16645 res=1 [ 1313.077271][ T26] audit: type=1800 audit(1570050766.372:177): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16645 res=0 21:12:46 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1314.075274][ T26] audit: type=1804 audit(1570050767.452:178): pid=4111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2206/file0" dev="sda1" ino=16516 res=1 [ 1314.130601][ T26] audit: type=1800 audit(1570050767.452:179): pid=4111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16516 res=0 [ 1314.783048][ T4115] IPVS: ftp: loaded support on port[0] = 21 [ 1314.858176][ T4115] chnl_net:caif_netlink_parms(): no params data found [ 1314.888782][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.897110][ T4115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.905299][ T4115] device bridge_slave_0 entered promiscuous mode [ 1314.913393][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.921362][ T4115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.929080][ T4115] device bridge_slave_1 entered promiscuous mode [ 1314.950859][ T4115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.962166][ T4115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.980804][ T4115] team0: Port device team_slave_0 added [ 1314.988116][ T4115] team0: Port device team_slave_1 added [ 1315.073912][ T4115] device hsr_slave_0 entered promiscuous mode [ 1315.120998][ T4115] device hsr_slave_1 entered promiscuous mode [ 1315.170683][ T4115] debugfs: Directory 'hsr0' with parent '/' already present! [ 1315.191575][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.198672][ T4115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.206125][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.213225][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.262802][ T4115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.285135][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1315.297324][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.306299][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.315514][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1315.330420][ T4115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.347428][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1315.359566][T25984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.366735][T25984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.407114][ T4118] IPVS: ftp: loaded support on port[0] = 21 [ 1315.414298][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1315.425794][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.432900][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.455017][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1315.464702][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1315.473206][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1315.487252][ T4115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.499368][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1315.517047][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1315.526243][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1315.557676][ T4115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.665237][ T4118] chnl_net:caif_netlink_parms(): no params data found [ 1316.295298][ T4118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.303248][ T4118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.312141][ T4118] device bridge_slave_0 entered promiscuous mode [ 1316.320041][ T4118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.327760][ T4118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.356042][ T4118] device bridge_slave_1 entered promiscuous mode [ 1316.384174][ T4126] IPVS: ftp: loaded support on port[0] = 21 [ 1316.751742][ T4118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.057863][ T4118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.084798][ T4118] team0: Port device team_slave_0 added [ 1317.375374][ T4118] team0: Port device team_slave_1 added [ 1317.734752][ T4118] device hsr_slave_0 entered promiscuous mode [ 1317.795345][ T4118] device hsr_slave_1 entered promiscuous mode [ 1317.850732][ T4118] debugfs: Directory 'hsr0' with parent '/' already present! [ 1318.467723][ T4126] chnl_net:caif_netlink_parms(): no params data found [ 1318.515365][ T4126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.524451][ T4126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.532696][ T4126] device bridge_slave_0 entered promiscuous mode [ 1318.835777][ T4126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.844454][ T4126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.853244][ T4126] device bridge_slave_1 entered promiscuous mode [ 1319.160436][ T4118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.175797][ T4126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.193720][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1319.202140][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1319.211601][ T4126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.226190][T25238] device bridge_slave_1 left promiscuous mode [ 1319.232686][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.272793][T25238] device bridge_slave_0 left promiscuous mode [ 1319.279064][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.332148][T25238] device bridge_slave_1 left promiscuous mode [ 1319.338438][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.371875][T25238] device bridge_slave_0 left promiscuous mode [ 1319.380286][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.442814][T25238] device bridge_slave_1 left promiscuous mode [ 1319.449074][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.481849][T25238] device bridge_slave_0 left promiscuous mode [ 1319.488123][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.543625][T25238] device bridge_slave_1 left promiscuous mode [ 1319.549836][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.592542][T25238] device bridge_slave_0 left promiscuous mode [ 1319.598798][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.441306][T25238] device hsr_slave_0 left promiscuous mode [ 1327.480805][T25238] device hsr_slave_1 left promiscuous mode [ 1327.558631][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1327.573343][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1327.585233][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.655134][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.748782][T25238] bond0 (unregistering): Released all slaves [ 1327.901582][T25238] device hsr_slave_0 left promiscuous mode [ 1327.940895][T25238] device hsr_slave_1 left promiscuous mode [ 1327.995012][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1328.009386][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1328.022941][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.075985][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.169886][T25238] bond0 (unregistering): Released all slaves [ 1328.331378][T25238] device hsr_slave_0 left promiscuous mode [ 1328.370905][T25238] device hsr_slave_1 left promiscuous mode [ 1328.423951][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1328.438050][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1328.450779][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.478288][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.560895][T25238] bond0 (unregistering): Released all slaves [ 1328.752132][T25238] device hsr_slave_0 left promiscuous mode [ 1328.791027][T25238] device hsr_slave_1 left promiscuous mode [ 1328.858696][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1328.872939][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1328.884056][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.926713][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.024655][T25238] bond0 (unregistering): Released all slaves [ 1329.087576][ T4118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.105567][ T4126] team0: Port device team_slave_0 added [ 1329.114208][ T4126] team0: Port device team_slave_1 added [ 1329.130594][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1329.141231][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1329.149564][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.156730][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.165142][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1329.174180][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1329.182866][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.189918][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.198245][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1329.223751][ T4118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1329.234480][ T4118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1329.255210][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1329.264882][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1329.274126][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1329.283019][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1329.292233][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1329.301286][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1329.311117][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1329.319481][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1329.328491][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1329.337212][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1329.346475][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1329.354551][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1329.392811][ T4126] device hsr_slave_0 entered promiscuous mode [ 1329.431084][ T4126] device hsr_slave_1 entered promiscuous mode [ 1329.470666][ T4126] debugfs: Directory 'hsr0' with parent '/' already present! [ 1329.506831][ T4118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.571064][ T4126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.782117][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1329.790251][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1329.807302][ T4126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.830247][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1329.846010][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1329.856226][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.863370][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.890746][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1329.899258][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1329.909002][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1329.918000][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.925131][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.934495][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1329.943506][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1329.952929][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1329.962274][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1329.983113][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1329.992321][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1330.002570][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1330.012037][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1330.022728][ T4126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1330.049796][ T4126] 8021q: adding VLAN 0 to HW filter on device batadv0 21:13:03 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:03 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:03 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x6800000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1330.468307][ T4156] __nla_validate_parse: 4 callbacks suppressed [ 1330.468317][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:03 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:03 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x0, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:03 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1330.665285][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:04 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:04 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x6c00000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1330.958447][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1331.060939][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x7400000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1331.237132][ T26] audit: type=1800 audit(1570050784.612:180): pid=4159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16897 res=0 21:13:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:04 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, 0x0, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1332.022164][ T4183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1332.053152][ T4182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1332.290560][ T26] audit: type=1804 audit(1570050785.662:181): pid=4193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2208/file0" dev="sda1" ino=16595 res=1 [ 1332.360631][ T26] audit: type=1800 audit(1570050785.662:182): pid=4193 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16595 res=0 [ 1332.623174][ T4196] IPVS: ftp: loaded support on port[0] = 21 [ 1332.852525][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 1332.929056][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.950698][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.959054][ T4196] device bridge_slave_0 entered promiscuous mode [ 1332.982680][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.989880][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.011606][ T4196] device bridge_slave_1 entered promiscuous mode [ 1333.056590][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.082984][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.124052][ T4196] team0: Port device team_slave_0 added [ 1333.142598][ T4196] team0: Port device team_slave_1 added [ 1333.223715][ T4196] device hsr_slave_0 entered promiscuous mode [ 1333.261002][ T4196] device hsr_slave_1 entered promiscuous mode [ 1333.300600][ T4196] debugfs: Directory 'hsr0' with parent '/' already present! [ 1333.322614][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.329723][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.337166][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.344273][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.394046][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.409129][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1333.418480][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.427086][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.443305][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.456388][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1333.465689][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.472802][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.509457][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1333.519218][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.527857][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.538225][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1333.566953][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1333.578112][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1333.599062][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1333.607126][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1333.616531][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1333.625933][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1333.636481][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1333.660582][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 21:13:07 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:07 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(0x0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x7a00000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:07 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1333.804741][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1333.851200][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:07 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:07 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(0x0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1334.178254][ T4232] IPVS: ftp: loaded support on port[0] = 21 [ 1334.405456][ T4232] chnl_net:caif_netlink_parms(): no params data found [ 1334.621379][ T26] audit: type=1800 audit(1570050788.002:183): pid=4221 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16820 res=0 [ 1335.034439][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.042304][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.050276][ T4232] device bridge_slave_0 entered promiscuous mode [ 1335.059412][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.066610][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.074582][ T4232] device bridge_slave_1 entered promiscuous mode [ 1335.232284][ T4232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.245012][ T4232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.411513][ T4232] team0: Port device team_slave_0 added [ 1335.419487][ T4232] team0: Port device team_slave_1 added [ 1335.463914][ T4232] device hsr_slave_0 entered promiscuous mode [ 1335.501127][ T4232] device hsr_slave_1 entered promiscuous mode [ 1335.571075][ T4232] debugfs: Directory 'hsr0' with parent '/' already present! [ 1335.722798][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.730133][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.737559][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.744743][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.923602][ T4232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1335.936753][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1335.945280][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.955779][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.976579][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1335.997343][ T4232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.165791][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1336.174537][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.181630][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1336.197350][ T4238] IPVS: ftp: loaded support on port[0] = 21 [ 1336.360064][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1336.370094][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1336.378745][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.385845][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1336.396312][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1336.405086][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1336.566260][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1336.576910][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1336.585434][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1336.594646][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1336.604577][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1336.622259][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1336.635211][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1336.783980][ T4232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1336.796175][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1336.804692][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1336.813860][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1336.877184][T25238] device bridge_slave_1 left promiscuous mode [ 1336.884021][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.941983][T25238] device bridge_slave_0 left promiscuous mode [ 1336.948327][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.992240][T25238] device bridge_slave_1 left promiscuous mode [ 1336.998855][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.044242][T25238] device bridge_slave_0 left promiscuous mode [ 1337.050681][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.762654][T25238] device hsr_slave_0 left promiscuous mode [ 1340.800809][T25238] device hsr_slave_1 left promiscuous mode [ 1340.878952][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1340.894009][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1340.908000][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.945446][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.028884][T25238] bond0 (unregistering): Released all slaves [ 1341.231264][T25238] device hsr_slave_0 left promiscuous mode [ 1341.280898][T25238] device hsr_slave_1 left promiscuous mode [ 1341.332983][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1341.347234][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1341.359217][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.410072][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.498331][T25238] bond0 (unregistering): Released all slaves [ 1341.607425][ T4238] chnl_net:caif_netlink_parms(): no params data found [ 1341.641167][ T4232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.676576][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.685194][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.693910][ T4238] device bridge_slave_0 entered promiscuous mode [ 1341.702725][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.709863][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.718637][ T4238] device bridge_slave_1 entered promiscuous mode [ 1341.745290][ T4238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.758866][ T4238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.778088][ T4238] team0: Port device team_slave_0 added [ 1341.786028][ T4238] team0: Port device team_slave_1 added [ 1341.852803][ T4238] device hsr_slave_0 entered promiscuous mode [ 1341.890885][ T4238] device hsr_slave_1 entered promiscuous mode [ 1341.941599][ T4238] debugfs: Directory 'hsr0' with parent '/' already present! [ 1341.986737][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.993985][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.001398][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.008473][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state 21:13:15 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1342.163664][ T4238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.207606][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1342.222751][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.239686][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.250373][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1342.285302][ T4238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.300075][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1342.309461][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.316590][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.344523][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1342.353772][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.360904][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.461704][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1342.482171][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1342.491572][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1342.512185][ T4238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1342.523042][ T4238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1342.536036][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1342.545178][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1342.560889][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1342.576810][ T4238] 8021q: adding VLAN 0 to HW filter on device batadv0 21:13:16 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:16 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x8100000000000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:16 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:16 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(0x0, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:16 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:16 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1342.832524][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:16 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1342.874094][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:16 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:16 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x9effffff00000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:16 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:16 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:16 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:16 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1343.315165][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1343.407927][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1343.635338][ T26] audit: type=1804 audit(1570050797.012:184): pid=4281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2210/file0" dev="sda1" ino=16897 res=1 21:13:17 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:17 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xf0ffffff00000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:17 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:17 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:17 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:17 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x0, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1343.759878][ T26] audit: type=1800 audit(1570050797.012:185): pid=4281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16897 res=0 [ 1343.791185][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1343.832964][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:17 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x0, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xffffff7f00000000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:17 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:17 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x0, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1344.723782][ T26] audit: type=1804 audit(1570050798.102:186): pid=4352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2211/file0" dev="sda1" ino=16706 res=1 21:13:18 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1344.781664][ T26] audit: type=1800 audit(1570050798.102:187): pid=4352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16706 res=0 [ 1344.972619][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1345.004691][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1345.694562][ T26] audit: type=1804 audit(1570050799.072:188): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2212/file0" dev="sda1" ino=16548 res=1 [ 1345.790465][ T26] audit: type=1800 audit(1570050799.102:189): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16548 res=0 [ 1347.008487][ T4371] IPVS: ftp: loaded support on port[0] = 21 [ 1347.088871][ T4371] chnl_net:caif_netlink_parms(): no params data found [ 1347.119269][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.126621][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.134816][ T4371] device bridge_slave_0 entered promiscuous mode [ 1347.143086][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.150287][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.158257][ T4371] device bridge_slave_1 entered promiscuous mode [ 1347.635337][ T4371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.636835][ T4374] IPVS: ftp: loaded support on port[0] = 21 [ 1347.651037][ T4371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.675019][ T4371] team0: Port device team_slave_0 added [ 1347.683535][ T4371] team0: Port device team_slave_1 added [ 1347.954654][ T4371] device hsr_slave_0 entered promiscuous mode [ 1348.011205][ T4371] device hsr_slave_1 entered promiscuous mode [ 1348.050966][ T4371] debugfs: Directory 'hsr0' with parent '/' already present! [ 1348.566170][ T4374] chnl_net:caif_netlink_parms(): no params data found [ 1348.581950][ T4371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.826098][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1348.834249][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1349.064846][ T4371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.072684][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.079752][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.092607][ T4374] device bridge_slave_0 entered promiscuous mode [ 1349.107902][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.115848][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.124394][ T4374] device bridge_slave_1 entered promiscuous mode [ 1349.132963][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1349.142359][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1349.151769][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.158835][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.167206][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1349.175940][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1349.185209][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.192338][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.200000][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1349.431613][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1349.450143][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.463514][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.478335][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1349.711327][ T4374] team0: Port device team_slave_0 added [ 1349.718238][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1349.727725][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1349.736936][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1349.746345][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1349.760093][ T4371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1349.772329][ T4371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1349.785228][ T4374] team0: Port device team_slave_1 added [ 1349.793498][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1349.802406][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1349.810839][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1349.819216][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1349.827828][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1349.836487][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1350.102614][ T4374] device hsr_slave_0 entered promiscuous mode [ 1350.151335][ T4374] device hsr_slave_1 entered promiscuous mode [ 1350.210696][ T4374] debugfs: Directory 'hsr0' with parent '/' already present! [ 1350.222841][ T4371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.232306][T25238] device bridge_slave_1 left promiscuous mode [ 1350.238546][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.301620][T25238] device bridge_slave_0 left promiscuous mode [ 1350.307834][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.362335][T25238] device bridge_slave_1 left promiscuous mode [ 1350.368578][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.422802][T25238] device bridge_slave_0 left promiscuous mode [ 1350.429071][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.492073][T25238] device bridge_slave_1 left promiscuous mode [ 1350.498348][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.541818][T25238] device bridge_slave_0 left promiscuous mode [ 1350.548044][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.271493][T25238] device hsr_slave_0 left promiscuous mode [ 1356.310885][T25238] device hsr_slave_1 left promiscuous mode [ 1356.380114][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1356.394531][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1356.407884][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.469608][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.569692][T25238] bond0 (unregistering): Released all slaves [ 1356.701184][T25238] device hsr_slave_0 left promiscuous mode [ 1356.770795][T25238] device hsr_slave_1 left promiscuous mode [ 1356.839736][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1356.855903][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1356.867166][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.914960][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.010848][T25238] bond0 (unregistering): Released all slaves [ 1357.141184][T25238] device hsr_slave_0 left promiscuous mode [ 1357.190945][T25238] device hsr_slave_1 left promiscuous mode [ 1357.264258][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1357.278343][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1357.291361][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.325350][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.398770][T25238] bond0 (unregistering): Released all slaves [ 1357.570178][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.585899][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1357.607541][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1357.644316][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.664198][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1357.681768][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1357.690347][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.697510][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.712064][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1357.722665][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1357.731417][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.738611][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.747754][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1357.762555][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1357.799578][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1357.817394][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1357.827705][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1357.837276][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1357.847133][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1357.856488][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1357.871323][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1357.881533][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.890117][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1357.899666][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1357.911888][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1357.939177][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 21:13:31 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:31 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:31 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, 0x0) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0xfffffffffffff000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:31 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:31 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:31 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:31 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:31 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, 0x0) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:31 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:31 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, 0x0) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:32 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:32 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1358.955494][ T26] audit: type=1800 audit(1570050812.332:190): pid=4413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16897 res=0 [ 1360.507103][ T4434] IPVS: ftp: loaded support on port[0] = 21 [ 1360.692723][ T4434] chnl_net:caif_netlink_parms(): no params data found [ 1360.806334][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.824340][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.843067][ T4434] device bridge_slave_0 entered promiscuous mode [ 1360.862288][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.869487][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.887813][ T4434] device bridge_slave_1 entered promiscuous mode [ 1360.923644][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.953054][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.002640][ T4434] team0: Port device team_slave_0 added [ 1361.020303][ T4434] team0: Port device team_slave_1 added [ 1361.103188][ T4434] device hsr_slave_0 entered promiscuous mode [ 1361.150952][ T4434] device hsr_slave_1 entered promiscuous mode [ 1361.190627][ T4434] debugfs: Directory 'hsr0' with parent '/' already present! [ 1361.304770][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.333753][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1361.342866][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1361.359625][ T4434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.380157][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1361.399536][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1361.409403][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.416896][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.435582][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1361.444709][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1361.453773][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1361.463577][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.470698][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.480829][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1361.489846][ T3638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1361.510957][ T4434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1361.521569][ T4434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1361.535418][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1361.545004][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1361.554949][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1361.571269][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1361.581296][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1361.589963][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.599537][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.608549][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.617978][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1361.626370][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1361.650869][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0 21:13:35 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:35 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x7fff, &(0x7f0000000480)="00000002", 0x4) mknod$loop(&(0x7f0000000240)='./file0\x00', 0x800, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="c73210246602eb83fd30eabb18d71c92a11066669f35"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x34, 0x26, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, {0x6, 0xfff5}, {0x17, 0x4}, {0xb, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000880)='/dev/admmidi#\x00', 0x0, 0x200440) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000940)={r5, 0x1, "16"}, &(0x7f0000000980)=0x9) r6 = semget$private(0x0, 0x2000000010a, 0x0) semop(r6, &(0x7f0000000000)=[{0x0, 0x6}, {}], 0x2) semop(r6, &(0x7f00000000c0)=[{0x0, 0xfffffffffffefffc}], 0x1) semtimedop(r6, &(0x7f0000000100)=[{0x0, 0x9}], 0x1, 0x0) r7 = socket$inet(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x10001, 0x10) r9 = socket$inet(0x10, 0x2, 0x0) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f00000003c0)=0xffffffffffffffff) symlinkat(&(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)) semctl$SEM_INFO(r6, 0x2, 0x13, &(0x7f0000000040)=""/22) [ 1361.899554][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2800, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000001c0)={0xfffffffd, 0xa05, &(0x7f0000000040)="876437409cb7136b08e4fc48629cb899e5e170f66291f80a92d3b334436de3908c9747568ea7bcf098fa892d9b1b8c501117cee32bed484c5e1e", &(0x7f0000000140)="2b34ff794616cc2c02902ab3840518ff38ab1b67c3b4d1efa7539db3fcdd68b4f3ef3d65c4be665d51eb12ab112f160fe598d01b6c0afb1149d74fef47633675f7708bc6490afc1cc8594e76c0d926313e04ea08583fc3b99509a5d37e27069eaa5107099b9042f910fc7f", 0x3a, 0x6b}) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:35 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:36 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1362.706587][ T26] audit: type=1804 audit(1570050816.082:191): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2214/file0" dev="sda1" ino=16993 res=1 [ 1362.799761][ T26] audit: type=1800 audit(1570050816.082:192): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16993 res=0 21:13:36 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1363.263044][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1363.341069][ T4459] IPVS: ftp: loaded support on port[0] = 21 [ 1363.666961][ T26] audit: type=1804 audit(1570050817.042:193): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2215/file0" dev="sda1" ino=16577 res=1 21:13:37 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1363.752420][ T26] audit: type=1800 audit(1570050817.072:194): pid=4471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16577 res=0 21:13:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0a800000"], 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200000000000000, 0x2000) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xa4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x7) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1364.054163][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1364.665456][ T26] audit: type=1804 audit(1570050818.042:195): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2216/file0" dev="sda1" ino=16577 res=1 [ 1364.730605][ T26] audit: type=1800 audit(1570050818.042:196): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16577 res=0 [ 1365.116381][ T4480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1365.139019][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1365.415336][ T4487] IPVS: ftp: loaded support on port[0] = 21 [ 1366.171452][ T4490] IPVS: ftp: loaded support on port[0] = 21 [ 1366.413109][ T4459] chnl_net:caif_netlink_parms(): no params data found [ 1366.663246][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.670355][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.678855][ T4459] device bridge_slave_0 entered promiscuous mode [ 1366.690328][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.697533][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.705683][ T4459] device bridge_slave_1 entered promiscuous mode [ 1366.938694][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.976080][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.041486][ T4487] chnl_net:caif_netlink_parms(): no params data found [ 1367.051527][T25238] device bridge_slave_1 left promiscuous mode [ 1367.057864][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.111684][T25238] device bridge_slave_0 left promiscuous mode [ 1367.117958][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.172143][T25238] device bridge_slave_1 left promiscuous mode [ 1367.178330][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.221974][T25238] device bridge_slave_0 left promiscuous mode [ 1367.228416][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.282961][T25238] device bridge_slave_1 left promiscuous mode [ 1367.289298][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.341819][T25238] device bridge_slave_0 left promiscuous mode [ 1367.348038][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.841183][T25238] device hsr_slave_0 left promiscuous mode [ 1372.910743][T25238] device hsr_slave_1 left promiscuous mode [ 1372.992159][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1373.005722][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1373.017925][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.067815][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.158174][T25238] bond0 (unregistering): Released all slaves [ 1373.301500][T25238] device hsr_slave_0 left promiscuous mode [ 1373.360858][T25238] device hsr_slave_1 left promiscuous mode [ 1373.418614][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1373.433776][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1373.444835][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.528633][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.599123][T25238] bond0 (unregistering): Released all slaves [ 1373.741714][T25238] device hsr_slave_0 left promiscuous mode [ 1373.791255][T25238] device hsr_slave_1 left promiscuous mode [ 1373.850864][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1373.863201][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1373.875044][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.926170][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.019145][T25238] bond0 (unregistering): Released all slaves [ 1374.159457][ T4459] team0: Port device team_slave_0 added [ 1374.170257][ T4490] chnl_net:caif_netlink_parms(): no params data found [ 1374.195138][ T4459] team0: Port device team_slave_1 added [ 1374.207432][ T4495] IPVS: ftp: loaded support on port[0] = 21 [ 1374.238144][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.245712][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.253856][ T4487] device bridge_slave_0 entered promiscuous mode [ 1374.264957][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.272136][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.280011][ T4487] device bridge_slave_1 entered promiscuous mode [ 1374.320615][ T4487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.363808][ T4487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.412630][ T4459] device hsr_slave_0 entered promiscuous mode [ 1374.450925][ T4459] device hsr_slave_1 entered promiscuous mode [ 1374.500662][ T4459] debugfs: Directory 'hsr0' with parent '/' already present! [ 1374.552362][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.559598][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.567582][ T4490] device bridge_slave_0 entered promiscuous mode [ 1374.578211][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.587504][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.597767][ T4490] device bridge_slave_1 entered promiscuous mode [ 1374.605910][ T4487] team0: Port device team_slave_0 added [ 1374.643038][ T4487] team0: Port device team_slave_1 added [ 1374.687518][ T4490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.699449][ T4490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.774010][ T4487] device hsr_slave_0 entered promiscuous mode [ 1374.842800][ T4487] device hsr_slave_1 entered promiscuous mode [ 1374.900759][ T4487] debugfs: Directory 'hsr0' with parent '/' already present! [ 1374.911823][ T4490] team0: Port device team_slave_0 added [ 1374.918252][ T4495] chnl_net:caif_netlink_parms(): no params data found [ 1374.944583][ T4490] team0: Port device team_slave_1 added [ 1375.004412][ T4490] device hsr_slave_0 entered promiscuous mode [ 1375.081022][ T4490] device hsr_slave_1 entered promiscuous mode [ 1375.130706][ T4490] debugfs: Directory 'hsr0' with parent '/' already present! [ 1375.214284][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.221559][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.229413][ T4495] device bridge_slave_0 entered promiscuous mode [ 1375.237886][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.245279][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.253525][ T4495] device bridge_slave_1 entered promiscuous mode [ 1375.273054][ T4495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.394128][ T4495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.437861][ T4495] team0: Port device team_slave_0 added [ 1375.466947][ T4495] team0: Port device team_slave_1 added [ 1375.534527][ T4459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.623599][ T4495] device hsr_slave_0 entered promiscuous mode [ 1375.661099][ T4495] device hsr_slave_1 entered promiscuous mode [ 1375.710677][ T4495] debugfs: Directory 'hsr0' with parent '/' already present! [ 1375.749934][ T4459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.794340][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1375.814827][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1375.837213][ T4490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.866853][ T4487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.876394][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1375.886481][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1375.896977][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.904105][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.930925][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1375.939744][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1375.948948][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.956080][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.995695][ T4490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.005286][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1376.015453][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1376.026863][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1376.040386][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1376.058432][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1376.069041][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1376.085761][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1376.098483][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1376.115321][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1376.127544][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1376.140414][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1376.163766][ T4487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.178914][ T4459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1376.190386][ T4459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1376.226370][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1376.235024][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1376.244311][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1376.256926][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1376.266608][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1376.275851][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1376.287347][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1376.296194][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.303302][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.311725][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1376.320297][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1376.328875][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.335987][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.344415][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1376.353667][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1376.361809][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1376.394291][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1376.405067][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1376.414424][ T3769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.424953][ T3769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.432841][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1376.441620][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1376.450275][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1376.458765][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.465961][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.473703][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1376.482324][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1376.490834][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1376.499504][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1376.508275][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1376.516924][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1376.526177][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1376.534229][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1376.554424][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.593568][ T4495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1376.609750][ T4490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1376.630228][ T4490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1376.648106][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1376.657614][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1376.666351][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1376.675134][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1376.684782][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1376.693930][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1376.703106][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1376.712486][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1376.721424][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1376.729881][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1376.738582][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1376.747571][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1376.757265][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1376.765538][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1376.787049][ T4495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1376.812158][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1376.838253][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1376.856426][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1376.878975][ T4490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.911358][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1376.920222][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1376.971867][ T3769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.979055][ T3769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.007539][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1377.018034][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1377.026693][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.033847][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.078211][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1377.119930][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1377.141757][ T4487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.156415][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1377.173135][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1377.192555][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1377.230424][ T4495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1377.252386][ T4495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1377.265842][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1377.288280][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1377.311853][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1377.327092][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1377.344404][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1377.357379][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1377.369622][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1377.389585][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1377.476962][ T4495] 8021q: adding VLAN 0 to HW filter on device batadv0 21:13:50 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:50 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:50 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000fee000/0x2000)=nil, 0x0) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) r4 = socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000000)) 21:13:50 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1377.612287][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1377.737767][ T4540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:51 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) dup(r1) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1378.172754][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:51 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:51 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1378.249795][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:51 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r5, 0x7, 0x6c, 0x8001, 0x1, 0x1}, 0x14) pread64(r2, 0x0, 0x0, 0xa4) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x18, 0x0, 0x24a) r7 = dup(r1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:51 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:51 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0xffffffffffffffff, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1378.716590][ T4596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:52 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1378.845444][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:52 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x0, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="865a24c9"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000400)={0x0, 0x207, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d4024bcf97e23f7efbf54", 0x1b2}], 0x1}, 0x44000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x4, 0x3, 0x8, 0x9, 0x0, 0x7, 0x1, 0x3]}, 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:13:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:52 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:52 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x0, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:52 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:52 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'lapb0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x41, 0x400, 0xc7a1, 0x8, [0x400, 0x11, 0x1], 0x3, [0x2, 0x20, 0x1]}}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) geteuid() 21:13:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1379.402818][ T26] audit: type=1804 audit(1570050832.782:197): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2218/file0" dev="sda1" ino=16881 res=1 21:13:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1379.524821][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x0, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:53 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x0, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:53 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x0, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:13:53 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x0, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:13:53 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1380.178767][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1380.420721][ T26] audit: type=1804 audit(1570050833.792:198): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2219/file0" dev="sda1" ino=17201 res=1 21:13:53 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:13:53 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000140)={0x7, 0x8, 0x2}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @broadcast, 0x4e23, 0x0, 'rr\x00', 0x10, 0x8, 0x49}, 0xfffffffffffffe53) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000180)=0x2) [ 1380.464811][ T26] audit: type=1800 audit(1570050833.792:199): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17201 res=0 21:13:54 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:13:54 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1381.019930][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:54 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1381.361638][ T26] audit: type=1804 audit(1570050834.742:200): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2220/file0" dev="sda1" ino=16674 res=1 [ 1381.410782][ T26] audit: type=1800 audit(1570050834.742:201): pid=4696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16674 res=0 21:13:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0004917750b0002d0000180a70f43bd046480d949855f390732aa31f22db905da5473e10"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xa4) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000040)=0x80000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7f) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1381.888112][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:13:55 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1382.273304][ T26] audit: type=1800 audit(1570050835.652:202): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16561 res=0 21:13:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1383.323924][ T26] audit: type=1800 audit(1570050836.702:203): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16513 res=0 [ 1384.031693][T25238] device bridge_slave_1 left promiscuous mode [ 1384.038017][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.092090][T25238] device bridge_slave_0 left promiscuous mode [ 1384.098428][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.151122][T25238] device hsr_slave_0 left promiscuous mode [ 1386.210790][T25238] device hsr_slave_1 left promiscuous mode [ 1386.259576][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1386.274165][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1386.287674][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.335665][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.428900][T25238] bond0 (unregistering): Released all slaves [ 1386.579916][ T4717] IPVS: ftp: loaded support on port[0] = 21 [ 1386.580836][ T4723] IPVS: ftp: loaded support on port[0] = 21 [ 1386.594193][ T4721] IPVS: ftp: loaded support on port[0] = 21 [ 1386.606178][ T4720] IPVS: ftp: loaded support on port[0] = 21 [ 1386.870153][ T4720] chnl_net:caif_netlink_parms(): no params data found [ 1386.982726][ T4721] chnl_net:caif_netlink_parms(): no params data found [ 1387.002942][ T4723] chnl_net:caif_netlink_parms(): no params data found [ 1387.026232][ T4717] chnl_net:caif_netlink_parms(): no params data found [ 1387.089112][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.097980][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.106433][ T4720] device bridge_slave_0 entered promiscuous mode [ 1387.139021][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.156750][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.171306][ T4720] device bridge_slave_1 entered promiscuous mode [ 1387.225039][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.233487][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.242086][ T4721] device bridge_slave_0 entered promiscuous mode [ 1387.250246][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.258586][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.267202][ T4723] device bridge_slave_0 entered promiscuous mode [ 1387.288326][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.305156][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.319495][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.340124][ T4717] device bridge_slave_0 entered promiscuous mode [ 1387.349860][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.368177][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.376819][ T4721] device bridge_slave_1 entered promiscuous mode [ 1387.385114][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.392899][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.401459][ T4723] device bridge_slave_1 entered promiscuous mode [ 1387.411251][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.420434][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.427849][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.437938][ T4717] device bridge_slave_1 entered promiscuous mode [ 1387.525381][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.555326][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.579244][ T4720] team0: Port device team_slave_0 added [ 1387.591475][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.614115][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.637415][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.660930][ T4720] team0: Port device team_slave_1 added [ 1387.676362][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.729927][ T4721] team0: Port device team_slave_0 added [ 1387.756838][ T4723] team0: Port device team_slave_0 added [ 1387.766303][ T4721] team0: Port device team_slave_1 added [ 1387.788863][ T4717] team0: Port device team_slave_0 added [ 1387.843980][ T4720] device hsr_slave_0 entered promiscuous mode [ 1387.941075][ T4720] device hsr_slave_1 entered promiscuous mode [ 1388.060826][ T4720] debugfs: Directory 'hsr0' with parent '/' already present! [ 1388.069656][ T4723] team0: Port device team_slave_1 added [ 1388.112713][ T4721] device hsr_slave_0 entered promiscuous mode [ 1388.161230][ T4721] device hsr_slave_1 entered promiscuous mode [ 1388.230795][ T4721] debugfs: Directory 'hsr0' with parent '/' already present! [ 1388.239940][ T4717] team0: Port device team_slave_1 added [ 1388.324211][ T4717] device hsr_slave_0 entered promiscuous mode [ 1388.381163][ T4717] device hsr_slave_1 entered promiscuous mode [ 1388.420650][ T4717] debugfs: Directory 'hsr0' with parent '/' already present! [ 1388.494061][ T4723] device hsr_slave_0 entered promiscuous mode [ 1388.541141][ T4723] device hsr_slave_1 entered promiscuous mode [ 1388.580671][ T4723] debugfs: Directory 'hsr0' with parent '/' already present! [ 1388.648537][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.708086][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1388.717096][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1388.727671][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.756301][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1388.772198][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1388.781210][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.788272][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.796769][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1388.816109][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.852361][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.863752][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1388.882249][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1388.900962][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.908100][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.916395][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1388.924452][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1388.932719][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1388.958436][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.971695][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1389.015331][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1389.024769][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1389.034089][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1389.043575][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1389.052415][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1389.061033][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1389.069479][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1389.078769][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1389.089957][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1389.100258][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.109282][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.116432][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.124756][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1389.133784][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1389.142721][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.149808][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.157577][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1389.167608][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1389.175597][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1389.184766][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1389.192756][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1389.215409][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.231317][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1389.240316][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1389.250434][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1389.259753][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1389.269249][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1389.278463][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1389.289293][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.913733][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1389.932963][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1389.941784][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1389.950011][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1389.958153][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1389.967019][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1389.976121][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.984978][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.992089][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.000027][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1390.008811][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.017178][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.024413][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.033465][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1390.377597][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.385062][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1390.394359][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.404253][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1390.414523][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1390.424686][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1390.753342][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1390.762910][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1390.771767][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1390.782476][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1390.791454][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1390.800041][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1390.809446][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1390.825080][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.837789][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1390.849506][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.864410][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1390.874136][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1390.883689][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.890850][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.901989][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1390.910337][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.918955][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1390.927905][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.937152][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.944263][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.276971][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1391.285350][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1391.294782][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1391.307787][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1391.317548][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1391.326953][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1391.358880][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.373530][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1391.393294][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1391.414682][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1391.429722][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1391.439855][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1391.448967][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1391.462933][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.472547][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1391.821857][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 21:14:05 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, &(0x7f0000000480)=""/215, 0xd7, 0x100, &(0x7f0000000380)=@caif, 0x80) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200800, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0xa4) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @rand_addr=0xfffffff7}, 0x80, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)='rose0\x00', 0x6, 0x3, 0x6}) ioctl$TIOCSBRK(r4, 0x5427) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000000)={0x1, 0x0, 0x8024, 0x2, 'syz1\x00', 0x5}) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) r7 = socket$inet(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000200)="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") 21:14:06 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:06 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:06 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:06 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1392.753128][ T4764] __nla_validate_parse: 2 callbacks suppressed [ 1392.753139][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:06 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:06 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:06 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:06 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1393.641250][ T26] audit: type=1804 audit(1570050847.022:204): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2223/file0" dev="sda1" ino=17073 res=1 [ 1393.708526][ T26] audit: type=1800 audit(1570050847.022:205): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17073 res=0 21:14:07 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1393.812821][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:07 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:07 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:07 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0xa4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xa4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x300, 0x8000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x1, r4}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:08 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:08 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:14:08 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1395.239398][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1395.272174][ T4820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1395.312816][T25238] device bridge_slave_1 left promiscuous mode [ 1395.319103][T25238] bridge0: port 2(bridge_slave_1) entered disabled state 21:14:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="ef54c48f9380455ea977da1810fa783558a070c79fcdc4bf000000000096e166ce2d1e062a5b048610201686568221ddf1c7dd8c60d2b88a0220e344ff993dd7d1d58711d96db40a9cc31ebe6a9d971629c37d47a6303146fb2f194f8ae885bce0ecd5d6e93276a150deb477c937f08b03e9bb5a976ab3346cd966ac0ca121750b9f7539c0be78582492afe7d501836eb094a50064519e0c4c2ab6c9e85fe20590"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x241c0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, &(0x7f0000000240)=""/105, &(0x7f0000000440)=""/159, &(0x7f0000000500)=""/218, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0xc0000}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040)={0x0, r5, 0xffffffff80000001}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1395.473745][T25238] device bridge_slave_0 left promiscuous mode [ 1395.480061][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.565570][T25238] device bridge_slave_1 left promiscuous mode [ 1395.577899][T25238] bridge0: port 2(bridge_slave_1) entered disabled state 21:14:09 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1395.654748][T25238] device bridge_slave_0 left promiscuous mode [ 1395.662364][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.734776][T25238] device bridge_slave_1 left promiscuous mode [ 1395.744600][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.811826][T25238] device bridge_slave_0 left promiscuous mode [ 1395.820413][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.892727][T25238] device bridge_slave_1 left promiscuous mode [ 1395.899016][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.972857][T25238] device bridge_slave_0 left promiscuous mode [ 1395.986034][T25238] bridge0: port 1(bridge_slave_0) entered disabled state 21:14:10 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1397.532793][ T26] audit: type=1804 audit(1570050850.912:206): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2227/file0" dev="sda1" ino=16546 res=1 [ 1397.593414][ T26] audit: type=1800 audit(1570050850.932:207): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16546 res=0 [ 1405.341339][T25238] device hsr_slave_0 left promiscuous mode [ 1405.380819][T25238] device hsr_slave_1 left promiscuous mode [ 1405.430384][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1405.446246][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1405.459301][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.505880][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1405.581592][T25238] bond0 (unregistering): Released all slaves [ 1405.731084][T25238] device hsr_slave_0 left promiscuous mode [ 1405.780843][T25238] device hsr_slave_1 left promiscuous mode [ 1405.838986][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1405.853218][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1405.865583][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1405.915093][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.010693][T25238] bond0 (unregistering): Released all slaves [ 1406.171312][T25238] device hsr_slave_0 left promiscuous mode [ 1406.230632][T25238] device hsr_slave_1 left promiscuous mode [ 1406.294472][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1406.306358][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1406.319902][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.379025][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.463805][T25238] bond0 (unregistering): Released all slaves [ 1406.611432][T25238] device hsr_slave_0 left promiscuous mode [ 1406.680762][T25238] device hsr_slave_1 left promiscuous mode [ 1406.779923][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1406.794615][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1406.806299][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.849501][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.948290][T25238] bond0 (unregistering): Released all slaves [ 1407.237937][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1407.248993][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1407.266688][ T4848] IPVS: ftp: loaded support on port[0] = 21 [ 1407.320460][ T4846] IPVS: ftp: loaded support on port[0] = 21 [ 1407.635062][ T4846] chnl_net:caif_netlink_parms(): no params data found [ 1407.654338][ T4848] chnl_net:caif_netlink_parms(): no params data found [ 1407.888662][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.907791][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.917582][ T4846] device bridge_slave_0 entered promiscuous mode [ 1407.949409][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.959412][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.976790][ T4846] device bridge_slave_1 entered promiscuous mode [ 1408.005410][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.017873][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.029686][ T4848] device bridge_slave_0 entered promiscuous mode [ 1408.059317][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.070226][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.087085][ T4848] device bridge_slave_1 entered promiscuous mode [ 1408.116422][ T4846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.143269][ T4846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.184442][ T4848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.210986][ T4848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.221504][ T4846] team0: Port device team_slave_0 added [ 1408.228869][ T4846] team0: Port device team_slave_1 added [ 1408.257917][ T4848] team0: Port device team_slave_0 added [ 1408.290276][ T4848] team0: Port device team_slave_1 added [ 1408.343697][ T4846] device hsr_slave_0 entered promiscuous mode [ 1408.391125][ T4846] device hsr_slave_1 entered promiscuous mode [ 1408.460646][ T4846] debugfs: Directory 'hsr0' with parent '/' already present! [ 1408.563858][ T4848] device hsr_slave_0 entered promiscuous mode [ 1408.631091][ T4848] device hsr_slave_1 entered promiscuous mode [ 1408.690774][ T4848] debugfs: Directory 'hsr0' with parent '/' already present! [ 1408.808930][ T4846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.822260][ T4848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.844847][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1408.854478][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1408.869894][ T4848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.888136][ T4846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.896764][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1408.915762][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1408.963923][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1408.979065][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1408.991612][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.998703][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.018080][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1409.037969][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1409.055337][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.062490][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.078781][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1409.090058][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1409.107694][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.114854][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.131414][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1409.140458][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1409.157896][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.165030][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.182317][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1409.230211][ T4854] IPVS: ftp: loaded support on port[0] = 21 [ 1409.234627][ T4848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1409.250741][ T4848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1409.264795][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1409.273422][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1409.282137][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1409.295812][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1409.305583][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1409.315786][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1409.325335][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1409.334902][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1409.344195][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1409.353589][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1409.364810][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1409.373304][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1409.381728][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1409.415237][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1409.425176][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1409.464421][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1409.479921][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1409.498768][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1409.517811][ T4848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.539738][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1409.558055][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1409.599118][ T4846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1409.619829][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1409.641750][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1409.661375][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1409.714575][ T4846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.765848][ T4854] chnl_net:caif_netlink_parms(): no params data found [ 1409.832634][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.839809][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.862696][ T4854] device bridge_slave_0 entered promiscuous mode [ 1409.888661][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.909746][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.941393][ T4854] device bridge_slave_1 entered promiscuous mode [ 1410.029419][ T4854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 21:14:23 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:23 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:23 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x1f, 0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:23 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1410.074290][ T4854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.098540][ T4854] team0: Port device team_slave_0 added [ 1410.107448][ T4854] team0: Port device team_slave_1 added 21:14:23 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1410.183763][ T4854] device hsr_slave_0 entered promiscuous mode [ 1410.221056][ T4854] device hsr_slave_1 entered promiscuous mode 21:14:23 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x0, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1410.263215][ T4854] debugfs: Directory 'hsr0' with parent '/' already present! [ 1410.285964][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1410.356013][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1410.409150][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.416337][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.423848][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.431003][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.554901][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.568757][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.978796][ T26] audit: type=1804 audit(1570050864.352:208): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2228/file0" dev="sda1" ino=16913 res=1 [ 1411.030384][ T26] audit: type=1800 audit(1570050864.352:209): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16913 res=0 [ 1411.666601][ T4854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.684434][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1411.693018][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1411.714798][ T4854] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.747938][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1411.773740][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1411.798638][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.805800][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.873461][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1411.883587][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1411.917591][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.924738][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.941157][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1411.973527][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1411.989832][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1412.011152][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1412.030171][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1412.048355][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1412.067685][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1412.078891][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1413.064092][ T4854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1413.076797][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1413.087405][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1413.096955][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1413.105859][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1413.482633][ T4854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.947340][ T4900] IPVS: ftp: loaded support on port[0] = 21 21:14:27 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:14:27 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:27 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:27 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1414.489413][ T4900] chnl_net:caif_netlink_parms(): no params data found 21:14:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xd) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:28 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1415.293125][ T26] audit: type=1804 audit(1570050868.672:210): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2229/file0" dev="sda1" ino=16583 res=1 [ 1415.370603][ T26] audit: type=1800 audit(1570050868.672:211): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16583 res=0 21:14:29 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1416.233153][ T26] audit: type=1804 audit(1570050869.612:212): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2230/file0" dev="sda1" ino=16546 res=1 21:14:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1416.348277][ T26] audit: type=1800 audit(1570050869.642:213): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16546 res=0 [ 1416.480579][ T26] audit: type=1804 audit(1570050869.852:214): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2231/file0" dev="sda1" ino=16532 res=1 21:14:29 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1416.540559][ T26] audit: type=1804 audit(1570050869.852:215): pid=4927 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2231/file0" dev="sda1" ino=16532 res=1 21:14:30 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) [ 1416.874424][ T4932] IPVS: ftp: loaded support on port[0] = 21 [ 1416.888808][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.908718][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.929707][ T4900] device bridge_slave_0 entered promiscuous mode [ 1417.430385][ T26] audit: type=1804 audit(1570050870.802:216): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2232/file0" dev="sda1" ino=16595 res=1 21:14:30 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1417.520637][ T26] audit: type=1800 audit(1570050870.842:217): pid=4934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16595 res=0 [ 1418.095243][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.109997][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.130988][ T4900] device bridge_slave_1 entered promiscuous mode [ 1418.390014][ T26] audit: type=1800 audit(1570050871.762:218): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16514 res=0 [ 1419.042102][ T4900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1419.065632][ T4900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.835356][ T4940] IPVS: ftp: loaded support on port[0] = 21 [ 1419.863530][ T4900] team0: Port device team_slave_0 added [ 1419.879177][ T4900] team0: Port device team_slave_1 added [ 1419.898072][T25238] device bridge_slave_1 left promiscuous mode [ 1419.909574][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.962102][T25238] device bridge_slave_0 left promiscuous mode [ 1419.968393][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.022913][T25238] device bridge_slave_1 left promiscuous mode [ 1420.029194][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.091837][T25238] device bridge_slave_0 left promiscuous mode [ 1420.098085][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.142231][T25238] device bridge_slave_1 left promiscuous mode [ 1420.148539][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.215586][T25238] device bridge_slave_0 left promiscuous mode [ 1420.222543][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.272083][T25238] device bridge_slave_1 left promiscuous mode [ 1420.278343][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.331852][T25238] device bridge_slave_0 left promiscuous mode [ 1420.338209][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.392620][T25238] device bridge_slave_1 left promiscuous mode [ 1420.398929][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.451798][T25238] device bridge_slave_0 left promiscuous mode [ 1420.458178][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.561393][T25238] device hsr_slave_0 left promiscuous mode [ 1430.600731][T25238] device hsr_slave_1 left promiscuous mode [ 1430.662733][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1430.676457][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1430.689218][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.749248][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.841132][T25238] bond0 (unregistering): Released all slaves [ 1430.981745][T25238] device hsr_slave_0 left promiscuous mode [ 1431.030980][T25238] device hsr_slave_1 left promiscuous mode [ 1431.084394][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1431.096009][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1431.112597][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.175011][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.269281][T25238] bond0 (unregistering): Released all slaves [ 1431.451499][T25238] device hsr_slave_0 left promiscuous mode [ 1431.490938][T25238] device hsr_slave_1 left promiscuous mode [ 1431.565260][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1431.580173][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1431.593301][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.637836][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.713943][T25238] bond0 (unregistering): Released all slaves [ 1431.831718][T25238] device hsr_slave_0 left promiscuous mode [ 1431.900695][T25238] device hsr_slave_1 left promiscuous mode [ 1431.966784][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1431.982624][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1431.995825][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.058040][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.159307][T25238] bond0 (unregistering): Released all slaves [ 1432.351607][T25238] device hsr_slave_0 left promiscuous mode [ 1432.390823][T25238] device hsr_slave_1 left promiscuous mode [ 1432.448742][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1432.462961][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1432.476203][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.517904][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.592866][T25238] bond0 (unregistering): Released all slaves [ 1432.794161][ T4900] device hsr_slave_0 entered promiscuous mode [ 1432.841168][ T4900] device hsr_slave_1 entered promiscuous mode [ 1432.890644][ T4900] debugfs: Directory 'hsr0' with parent '/' already present! [ 1432.915399][ T4932] chnl_net:caif_netlink_parms(): no params data found [ 1432.944954][ T4944] IPVS: ftp: loaded support on port[0] = 21 [ 1432.970048][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.979175][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.981146][ T4942] IPVS: ftp: loaded support on port[0] = 21 [ 1432.998235][ T4932] device bridge_slave_0 entered promiscuous mode [ 1433.037567][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.046503][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.054719][ T4932] device bridge_slave_1 entered promiscuous mode [ 1433.126233][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.139610][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.200159][ T4932] team0: Port device team_slave_0 added [ 1433.211124][ T4932] team0: Port device team_slave_1 added [ 1433.293891][ T4932] device hsr_slave_0 entered promiscuous mode [ 1433.331162][ T4932] device hsr_slave_1 entered promiscuous mode [ 1433.370677][ T4932] debugfs: Directory 'hsr0' with parent '/' already present! [ 1433.381941][ T4940] chnl_net:caif_netlink_parms(): no params data found [ 1433.449891][ T4940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.457216][ T4940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.466549][ T4940] device bridge_slave_0 entered promiscuous mode [ 1433.512943][ T4940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.520219][ T4940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.528873][ T4940] device bridge_slave_1 entered promiscuous mode [ 1433.581800][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.588917][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.596350][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.603616][ T4932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.623451][ T4940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.652033][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.672823][ T4940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.697618][ T4940] team0: Port device team_slave_0 added [ 1433.718687][ T4942] chnl_net:caif_netlink_parms(): no params data found [ 1433.729250][ T4944] chnl_net:caif_netlink_parms(): no params data found [ 1433.743976][ T4940] team0: Port device team_slave_1 added [ 1433.834155][ T4940] device hsr_slave_0 entered promiscuous mode [ 1433.881102][ T4940] device hsr_slave_1 entered promiscuous mode [ 1433.940777][ T4940] debugfs: Directory 'hsr0' with parent '/' already present! [ 1433.956774][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.964953][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.979882][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1433.987863][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1434.010145][ T4900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.037647][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.056045][ T4944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.064083][ T4944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.072436][ T4944] device bridge_slave_0 entered promiscuous mode [ 1434.080381][ T4944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.087516][ T4944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.095543][ T4944] device bridge_slave_1 entered promiscuous mode [ 1434.114724][ T4942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.122775][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.130962][ T4942] device bridge_slave_0 entered promiscuous mode [ 1434.138983][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.146617][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.154841][ T4942] device bridge_slave_1 entered promiscuous mode [ 1434.176441][ T4942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.207590][ T4944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.225145][ T4942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.293145][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1434.302119][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1434.310705][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.317784][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.326001][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1434.337971][ T4944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.451381][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1434.459238][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1434.467235][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1434.476039][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1434.485202][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.492318][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.500369][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1434.509147][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1434.517705][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1434.526374][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1434.537165][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.560004][ T4942] team0: Port device team_slave_0 added [ 1434.648286][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1434.691946][ T4944] team0: Port device team_slave_0 added [ 1434.712711][ T4942] team0: Port device team_slave_1 added [ 1434.723980][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1434.732861][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1434.742110][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.749174][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.757396][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1434.766946][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1434.775952][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.783101][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.792197][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1434.811373][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1434.820227][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1434.857594][ T4944] team0: Port device team_slave_1 added [ 1434.904064][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1434.923114][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1434.941179][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1434.949827][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1434.959575][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1435.053601][ T4942] device hsr_slave_0 entered promiscuous mode [ 1435.102133][ T4942] device hsr_slave_1 entered promiscuous mode [ 1435.140682][ T4942] debugfs: Directory 'hsr0' with parent '/' already present! [ 1435.150264][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1435.171398][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1435.179933][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1435.189004][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1435.198306][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1435.207575][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1435.216698][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1435.225537][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1435.234535][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1435.246224][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1435.276229][ T4940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.301092][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1435.383658][ T4944] device hsr_slave_0 entered promiscuous mode [ 1435.430902][ T4944] device hsr_slave_1 entered promiscuous mode [ 1435.480764][ T4944] debugfs: Directory 'hsr0' with parent '/' already present! [ 1435.500437][ T4940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.532503][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1435.541682][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1435.564356][ T4900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.616516][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1435.626393][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1435.646854][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.653998][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.663180][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1435.672588][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1435.681710][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.688811][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.696832][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1435.709280][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.744109][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1435.753234][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1435.821175][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1435.831796][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1435.851298][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1435.859961][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1435.869019][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1435.877596][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1435.932923][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1435.945734][ T4940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1435.972181][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1436.001604][ T4942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.010242][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1436.070309][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1436.125620][ T4944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.155338][ T4940] 8021q: adding VLAN 0 to HW filter on device batadv0 21:14:49 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x0, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:49 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:49 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1436.177247][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1436.239979][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1436.279449][ T4944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.350968][ T4942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.371376][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1436.385072][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1436.469523][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1436.506343][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1436.523875][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.531109][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.550654][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1436.573280][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1436.598279][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.605515][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.626009][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1436.647266][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1436.663923][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.671147][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.694893][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1436.718079][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1436.735860][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1436.748848][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.756045][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.867921][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1436.891738][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1436.931473][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1436.961593][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1436.982366][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1437.005453][ T26] audit: type=1800 audit(1570050890.382:219): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16801 res=0 [ 1437.035954][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1437.049813][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1437.067939][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1437.089139][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1437.108038][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1437.119863][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1437.138987][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1437.148600][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1437.157636][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1437.167451][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1437.178713][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1437.197506][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1437.217268][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1437.229155][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1437.250094][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1437.263495][ T4944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1437.286094][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1437.317319][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1437.345445][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1437.371818][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1437.391591][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1437.451771][ T4942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.464757][ T4944] 8021q: adding VLAN 0 to HW filter on device batadv0 21:14:51 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:51 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x0, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000140)="00fa79021dfb74b1ba84dfbffa42860231a27026d57618f3afbfdff4eca4e57152b97d3622fae028c405f3d586b84dd01074f0dd988947b92a9a47fc9dbb4df6ce8435206f8a37d0cb72a40e6ca729110504301e0cfe0db4e3ad21c9e69d3ecf8cbee8a2", 0x64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0xa4) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000d85c3e2e6adeffffffff3e614f4488c8d0c53dab3eb1e5a08599609cb955e4bee8e05d"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:51 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:51 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:14:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) r2 = gettid() tkill(r2, 0x3b) ptrace$getenv(0x4201, r2, 0x80, &(0x7f0000000000)) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000280), 0x9018) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x101020) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x18, &(0x7f0000000240)={r8}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r8, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000340)={r9, @in={{0x2, 0x4e22, @multicast1}}, 0x2, 0x2}, &(0x7f0000001440)=0x90) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="57abbc658919e1", 0x7}, {&(0x7f0000000440)="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", 0xae}, {&(0x7f0000000180)="8f576548bb420edae215469c2176c366808a71bfb6f568cdece6b7edb5050bf2d714b2f6c706a5cdd6f55fecaa0f540450ccfb7247d0c983", 0x38}], 0x3}, 0x0) socket$kcm(0x2b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:51 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:51 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:51 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) 21:14:51 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="000000a64ec3f6589000"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00') socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:51 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) 21:14:51 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1438.559804][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000500)=""/110) [ 1438.693160][ T26] audit: type=1800 audit(1570050892.072:220): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16818 res=0 21:14:52 executing program 0: fallocate(0xffffffffffffffff, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:52 executing program 0: fallocate(0xffffffffffffffff, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:52 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, 0x0, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:52 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) [ 1439.196624][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="957a1b3a55528882e29fe5f6f6f0503c"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x172, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0xc2}], 0x354}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@bpq0='bpq0\x00', 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:52 executing program 0: fallocate(0xffffffffffffffff, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:52 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:14:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, 0x0, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:52 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:52 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="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", 0x1000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:52 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, 0x0, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:53 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1439.636135][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:53 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:53 executing program 0: r0 = creat(0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1439.745979][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/120, &(0x7f0000000140)=0x78) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:53 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:53 executing program 0: r0 = creat(0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:53 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:53 executing program 0: r0 = creat(0x0, 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:53 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:54 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(0x0, 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:54 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:54 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:54 executing program 2: r0 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x3) ptrace$pokeuser(0x6, 0x0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:14:54 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1440.801804][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:54 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1441.585984][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1441.639754][ T26] audit: type=1804 audit(1570050895.012:221): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2242/file0" dev="sda1" ino=16658 res=1 21:14:55 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:55 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(0x0, 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:55 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(r2, 0x80045439, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f0000000080)=0x8000000000000001, 0x4) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f00000001c0)) fcntl$dupfd(r5, 0x0, r6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0)) lseek(r1, 0x0, 0x4) 21:14:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x81, 0x67, 0x70, 0x7}, {0x5, 0x5}, {0x7fff, 0x7f, 0xf9, 0x7}, {0x1000, 0x2, 0x21, 0x4e}]}) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1441.782875][ T26] audit: type=1800 audit(1570050895.012:222): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16658 res=0 21:14:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1442.157186][ T26] audit: type=1804 audit(1570050895.532:223): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2243/file0" dev="sda1" ino=16899 res=1 21:14:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:55 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1442.502934][ T26] audit: type=1804 audit(1570050895.882:224): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2244/file0" dev="sda1" ino=16642 res=1 21:14:56 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0xfffbffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\xc0h:*\x18\xc1k\xa7\x87\xa2\xa0o8\xaaK\xa5\xd3\x93aG\xd4\xfd\x1eB\xdc`b\xde\xbbHV\xb3\xcd2d\xe3\xab[L\x92e)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8mCR\xfc\xcb$u3\xec\xde%\xd0]\xd8\xebD\x82S\x17?\xd6As\xe3\xb1\x9aF\xe6\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\x00\x00\x00\x002\x11)\xfb\xe0\tm>\x9e\xd5\xb1\xdd\xd8\x15\x94T\x1e^\xf7o\xee\xdf\x02\xb8w\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa:\x16\x00\x9dz/\xd5\xefo\xe2\x1e\xab\xf6\xb6\xdc\xea\xce+$\xedX\xb7KVqU\x18\xe2kN\x18Z\x12\xb2\x93\x95\xd8/\t\x00\x1b\xe3\xb3\xab\x8288{-<\x93ng&\\\nz\xb1\f\xe3\x1f\x06,\x01\xea\xc4\xcf:3_V\a9$\xab\xf2\xec*X0\x9c\x13\xafO\xf9\x9a\xcc\xcd1O0\x97M\xc2V\xe5.%v\x98\x0e\xb2\xe7\xc2*\x12\n\xce\\O*\x16\xf3b\a\xcf\xa0\x90%\x19\x82\xde5I\x8e\xb3\xd2\xef\xe1\xc2`$\xb4G\n\xf9_\x03y\xf6\x9dd\x06M\x00\xfc\xc3C-\xf8\x01\x91F\x80l\x00'/330, 0x0) write(r0, &(0x7f0000000000)='/', 0xffffff6a) [ 1442.587909][ T26] audit: type=1804 audit(1570050895.942:225): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir250789882/syzkaller.NNCNAV/8/file0" dev="sda1" ino=16785 res=1 [ 1442.654542][ T26] audit: type=1800 audit(1570050895.942:226): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16785 res=0 21:14:56 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:56 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:56 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(0x0, 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:56 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1442.718599][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00030600"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:56 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:56 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xe2, 0x410000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved}, 0x10, 0x140000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) dup3(r3, r2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r4 = socket(0x11, 0x0, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004008100000008000600", @ANYRES32, @ANYBLOB='\b', @ANYRES32, @ANYBLOB="04100200", @ANYRES32], 0x8}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x16a1}}, @txtime={{0x18, 0x1, 0x3d, 0x677}}, @mark={{0x14, 0x1, 0x24, 0xfffffc00}}, @txtime={{0x18, 0x1, 0x3d, 0xf5}}], 0x60}}, {{&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="693ba55196d200f2492601fa479885b608a3109fc1f6284389609d095fbb7f56b4c66d6af57a058014339ff0cc604109ba82e0ecec3170e710d8764fbd74d30bc38ae932a5f0330b5a4e1fed709fa0c802048220bb1896c999c6083d2c0409eba247eeb369c85703e72bec5ac38aa103ee87152b", 0x74}, {&(0x7f0000000dc0)="a145af4fd1c2bf156e8551b98a21651112c94b96f31b21536d959ecba1d79e72e40ebd898fe5b671d4bbf3573d246dbddefe31a5c568e42a7bad6f0d7a273b50c77a2f5cb85ebc2bb661a8d547376a25567d", 0x52}], 0x2, &(0x7f0000000ec0)=[@timestamping={{0x14, 0x1, 0x25, 0x5b}}, @timestamping={{0x14, 0x1, 0x25, 0x1825}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x60}}, {{&(0x7f0000000f40)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000fc0)="e3dade7c0ec9588e6d8a9d9fd9e0e6e6a29cdd58464fb1a44a9149fd43281d57cbb22de0ccfba82e3f8ce3dfa5b4d79c2a817378f65a818c9e811a8610035683ad6839f16ece0f340c22c04fac37ec", 0x4f}, {&(0x7f0000001040)="5d2444b9872f3103cf9ae116286cae75c141cd341ad2f4368f79683da78b4a9b1464fae44e49cf7c96c113e393e02ea2c91efa6c06a1449577c9944bbd863f115fa2cce9b0aece19716b7bac368112b619c993309362b6214c1c6889c1336039fd343100aec7023ed0d83b6933197f525d1327beffa94e7e90836a6f7eeedd2b424b8a2859b2cfb47cc8b959c2d61f5dad320c2b66b11144960ac5c7199572c2509002f70718956bdc0979c85e6cd196852be808026824c15e859d1a79a8e6c20a68698ce230707825b40493c2", 0xcd}, {0x0}, {&(0x7f0000001240)="a544423d455d068445", 0x9}], 0x4, &(0x7f00000012c0)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}}, {{&(0x7f0000002ac0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80, &(0x7f0000004180)=[{0x0}, {&(0x7f0000002e80)="5ec09c93ed8faef3c337cd7609d43d3cf1e02d2137", 0x15}, {&(0x7f0000002ec0)}, {&(0x7f0000002f40)="e7ddb58d47f959d23f25c5d291bf7a22c5cc69e47eb528ec4f3621e52b6b8e6624aece4746cca3d9a346fc114f8b5390633afb4c632a82c1bd241f8a59f3b2fb4a14731a13b5eceb9e573211f9e5ce00bcc7ec53e4fd962fb48d2c6f2f573ebcff6ab5c11f99e64755b59223084de2ecc714f656851805160c724c8d107138e198b67cc64f2f141ed3da32cc70450cd377d5057cbd26717141f8", 0x9a}, {&(0x7f0000003000)="e2f4df622bf405c13dfd22c6388c5b83a365ce0235c04c0f9415730de003004941976c52151fae525c5d9586858fe85c7ee4175b4a83a5b5d7f1629fbd3cd95651270fdca3532582489fd009a7449bd723dd0dde3dfbdf31e1babf421323d4acb3a05400acb3e185b9bc3d5906bda85371dd34bc448121c7239259ac1c672333bd97e5aef4df5fdb1b79f31ae4d2da318f1bef9b16fc2e3a445520ca0362c38b21af2a06bc31d71e016e9f03", 0xac}, {&(0x7f0000003100)}, {0x0}], 0x7, &(0x7f0000004240)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18}}], 0x30}}], 0x4, 0x4000000) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x277, 0x0, 0x17b], [0x3a]}) r8 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x0, 0x84101) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000740)={0x9, 0x4, [0x80000001]}) r9 = getpgrp(0x0) setpriority(0x1, r9, 0x101) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x18, 0x0, 0x3, 0x0, r10}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x16ca9a2f22726620, 0x10, r11, 0x0) readv(r11, &(0x7f0000004680)=[{&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000440)=""/44, 0x2c}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000680)=""/50, 0x32}, {0x0}, {&(0x7f0000004480)=""/135, 0x87}, {&(0x7f0000004540)=""/138, 0x8a}, {&(0x7f0000004600)=""/98, 0x62}], 0x9) clock_gettime(0x3, 0x0) 21:14:56 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:56 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1443.465563][ T26] audit: type=1804 audit(1570050896.842:227): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2246/file0" dev="sda1" ino=16769 res=1 21:14:56 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:56 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:56 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:57 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:57 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:57 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) creat(&(0x7f0000000080)='./bus\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x8}, &(0x7f00000003c0), 0x0) [ 1444.243764][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1444.258823][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x10000, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x2f) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = dup(r2) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f00000001c0)={0x1, 0x0, 0x100, 0x4, {0x0, 0x3, 0x0, 0x8}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8001, 0xfff7, 0x5}, 'syz1\x00', 0x51}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:57 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:57 executing program 2: syz_mount_image$vfat(&(0x7f0000001980)='vfat\x00', &(0x7f00000019c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)={[], [{@uid_eq={'uid'}}]}) 21:14:57 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:57 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:57 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:57 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1444.390841][ T5334] FAT-fs (loop2): bogus number of reserved sectors [ 1444.460631][ T5334] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1444.623334][ T5334] FAT-fs (loop2): bogus number of reserved sectors [ 1444.641566][ T5334] FAT-fs (loop2): Can't find a valid FAT filesystem 21:14:58 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x9, &(0x7f00000000c0), 0x10) 21:14:58 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:58 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1445.183818][ T26] audit: type=1800 audit(1570050898.562:228): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16993 res=0 21:14:58 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1445.374742][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1445.394033][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x100000) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1, r4, 0x1, 0x6, 0x6, @broadcast}, 0x14) finit_module(r3, &(0x7f0000000000)='GPL\'GPL8\x00', 0x1) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:14:58 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:58 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:58 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:14:59 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:59 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:59 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:14:59 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1446.151984][ T26] audit: type=1804 audit(1570050899.532:229): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2249/file0" dev="sda1" ino=16674 res=1 [ 1446.222982][ T26] audit: type=1800 audit(1570050899.562:230): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16674 res=0 21:14:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000540), 0x1000) r1 = open(&(0x7f0000000040)='./file0/file1\x00', 0x206000, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, 0x1}, 0x10) read$FUSE(r0, &(0x7f0000003000), 0x1150) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0x0, 0x2, {0x400000000001, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd4, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x90) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f00000015c0)="553ffb8cc5d741ddae7bcd859d489411798bf6fe2f8a899f6ac0", 0x0) r2 = getpgrp(0x0) write$FUSE_DIRENT(r1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) prlimit64(0x0, 0x6, 0x0, 0x0) gettid() open(0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) 21:14:59 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:14:59 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1446.290906][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:59 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1446.343393][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:14:59 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) [ 1446.647130][ T5441] encrypted_key: insufficient parameters specified 21:15:00 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000680)='/dev/midi#\x00', 0x4, 0x480) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000700)=r1) r2 = semget$private(0x0, 0x2000000010a, 0x0) semop(r2, &(0x7f0000000000)=[{0x0, 0x6}, {}], 0x2) semop(r2, &(0x7f00000000c0)=[{0x0, 0xfffffffffffefffc}], 0x1) semtimedop(r2, &(0x7f0000000100)=[{0x0, 0x9}], 0x1, 0x0) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000040)=""/6) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="220d7ec777fc81fe418b2b31be5b72d05bba7fbfaad1b6db26f8bfac551457e3d50520b26f8583553de9def2a68ec7a98223ade79e11fac66e2bd8b77d1fbc132786ede0d9e24040965866e898646fb24385e1cfd998326cfaad16be8fa817f3d78f1e2f5f09ab8fefec1977e0ca4558b13c51d7054badae20ac4053154db8847413a4fa90ed342a1e5990b5b70d0fc5e40f477816067aba5a2a4594e008e9fd957ea665ca000077fc99ba02f63405f8d943bc4cc2f21c2354f4798eb55611e6805e8235936dcc8f033b"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000640)={0xfffffffe, 0x3, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'irlan0\x00'}) pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000006c0)={0xa03}, 0x4) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff05, &(0x7f0000000340)=[{&(0x7f0000000440)="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", 0x256}], 0x58ea6a1e43fd8347}, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x18, &(0x7f0000000240)={r11}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x1, 0x7fffffff, 0x7fff, 0x800, 0x9, 0x101, 0x250dafd6, {r11, @in={{0x2, 0x4e20, @remote}}, 0x7cc, 0x73e4, 0x5, 0x20}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r12, 0xffff}, &(0x7f00000003c0)=0x8) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1446.786565][ T5445] encrypted_key: insufficient parameters specified 21:15:00 executing program 2: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1c, 0xffffffffffffffc8, &(0x7f0000000640)="4d50b441e692763113ef8745ffa3960538bdef6e6245124e25d30800", 0x0, 0x400}, 0x28) socket$kcm(0x29, 0x0, 0x0) 21:15:00 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(0x0, 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) [ 1446.972672][ T5453] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1446.972672][ T5453] The task syz-executor.5 (5453) triggered the difference, watch for misbehavior. [ 1447.131980][ T5462] cgroup: fork rejected by pids controller in /syz4 21:15:00 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) [ 1447.195996][ T26] audit: type=1800 audit(1570050900.572:231): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16738 res=0 21:15:00 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:00 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:00 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:00 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1447.542422][ T26] audit: type=1804 audit(1570050900.922:232): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2251/file0" dev="sda1" ino=16738 res=1 21:15:01 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:01 executing program 2: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1c, 0xffffffffffffffc8, &(0x7f0000000640)="4d50b441e692763113ef8745ffa3960538bdef6e6245124e25d30800", 0x0, 0x400}, 0x28) socket$kcm(0x29, 0x0, 0x0) 21:15:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x4, &(0x7f0000000040)="b3de3040", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="d431557d000000007d8e8eb909ebb2982fe55f2ee9bf1267cc580d54b9f675eedddb7db1a2549025fec7cfac5df1a0e4d362f0bb806923b728ebbe21bfc8c24e30"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x3f}], 0x1}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt(r3, 0x9, 0x9, &(0x7f0000000380)="65c99d40d17d4091885f8369a8cfec516b585a7a2282ca0e82cc2e5459686a1fcc9398a69daf8b424c633c25d1c07b0a96a0a907313448e19c21f69b4e17cb4155aafd7bacd27a95455ca629032612725bd1dfc5d68e6a47b2ef9ed126f6cbbc78ecf7266f14a266089427831d2406bd042ad0a6afc0d09664865f1b50d879ee725c5162bf123bbae67fd181c748a46cb56c673200edd13a6ca151794cc3e494d8b61bf2d00ae98eb3056ae5400e07eb8201cc6364c3d9c59f48b1ae0d4e09de43b31c6f3f175fdab851f4ee784458e34a370a6b5b384556e6232f9dd2baa181be22d8a9a7ae09f15a301b5dcf52a5117a7a37642e593e2dfaea79eb3f6cc544d88d441b674aa26048532e6726a5d1fff56f58bd2b1fd988ea7dce3341b21b050a7dffc0e32727c84c494d508309cd5adac36817f12636bca97a057a69c022c126de4cb7267d59a26d17bd7f5274223a215a545e33ee79f107be3f69189f427a42ebb6291dcb2f1094350e83b48ac806c57722d1aa26d500f6c627a7fcccf7def822628a60f6db51821c42e6e632a8b49bdc4d3cfeecb1b1dbfd1bda90382e485dd739b467db582ecbffe1e77dd122625b2d9269604548ae6b2588eee57d95f00ffee6813d4bb4b9c19e3d18631a1448cdc6d153072e47607dd697520267ea3309e4957a1723de05f39b42d30ad116bc56783087738e323e6de4420df55105b3db24997d9ee5eb27120daf6a1c40ed9c764414d189f91dcae1fe8c6f2ff891df4cf2803ac397aece45a22ab4ccfc3b0a8db784d5f8a4f0dc6c5753c87b6c7dccc65187eb76a4f0b075d23d1510a09b1eba72e5e7b2a9ecf011bd28b0a890248804be9b26dc748002508a27e73905f0add39c66d9ace8d9b2dcc38a67eb1eaa959a5d1dbf803668216432ecf86877d68d7ea22a93bea9d7787279b790feb173fd5e9957fa0e7881f70e82261f00a3ab8a1a3c9d1043d1220a1d6ad108dd488d9a4e5354027d03ac504393a8a613eb3b9a1bdfa596420de1183f21b98df1dd0986a41e28906642e82ddf4f585f9aa6d39f9f71179668e95d4aa745158f96ef65ef73716a01925c1de544d7ca821cfd3c88b4a787fe4178aa8b70c4bcbdb9261e315092b454e8e9d3d51cd6ec04b488dbdb17565ddb7209ee94f1753ffc6f6d7ef92c65602c8301954b0d87b4231a217df747feb6b545b4d1ea9befbd7c82d5e574abff8d4d31550934443f244e557a9019f85c7cc645b5fd6b7f1ebe689a540afa2bd35c4900d3b125fb2a130d70b978855803740fe6b6f2119b6aad56b88a39fc6bcb595111184c448f30f90a0520eb9457b3f88be8876988b54dec3fbe431ded75d166badb72e2b6402bed8593a64f52117024fe285204a2176a3aa5720aca33bd7e69058c1d5e643581079fbf9991a462f25a267c17f4c42afb29e897c8ee3076d9257e71c0172949892c9260b851c11c06dbcb46da0b890bccc6af00b1ee4c869b29c549f5316c2aaddc20d7cd6eebf821e6bb83304a51acb428ee6c9ebbe5bfacd175ff500fe130344849cd852ad4725cedd3bab64003304f95aa7520d4591be07c549b30dce3f74b59dabc70715bb8bfd117474e20eb32d1af5446e759dc0c7896405ef483430da9d28a65d65e97b2b0a955eef1b01d7d4ff28f7aed863fd6e0eeebb3d66767e4d97fbdf754a8f36e51b20cfafd085d02b7e0a29a2aa9ef53f2d9d4006889b913dc352545aff0f18adbaa12a3b524be79ca93d9a33d3ce9b02f30a534917469d40462a31d489749d5e71228af6495d1deed1105513396f03eb9ed689efe0f0347511b2a8b4352096d13e9684f93ca35931b9109dbee53a014700858cef22b4e1cb472d99b3b4b0a2b2b316bd32a0e708de43bcefde053130a20b24cfe6c5d2aa00413c394403d5b56d742395f5d9bb62645c3df3833749d45dd5d7f30d79c84dbfad2b1a8b2a88800a3debdcc46bc4ca7b3081200dba1c2ee6c14ba001a243dc11ed663dd22c27133695408494c8875b84ca641f8e3cf8bfc12dc2d56833cbda532720db0f8e4cd3d8d96339f84c00256a1560293dcc854f3fc9fe46104314d9d2606361c2b44a14bd0b91f8afdd409d8d145cf7a4fa91cc4e725aae654da20e88cd704931cc294ec253e165c26a20fd3825a1b2d564503142f392340fba82501d7f717263cc8eea43744d5f00886c4513391d96da930c8dad3cec5db324a0a6081a024b02a416511396f31abd39442b95659e4e3666f09889531be89328e44f19583fb678f85b50664462f64f3308825caedaa8c8371b3347b55b4f97687e53f52d824978af491a320a8a35a3b60a750a1aad26397fe2e242a6827b3fdb2e6fa84d3dfe06fc799e3d42897ea4b6bd0f1ea0d42029807821d04df5359582db8aa009673c723b742e7e9e697e397876d0d3bdce82d845100aeb9e131647b68b84db07c137205378013c413e63282f0641e4c7b4c1d7607501ae21017130e41e1b3ab5caaa6d9e65bcc6d3c139b9772586fdb1c51f1195b9975db10f2ecc38e86e95340516fd64ab354c73b33204959aadde2799241d02c1be17d0b443e7ac29aa08659d6885e9abaa485e6717a00f1c3d4f45b4461ec14f19441dea3c21f3c69471bf9762d7aaf44f09abee1221f036d31039ad52efe7fc46ff3cde52d73f678da40f479eddf8ddec71ee4a547c4ab1b00d05cb312eb2b0902ac797796858a7d5bc37a450dafa12a5956963b52c26e40ca3553d1c03382d1ba9621270347750cd504aea1823ff35d59603e3eb1f40f54fe6ddfcfa73bc0fd1f4569166f7f1b6268dfec859ad60d52a38c77ae7720c8106c55c27cee14c725ed287e140157bfb283f5b0586fdfe73bba6eea59639c83f92e59ed558d7664e36ea99a9397d854178ae2e8cc49d6e699260b0fb076adc6e5283f55d32d372a3db0f3ab9d385297f6d1e31895bd857278eb9b9d964212839a6be556d426327a5ea2c92fcdc65520da50acf8ee6124810116d3583aca652f10eba13727cd727ec47429bdffdcca450444281ac112f6ed23fbb4c9bdeeb43747ab6b1a61221ea767b295e3bfd791cf0c9ca1f50dde53503c4271de254a2ac843d3b5a85eab7cb829c08b141f6ee1065fd54e30ba6046e9893601c5851a34d09bd6c2af3a25f3f328d9ae1437b538d94ea7d692775a9bcc641dc7e9c351cf266c0412b1501c9804317c0bb42bac2a07c2954035a3ecb6aeaafa16bf685f6d27b19d9037b3f17662043f99c244b291552efac5cdb47844b84ccd54407e2a1e46615367ca16519bd69553083c742cdf661395a452c7d865b83e02c3dade2028b6b6434d30350bc5d58c5afbb2b0a483f43645c890fcad0c8e46ccdeddcb6438ad90b56cfeea08bdbdf6dd27c544fe59ec19632bf3a7fe1726d28baf5dde49367522e7bdbb5c923e12cea107f90838b04ed8ce0542a3bfbcd94ced98075ebfc855a400f8e657f9f345e57e2115a14587940f5fcd2bd6d95bc1a9c47e6c363f714e376370235fb9e00b597c04e7f3f810acaadcca3b9d1ab2d2bb46bd535cfc6153da1f038aa46285a4ce10973f7f49db4d822f7e58be00bdc35e87124706ed1a6bd1f8e812f6d66e8768401b3dc3b0d579fdb54b32baf3e5d4bc657dd87339c1e5539bda9574ef3941d791376aaffd4581ae413fec64ec5eed7921cbb7b495f4efd269582141db9f8ba66781d8db35dfda39abf3a69f15f2008ffb4555164d287d2390321d1d7212f0fcef667275a4b95038739d3948c0ef56e401ecd73cf2c43e1558b9ff20df2955d6c6374d9531e02c4705ff5379e104b7fe6a3e9d3c1bbb4ababe25d968d5391b7b161c65cdb4e0a2a650f8e7477b7af45bb8d65cdf06749780b196f5f848571f35d3817e4901847692607e323556a604060d46c2d5a730585816f72c5dbbc11a84512a7d2beecb6ef07b141168f8b3c2e73feebc8aaa121e2137d8dd043bb8e783e99c32b5e7f47a412028a2733dc0f8be6906a157f8807150bf658657aee70dae6b7ab58eac12108d292d51ef0fbc9d5f9f7bfbbb7f24b285c1f29008fdf1906985d6f663df9cb684139ffb0df78a4a85bd27e938485d9077cae3a7981677f74029bd8a08a8a25677e85de796622b5ebd5130e49c94ea1ba39f3db48ae39784aaed3e61031c58d8d3baaa81d7869768579aa0166dbde7966f9536345f3eb79112fa1def42bf0ff290834e2287756480e75af3e8ca06627157124fe3ef043971d1837e1a5a39f38efaaca43df4106f29abe53160c77f77a75d501cdac4746875a60e074efa85f609265e589aeb1a950e071c58883df3446f6fe9626b0a5b3d984008559001113e217dee63aeb660fc62ab0255d27227362bdeb243885c53481974c250f99a68a52a4d1bfb02a00980a2546cbfd6b1efffed2f90b4d2b475b48aaef6defb4497cca6e10419b190c6c04f187ccddde47e4b6eae6c2596d27c7ef28ba1faea9a0dc25b46c2fc9e9a7eea345dbe0231c3c98ef6f2517dd1d6cfa302f0f4bbdfe2e215995ce38ba2a0e8d111a575a4f3f6f70b2b422cdbec5d77113ecfd8737c4c4d982142633cd54a513f478c584f333c6a3d3383c3a06b95996561704ecc688d84579ae4f54b97a3de5b1e72be5abb0d1e7708e6b4abc51c1e6546f0e332c691a8abbfad5ca395bcc82b66dfe5ab436ab5cfb1c74c38c170253510242482263d1d96eabf67d0a9e7855099511664359676a9bed314e45cf70d8032362d809fd3f79dc88c5ce479de02584f27bb8425a1cac0fe40454759be622404f37ee9eac57d5ef06844a11cca67379bca9db369a556b5eddebae11eec49ad4339b4ae82c4d8f98c8ed70f98d392743d5c924252e31a7f121bab49534c818c989fd77390ddd6da1b2020a36de1926c03a16bef775e07949b5a4f74949f91783a977c6c08d292ae903ee127e9e3e7c297fbf6c2abc5aade0fec250ad4ebc2497f704ae257dcdfc0b41be0aa36cdc0f723b2a03368fc789ffb3a21aad57b3b62060bb11f5ed766f74bc29135834bb486bce191faa084793e1b54e39102d4735a3e60fcd5ed037aa86034156ebf36d4a51d6a170d4d2d9f8eeefc0f4bbfae20f6221ccf31bf6e8a04a46a7751d96c66372c18678d481e4b9efb18a837a9ed4678fe5d2e097eab97d3e75c99df337353702c214c0726dd09eccdd9caafac78080077a41f2db47be47833dc4268977ee9ab58468f8621a9fa03d83ed15f6cec1cace9ffad8cdcba8845cc2e16adea5dcd23e0045eae2580ddc30aacd4f258e2961d1af98066340e2bae769f7400045a60e191b7645950861e015dfd6478fa6661d94e39f6e15cb9870524d2e8c4a453d6f6a63d737ba6216ad5b30698b2800671c2e8176d80154b1211fcdfc6c44abe4c4d087cafa41556e39139779e7d92fa5df35594540d46ed1c9b817e91b8db5413bae696b030125840ad2b23d58103589c35166b36809ad1853a73e348a6ee9e0a3e69e0778b3edde592eb58163c6ef7d2ad270f4b2e1ff0c90a4b58bc3ef47219ac58e4087274347b499b34945a5058a9649450a472444474f3ac35a9749631c9a1518e0954c42b24a34b47c09e5fa5ff1ce186c62e5a1847c39035234a3d6f446bd3a484d32da77b878612756f6c4c81d2175eee4873a2dece2c4e4ef0bdc01932e7b7acea0c8bc4188c318093ed4e08a41b4565e71e2880aa8f350dfd4b8cdb9e36e07c48c477389a20d01b3b1025df6f957db103597cfc86f6d3aa0593137274645307e4de1ce0ad6c4b535a64dc3787e484", 0x1000) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:01 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:01 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:01 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) [ 1448.215837][ T26] audit: type=1804 audit(1570050901.592:233): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2252/file0" dev="sda1" ino=16788 res=1 21:15:01 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:01 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:01 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:02 executing program 2: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd43307c529a4ce6be614c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf8db95f5b068a9e00000000000000000000000000000000000018287ba7d8807cf077ccfca6785deb269d0a91985602763e0d70d404da006a3d6eef8fb7fcdd82eb1e48410000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x1c, 0xffffffffffffffc8, &(0x7f0000000640)="4d50b441e692763113ef8745ffa3960538bdef6e6245124e25d30800", 0x0, 0x400}, 0x28) socket$kcm(0x29, 0x0, 0x0) [ 1448.645662][ T26] audit: type=1804 audit(1570050902.022:234): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2253/file0" dev="sda1" ino=16518 res=1 [ 1449.181115][T25238] device bridge_slave_1 left promiscuous mode [ 1449.187388][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.231538][T25238] device bridge_slave_0 left promiscuous mode [ 1449.237807][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.283339][T25238] device bridge_slave_1 left promiscuous mode [ 1449.289704][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.341382][T25238] device bridge_slave_0 left promiscuous mode [ 1449.347737][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.392146][T25238] device bridge_slave_1 left promiscuous mode [ 1449.398353][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.461420][T25238] device bridge_slave_0 left promiscuous mode [ 1449.467611][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.451292][T25238] device hsr_slave_0 left promiscuous mode [ 1455.520884][T25238] device hsr_slave_1 left promiscuous mode [ 1455.583960][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1455.595739][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1455.610309][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.651649][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.743535][T25238] bond0 (unregistering): Released all slaves [ 1455.921461][T25238] device hsr_slave_0 left promiscuous mode [ 1455.980809][T25238] device hsr_slave_1 left promiscuous mode [ 1456.049945][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1456.066315][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1456.079167][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.139421][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.221241][T25238] bond0 (unregistering): Released all slaves [ 1456.381703][T25238] device hsr_slave_0 left promiscuous mode [ 1456.430823][T25238] device hsr_slave_1 left promiscuous mode [ 1456.484699][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1456.499006][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1456.513806][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1456.579022][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.669371][T25238] bond0 (unregistering): Released all slaves [ 1458.515602][ T5520] IPVS: ftp: loaded support on port[0] = 21 [ 1458.645225][ T5520] chnl_net:caif_netlink_parms(): no params data found [ 1458.698011][ T5520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.706565][ T5520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.715008][ T5520] device bridge_slave_0 entered promiscuous mode [ 1458.724010][ T5520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.732548][ T5520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.741162][ T5520] device bridge_slave_1 entered promiscuous mode [ 1458.771259][ T5520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.790982][ T5520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.825281][ T5520] team0: Port device team_slave_0 added [ 1458.840905][ T5520] team0: Port device team_slave_1 added [ 1458.943595][ T5520] device hsr_slave_0 entered promiscuous mode [ 1458.999217][ T5520] device hsr_slave_1 entered promiscuous mode [ 1459.050758][ T5520] debugfs: Directory 'hsr0' with parent '/' already present! [ 1459.066356][ T5524] IPVS: ftp: loaded support on port[0] = 21 [ 1459.077144][ T5520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.084282][ T5520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.084475][ T5520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.098619][ T5520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.109213][ T5525] IPVS: ftp: loaded support on port[0] = 21 [ 1459.222270][ T5520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.312375][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 1459.338924][ T5525] chnl_net:caif_netlink_parms(): no params data found [ 1459.350151][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1459.359341][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.367954][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.377220][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1459.413792][ T5520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.437198][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1459.445810][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.452920][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.484257][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.491830][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.499705][ T5524] device bridge_slave_0 entered promiscuous mode [ 1459.522057][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1459.531008][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.538060][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.550379][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.557926][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.566113][ T5524] device bridge_slave_1 entered promiscuous mode [ 1459.573553][ T5525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.581838][ T5525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.589592][ T5525] device bridge_slave_0 entered promiscuous mode [ 1459.599156][ T5525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.606355][ T5525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.615150][ T5525] device bridge_slave_1 entered promiscuous mode [ 1459.660198][ T5525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1459.669595][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1459.687293][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1459.701853][ T5525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1459.713577][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.173764][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1460.182779][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1460.192501][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1460.223241][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1460.232390][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1460.241434][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1460.250386][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1460.259472][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1460.268178][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1460.278094][ T5525] team0: Port device team_slave_0 added [ 1460.285145][ T5520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1460.294818][ T5524] team0: Port device team_slave_0 added [ 1460.529465][ T5525] team0: Port device team_slave_1 added [ 1460.541789][ T5524] team0: Port device team_slave_1 added [ 1460.823426][ T5524] device hsr_slave_0 entered promiscuous mode [ 1460.871099][ T5524] device hsr_slave_1 entered promiscuous mode [ 1460.910815][ T5524] debugfs: Directory 'hsr0' with parent '/' already present! [ 1461.184216][ T5525] device hsr_slave_0 entered promiscuous mode [ 1461.231182][ T5525] device hsr_slave_1 entered promiscuous mode [ 1461.290686][ T5525] debugfs: Directory 'hsr0' with parent '/' already present! [ 1461.524763][ T5520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.082453][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.349698][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1462.360030][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1462.371422][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 21:15:15 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:15 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1462.524066][ T26] audit: type=1804 audit(1570050915.902:235): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2254/file0" dev="sda1" ino=17441 res=1 [ 1462.806608][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1462.816026][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1462.825075][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.832187][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.842292][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1462.851661][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1462.860167][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.867283][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.875519][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1462.884803][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1462.893476][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1462.902457][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1462.916547][ T5525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.930400][T25238] device bridge_slave_1 left promiscuous mode [ 1462.937230][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.962717][T25238] device bridge_slave_0 left promiscuous mode [ 1462.968961][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.013376][T25238] device bridge_slave_1 left promiscuous mode [ 1463.019592][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.081831][T25238] device bridge_slave_0 left promiscuous mode [ 1463.088005][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.142347][T25238] device bridge_slave_1 left promiscuous mode [ 1463.148517][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.181919][T25238] device bridge_slave_0 left promiscuous mode [ 1463.188147][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.121190][T25238] device hsr_slave_0 left promiscuous mode [ 1469.160901][T25238] device hsr_slave_1 left promiscuous mode [ 1469.209654][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1469.226388][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1469.238979][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.285355][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.360876][T25238] bond0 (unregistering): Released all slaves [ 1469.501637][T25238] device hsr_slave_0 left promiscuous mode [ 1469.540898][T25238] device hsr_slave_1 left promiscuous mode [ 1469.595692][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1469.607737][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1469.621541][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.689378][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.765514][T25238] bond0 (unregistering): Released all slaves [ 1469.921493][T25238] device hsr_slave_0 left promiscuous mode [ 1469.970886][T25238] device hsr_slave_1 left promiscuous mode [ 1470.019109][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1470.034238][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1470.048108][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.109581][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1470.211228][T25238] bond0 (unregistering): Released all slaves [ 1470.296240][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1470.304764][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1470.312915][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1470.321805][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1470.339433][ T5524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1470.350992][ T5524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1470.368295][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1470.377463][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1470.386363][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1470.397068][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1470.405749][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1470.418867][ T5525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.432512][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1470.440376][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1470.456305][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1470.479611][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1470.499285][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1470.508452][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.515603][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.523617][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1470.532253][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1470.540791][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.547877][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.555844][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1470.565001][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1470.584036][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1470.593791][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1470.603235][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1470.615378][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1470.624964][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1470.634405][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1470.649189][ T5525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1470.661245][ T5525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1470.673994][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1470.683583][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1470.692482][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1470.727052][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1470.758225][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1470.774054][ T5525] 8021q: adding VLAN 0 to HW filter on device batadv0 21:15:24 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0000cbdc6ee5ba3cf30aca574ce04c58b5c4bec83e49de383e95a96270359299eec2520b2ee42db3b85af5f0fe6f6b2db97a9444d09eac202977c7cbfc61be4e12c18538d75536b5eb90246d603b59d8dc6e77098cf9bf162b46360da8f3fa1f94e616d323e2c750d9cf33b063f0e7c5142522b2eebd85cb4eb59b09fe5232a5ad2c5a1433052df7c2251f464638626f072df691cc35acfea6a8e11b2024000791dd74043a7f7733ff16b0019b9977603f52313f27d1742237f90e1697787a41028d2452fe97d6"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r3 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_GETXATTR(r4, &(0x7f0000000480)={0x18, 0x0, 0x3, {0x85}}, 0x18) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x5cb}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) r5 = gettid() tkill(r5, 0x3b) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x3, 0x6, 0x9, 0x97, 0x0, 0x1, 0x64a0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x10000, 0x1000, 0x0, 0x4, 0x2000, 0x0, 0x101}, r5, 0x5, r2, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:24 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, 0x0) 21:15:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:24 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:24 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:24 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, 0x0) [ 1471.072805][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000001c0)={{0x3, 0x0, @identifier="675b00050000000000000c8f606a5ea5"}}) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="2fdb000000"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000180)=""/63) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) dup2(r4, r5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', r6}) [ 1471.255923][ T26] audit: type=1804 audit(1570050924.632:236): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2255/file0" dev="sda1" ino=17745 res=1 21:15:24 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:24 executing program 2: epoll_create1(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000240)="40c74adc7724e27d876f441d952bf111375896d876c4"}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d0, 0x4000) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x9, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000180)={0x0, r2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14) r4 = socket(0x0, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r6, 0x0) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ff0000/0x1000)=nil) 21:15:24 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:24 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:24 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) ioctl$EVIOCGSND(r3, 0x8040451a, 0x0) [ 1471.461520][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1471.597477][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:25 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1471.856407][ T26] audit: type=1804 audit(1570050925.232:237): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2256/file0" dev="sda1" ino=17553 res=1 21:15:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ipv6_route\x00') lseek(r0, 0x96, 0x0) 21:15:25 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:25 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x100800) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$bt_hci(r6, 0x0, 0x0, &(0x7f0000000280)=""/155, &(0x7f0000000380)=0x9b) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000480)=""/167, 0x2220000, 0x0, 0xfff}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x18, &(0x7f0000000240)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r7, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000200)=0x84) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:25 executing program 4: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x800000, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000580)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xb0, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffb3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe614}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004005}, 0x802) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a74e0cd2bff5554de9d4824652d757f49184fc972503e6f86c4588bfdeb44c9f194815ce9b78e9e7c782013bcd06fdde77943ceb6673914c2ca4d3376b63602a2eb37db1f7b64d4589554c7ece601062cc0533098690b70ebfd8672b400b08dd550fd5160ad90f27214be76b5abd421daac94e851e8a28502ea1a235bee941f2dee132c4cd93ec2d46b0545d6188e897b354c2e3bea0a31c7f275a32bd746e3eeafdf8e5835c5bdf0a87ed1c51e2a2d1ad4be9f82fa254640ed6bcc9c9db6c1f909e53042abe1c25936ed286ef03393dc8766ec684d9bdf52b88bea77659"], 0x1}}, 0x0) 21:15:25 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) [ 1472.391025][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1472.468144][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:25 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:25 executing program 2: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ba", 0x1, r0) keyctl$chown(0x4, r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:15:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:26 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:26 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:26 executing program 2: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ba", 0x1, r0) keyctl$chown(0x4, r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 1472.714460][ T5757] encrypted_key: insufficient parameters specified 21:15:26 executing program 4: mkdir(&(0x7f0000000200)='./bus\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x1c) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./bus\x00', &(0x7f0000000680)='cgroup2\x00', 0x20004a, &(0x7f00000006c0)='.selinuxkeyringuser\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(0x0, 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) open(0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) [ 1472.774560][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1472.872781][ T5769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:26 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:26 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x2000, 0x0) 21:15:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0x20008, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x27, 0x300) socket$kcm(0x10, 0x400800000000000, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0xb1c74101ba1fdf5a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') socket$kcm(0xa, 0x3, 0x11) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 21:15:26 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x400000000000058, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 21:15:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="8be571ccc6deb1796405b883ef4b0fa7be8b1fbab843c84e2306a818053b2d4d", 0xffffff17}], 0x1, &(0x7f0000000340)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/176, 0x7ffff000}], 0x1}}], 0x4000136, 0x0, 0x0) 21:15:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) 21:15:27 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x4) 21:15:27 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) [ 1475.008432][ T6102] device nr0 entered promiscuous mode [ 1476.652400][ T6215] IPVS: ftp: loaded support on port[0] = 21 [ 1476.739726][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 1476.769951][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.778082][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.786471][ T6215] device bridge_slave_0 entered promiscuous mode [ 1476.794671][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.802015][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.809765][ T6215] device bridge_slave_1 entered promiscuous mode [ 1476.830323][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.842202][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.862756][ T6215] team0: Port device team_slave_0 added [ 1476.871906][ T6215] team0: Port device team_slave_1 added [ 1476.923668][ T6215] device hsr_slave_0 entered promiscuous mode [ 1476.974798][ T6215] device hsr_slave_1 entered promiscuous mode [ 1477.030669][ T6215] debugfs: Directory 'hsr0' with parent '/' already present! [ 1477.052723][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.059845][ T6215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.067324][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.074445][ T6215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.130903][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.139064][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.167422][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.188342][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1477.189903][ T6218] IPVS: ftp: loaded support on port[0] = 21 [ 1477.197658][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1477.213469][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.228212][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1477.237404][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1477.246277][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.253481][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.279226][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1477.288490][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1477.298172][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.305264][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.313434][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1477.341783][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1477.350766][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1477.363668][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1477.840154][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1477.848429][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1477.857260][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1477.866617][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1477.875321][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1477.899583][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1477.909249][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1477.920308][ T6220] IPVS: ftp: loaded support on port[0] = 21 [ 1478.140227][ T6215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1478.188212][ T6218] chnl_net:caif_netlink_parms(): no params data found [ 1478.471249][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.478436][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.486896][ T6218] device bridge_slave_0 entered promiscuous mode [ 1478.495099][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.502405][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.510290][ T6218] device bridge_slave_1 entered promiscuous mode [ 1478.767348][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.791673][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.031501][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.054967][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 1479.380330][ T6218] team0: Port device team_slave_0 added [ 1479.389699][ T6218] team0: Port device team_slave_1 added [ 1479.417067][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.425841][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.434389][ T6220] device bridge_slave_0 entered promiscuous mode [ 1479.443495][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.452043][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.459897][ T6220] device bridge_slave_1 entered promiscuous mode [ 1479.740216][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.759212][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.823990][ T6218] device hsr_slave_0 entered promiscuous mode [ 1479.861071][ T6218] device hsr_slave_1 entered promiscuous mode [ 1479.902377][ T6218] debugfs: Directory 'hsr0' with parent '/' already present! [ 1479.911329][ T6220] team0: Port device team_slave_0 added [ 1480.140053][ T6220] team0: Port device team_slave_1 added [ 1480.215092][ T6220] device hsr_slave_0 entered promiscuous mode [ 1480.271026][ T6220] device hsr_slave_1 entered promiscuous mode [ 1480.310643][ T6220] debugfs: Directory 'hsr0' with parent '/' already present! [ 1480.574152][T25238] device bridge_slave_1 left promiscuous mode [ 1480.580410][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.621904][T25238] device bridge_slave_0 left promiscuous mode [ 1480.628228][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.684431][T25238] device bridge_slave_1 left promiscuous mode [ 1480.690746][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.741491][T25238] device bridge_slave_0 left promiscuous mode [ 1480.747720][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.782863][T25238] device bridge_slave_1 left promiscuous mode [ 1480.789045][T25238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.831502][T25238] device bridge_slave_0 left promiscuous mode [ 1480.837736][T25238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.751422][T25238] device hsr_slave_0 left promiscuous mode [ 1486.795518][T25238] device hsr_slave_1 left promiscuous mode [ 1486.864435][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1486.876327][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1486.890217][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.955257][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.034409][T25238] bond0 (unregistering): Released all slaves [ 1487.172490][T25238] device hsr_slave_0 left promiscuous mode [ 1487.210833][T25238] device hsr_slave_1 left promiscuous mode [ 1487.259812][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1487.275932][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1487.287789][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.328348][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.428940][T25238] bond0 (unregistering): Released all slaves [ 1487.561546][T25238] device hsr_slave_0 left promiscuous mode [ 1487.600864][T25238] device hsr_slave_1 left promiscuous mode [ 1487.658917][T25238] team0 (unregistering): Port device team_slave_1 removed [ 1487.680764][T25238] team0 (unregistering): Port device team_slave_0 removed [ 1487.694263][T25238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.735262][T25238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.830987][T25238] bond0 (unregistering): Released all slaves [ 1487.946241][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.966171][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.985472][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1487.993767][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1488.005363][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.016140][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1488.025461][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1488.036427][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.054982][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1488.064199][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1488.073249][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.080425][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.088316][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1488.097580][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1488.106190][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.113410][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.140884][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1488.148909][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1488.158128][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1488.166891][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1488.176015][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1488.184695][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1488.193456][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1488.201941][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.208984][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.216694][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1488.225368][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1488.234030][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.241170][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.248777][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1488.258132][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1488.266125][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1488.281261][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1488.289934][ T3440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1488.311876][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1488.332154][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1488.341696][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1488.350029][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1488.358950][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1488.367839][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1488.377087][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1488.385879][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1488.394670][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1488.403446][ T3954] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1488.414020][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1488.429362][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1488.438165][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1488.489194][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.502760][ T6220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1488.515056][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1488.620805][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1488.629555][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1488.652770][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 21:15:42 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:42 executing program 4: ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6c, &(0x7f0000000480)={r1, @in={{0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x100) 21:15:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0xa4) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:42 executing program 2: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ba", 0x1, r0) keyctl$chown(0x4, r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:15:42 executing program 2: clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ba", 0x1, r0) keyctl$chown(0x4, r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 21:15:42 executing program 4: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r0 = socket$netlink(0x10, 0x3, 0xff7fffffffffffff) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x802fffffff8}, 0x9bd3e5fafdb2fa71) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000380)=""/171, 0x6}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000005c0)={0xfffffffffffffdf5}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x8003, 0x12) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x379}, 0xfffffffffffffff8) r4 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x1, @dev}, {0xa, 0x4e20, 0x0, @mcast2}, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x5c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti\xb0\x00\x10\x00\x00\x00\x00\x00z'}) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x100000000000010) fcntl$setstatus(r5, 0x4, 0x1000060fe) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) open(&(0x7f0000000080)='./bus\x00', 0x900, 0xfffffffeffffffff) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x40600, 0x0) r6 = getpid() sched_setscheduler(r6, 0x0, 0x0) clone(0x10000000, &(0x7f00000006c0)="4912cab8e1d0a0d47cd6a6992d9f269f4cafc5e49daf280dfec7dbb4f7f8e639d68710e133ddeb89b837294372f7048fde91b99633ac9da4733dda5093caae8ed3f599d141b5a88c481d260652430d582447b4e3857c2c9077bdd5948b10ee7584082e45660adb221625500954c898c1266263183a8bf2f2180cccced54893357148cadf639cc6540cf6ca1f034e8e032edac9", 0x0, 0x0, 0x0) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f0000000180), 0x401ffffffe) socket$unix(0x1, 0x3, 0x0) 21:15:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0xfffffe3e}], 0x100000000000012a}, 0x40) socket$kcm(0x2b, 0x0, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) r4 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0xc3, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000480)=0x5, &(0x7f00000004c0)=0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r6, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9e}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x507a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x3, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfc}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x307, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8008000}, 0x20000000) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @rand_addr=0xe0}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='ifb0\x00', 0x6, 0x6, 0x2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:42 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1489.341566][ T6372] encrypted_key: insufficient parameters specified 21:15:42 executing program 2: 21:15:42 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 21:15:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) finit_module(r2, &(0x7f0000000040)=':.nodev\x1e\x00', 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) munlockall() ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x8, 0x8, 0x4}) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0xffffffffffffff66) 21:15:43 executing program 2: [ 1489.739975][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:43 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:43 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:43 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 21:15:43 executing program 4: 21:15:43 executing program 2: 21:15:43 executing program 2: 21:15:43 executing program 4: 21:15:43 executing program 2: 21:15:43 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) 21:15:43 executing program 4: [ 1490.473645][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1491.080197][ T26] audit: type=1804 audit(1570050944.452:238): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2261/file0" dev="sda1" ino=17153 res=1 [ 1491.110937][ T26] audit: type=1800 audit(1570050944.452:239): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17153 res=0 21:15:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) 21:15:45 executing program 4: 21:15:45 executing program 2: 21:15:45 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) 21:15:45 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:45 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:45 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) pipe2(&(0x7f0000000080), 0xa3c8640967c914a8) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) 21:15:45 executing program 2: 21:15:45 executing program 4: [ 1492.071061][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:45 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:45 executing program 2: [ 1492.159392][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:45 executing program 4: 21:15:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x20a3142cf6eca8b8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0xa4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r4, 0x0, 0x0, 0xa4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0xa4) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000001580)=0x1, 0x4) 21:15:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000001580)=0x1, 0x4) 21:15:45 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, 0x0, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8f45aa7708f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d92b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefd6c32891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404000000e67b11b00dd40f0b6dcb1582", 0xc9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/108, 0x6c}], 0x2}}], 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0xa, 0x0, 0x27) [ 1492.491383][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1492.787536][ T26] audit: type=1804 audit(1570050946.162:240): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2262/file0" dev="sda1" ino=16737 res=1 21:15:46 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) bind(r2, &(0x7f0000000000)=@llc={0x1a, 0x8, 0x3, 0x4, 0xfe, 0x7, @dev={[], 0x1c}}, 0x80) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:15:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000001580)=0x1, 0x4) 21:15:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) [ 1492.871355][ T26] audit: type=1800 audit(1570050946.192:241): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16737 res=0 21:15:46 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x88})+\x00', 0x0) write(r1, &(0x7f0000000140)='Z', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0xff8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=')et\x02\x16\x00W\xca\xdad\x8dt0:loppp0\x00') 21:15:46 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) [ 1493.678180][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1493.699383][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:15:47 executing program 4: syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000340)) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x8000, &(0x7f0000000780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@loose='loose'}, {@aname={'aname', 0x3d, 'proc$GPL!securityeth0eth1.bdevem1\x00'}}, {@access_user='access=user'}], [{@fowner_eq={'fowner'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r3 = dup(0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/228) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x5, 0x0, 0x0, 0x81, 0x0, 0xd46, 0x20, 0x7, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff400, 0x0, 0x6a87b4f6, 0x20, 0xd2da, 0x0, 0x8da, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0xa1e, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xe000000000, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x6, 0x0, 0x9, 0x3, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x1, 0x8, 0x7, 0x0, 0xc35, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc00, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x6, 0x63, 0x0, 0xeca, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x800, 0x100000000}, 0x4900, 0x7fff, 0x0, 0x6, 0x400, 0x0, 0xffffffff}, r1, 0x6, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2282, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@loopback}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}], 0x8000000000003b0, 0x0, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000e00)="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", 0x1000) connect$packet(r0, &(0x7f00000005c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="d464e6ed34a6"}, 0x14) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 21:15:47 executing program 2: bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffff}, 0x3c) [ 1493.861572][ T26] audit: type=1800 audit(1570050947.242:242): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16737 res=0 [ 1495.726590][ T7113] IPVS: ftp: loaded support on port[0] = 21 [ 1495.799578][ T5146] device bridge_slave_1 left promiscuous mode [ 1495.808156][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.861800][ T5146] device bridge_slave_0 left promiscuous mode [ 1495.868065][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.771417][ T5146] device hsr_slave_0 left promiscuous mode [ 1497.820855][ T5146] device hsr_slave_1 left promiscuous mode [ 1497.871505][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 1497.889125][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 1497.902178][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.945882][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.048740][ T5146] bond0 (unregistering): Released all slaves [ 1498.150383][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 1498.175263][ T7116] IPVS: ftp: loaded support on port[0] = 21 [ 1498.193139][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.200324][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.208344][ T7113] device bridge_slave_0 entered promiscuous mode [ 1498.216730][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.223934][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.231865][ T7113] device bridge_slave_1 entered promiscuous mode [ 1498.266494][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.279921][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.304245][ T7113] team0: Port device team_slave_0 added [ 1498.382337][ T7113] team0: Port device team_slave_1 added [ 1498.543634][ T7113] device hsr_slave_0 entered promiscuous mode [ 1498.581055][ T7113] device hsr_slave_1 entered promiscuous mode [ 1498.620642][ T7113] debugfs: Directory 'hsr0' with parent '/' already present! [ 1498.661340][ T7116] chnl_net:caif_netlink_parms(): no params data found [ 1498.673438][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.680581][ T7113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.687973][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.695113][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.767680][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.776257][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.785592][ T7116] device bridge_slave_0 entered promiscuous mode [ 1498.794553][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.802354][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.810914][ T7116] device bridge_slave_1 entered promiscuous mode [ 1498.849257][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.873089][ T7116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.893021][ T7116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.908238][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.923914][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1498.937610][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.949193][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.968254][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1499.027215][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1499.039513][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.046654][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.063625][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1499.076816][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.083937][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.103103][ T7116] team0: Port device team_slave_0 added [ 1499.135915][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1499.154570][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1499.175140][ T7116] team0: Port device team_slave_1 added [ 1499.198828][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1499.215079][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1499.228815][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1499.257953][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1499.344049][ T7116] device hsr_slave_0 entered promiscuous mode [ 1499.370953][ T7116] device hsr_slave_1 entered promiscuous mode [ 1499.420977][ T7116] debugfs: Directory 'hsr0' with parent '/' already present! [ 1499.450858][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.570147][ T7116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.587353][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1499.596464][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1499.608088][ T7116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.635482][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1499.646309][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1499.655478][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.662758][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.685045][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1499.693881][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1499.709312][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1499.728987][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.736156][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.752783][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1499.767218][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 21:15:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'eql\x00', @ifru_addrs=@ax25}) 21:15:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000c23d1afc9acaccf773d67857471c9f2618827100177ac9c7d199b970331dab3eb64416553b5f23e8030c4e1a736941fc7360b2d3b7a6781bb7bbda4a6518e752826da48fe2e998e9fb05ff2dd77b639c98e3d3cc880bc67b0a2c02320386934453214d9179f07236ff861ac2af1c0a80743d2ab1f83812f0ded20d3b0b429b0254caca15f01607fbbab1726ad5d6196bf5873b24420fbec6a8ff5e112f14b2a4f56c07a9056c525ba9c0c5d013985c95d9a86beee362f7d9826361a6034d728e8c7c61b2366474f2c55b6c924950"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xa4) r4 = accept4$rose(r3, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@bcast, @bcast, @bcast, @rose, @netrom, @default]}, &(0x7f0000000040)=0x40, 0x800) setsockopt$sock_int(r4, 0x1, 0x10, 0x0, 0x3e8) [ 1499.789909][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1499.799018][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1499.828128][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1499.877535][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1499.897774][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1499.921634][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1499.944891][ T7116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1499.966825][ T7116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1499.985041][ T9654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1500.022642][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv0 21:15:53 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:15:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) readahead(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xa100, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001900)={0xfa8, 0x26, "655e5b0a2be0a4102586dcd8d34e252fd6e2b336fb2eb6c724d5f50b8945057289e21c244254"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4a80e83c98a25fb4) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) mount$fuseblk(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='fuseblk\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000009c80)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000000c0)=""/2) sendfile(r4, r1, 0x0, 0xffffffff) 21:15:53 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x20000002}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x8e00, 0x0, 0x0, 0x40000002}) 21:15:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000007126000000000000bf67000000000000570600000fff07006707000002000000070600000ee60000bf050000000000000f650000000000006507f4ff02000000070700004c0000001f75000000000000bf54000000000000070500000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1500.424287][ T26] audit: type=1800 audit(1570050953.802:243): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=114 res=0 [ 1500.542071][ T26] audit: type=1804 audit(1570050953.832:244): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir874060238/syzkaller.GFkZZ7/14/file0/file0" dev="loop2" ino=114 res=1 21:15:54 executing program 4: syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, &(0x7f0000000340)) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x8000, &(0x7f0000000780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_uid={'acces+'}}, {@loose='loose'}, {@aname={'aname', 0x3d, 'proc$GPL!securityeth0eth1.bdevem1\x00'}}, {@access_user='access=user'}, {@access_any='access=any'}], [{@fowner_eq={'fowner'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r3 = dup(0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000600)=""/228) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x5, 0x0, 0x0, 0x81, 0x0, 0xd46, 0x20, 0x7, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff400, 0x0, 0x6a87b4f6, 0x20, 0xd2da, 0x0, 0x8da, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0xa1e, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xe000000000, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x6, 0x0, 0x9, 0x3, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x1, 0x8, 0x7, 0x0, 0xc35, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc00, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x6, 0x63, 0x0, 0xeca, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x800, 0x100000000}, 0x4900, 0x7fff, 0x0, 0x6, 0x400, 0x0, 0xffffffff}, r1, 0x6, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2282, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@loopback}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}], 0x8000000000003b0, 0x0, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000e00)="4575a2126582425f76e3312a2d259263a7e65d501298b5a61c584325e5c4abcc1c2d55982eb528165d0b4ce9ca4d4558554ae546446ad58f7061f1906cc13bb9e46e79734051ff9f7262aa0f763a04fa6d0cfd130b6cc5e7188539f5e93af15582d6122320af27acffd2d5b2b90e73e6fbb304ecb9d05991ad04fb3cdcfd6c1355e01c50c15a15a18b446ae5afc559f2797bd3fd210e51a2fc3ae0f352555c869abe590c7510730f0e283e6b9f6099c90a68a69964ebbddac71b0c08e173de13b57b1ec90ff56256167c51751a331d49aff1bf7ce660bf6b40b0948324747f35d7d981322a89812229bc34969b7af2cdfb99f47d17f09c503420042a912002d38982b50fe5a59e6b3d300521af7d688664a2866ed5999ff37a4202c8a8edf2fe731cadadcb5287031b680c9cfcfdc03709caa4f6a2ffc7cf0898de85a4d195ffd25130340038b949add6b3a458955d703ca1b9713d3724df93c4b6ac830bf1dbac513613105759d1ae9baf0b3ea4fb736a2c35c34de1e5c2f7d22d9798b1f8d8c593e8dd6976077cd3bb9b3756b971c8572ad2222ff6394f239229e5dc6474d111fc976b7367335aec9a48af8308e8bafe65feb17289d90ff7baded603a6a65479e8c9e3af8fedfbdeae10b914b09fbca2e233911c64a86adb86e0b762b52e3a4815e8bd13c59fb2433cde24d94415ee40e37317ca20fcada67bc9769a63a39e965af0a8eda5be017f9fdf1382f081222a0e84a42a822f8dc46fb81104383e7334fb2ea3c64bf97562397295c2bd8e93fdba80008f8259872ab02619805c7d2934cac25ce7e5b23bb3ea5c41732bfaf848b66545dc18f1c0bbfda979fde4e3a3e6deb41ef37f979bc3c4eee3d2156f99c10aa249abc5fd752af1c194d0e97017a0bfc5647975f743cd43bcf8e4de0a4e22abda2d483e0678dec54c08f992725637d09e13742f95abb2cea2a020e05fe2dd0f0fa2d8384e4ce0269032e9745e6b9110891f619a35d8e1cd6d97e5768ca2077ed482b409219affdaebedb780c4f49dbe32f5eb310634af466b8f7dbba7a8b61b1209cc64689bed232f307936cbafac9aefe9273d2f0bd6e5e768d7332cae063df35594aa80861c8ba8c1866004379e49d7949a8cd8460a16e5d3442181ed64f478140386b63a25f6bc960a42f2666c7eedaa8a10a583445f47c193732a79c22848d94d8336e75bb714ed6175fe837bfdc54beb7b832ef0c01f59f6666a47456c4c8ab7937312dec58d97d0c413e2b56eb76e9b33c818de368ebe9291217ae245b66863404500dbabc860ca7adddda053e0da650287b34e9269a49d5602aef8f042db4a990f296f687a25ab11bb0c34142220f93109fce88f31ced7e5e8c897c7d4d600475c2daa0f640549de4f5236f05b3df9bc85f4569b1142a729491b1f6fe162eb24802ac7d92b47f4f18db9a44d86857000be553536d3b23861f0c915ab4c6272004d27c5b4bceb0f7e87a696cf21a3e581a65e342d45bc71261ca619d2daf3f942f7b4cceacd4788735cc9024cb18bdaa238fa76031a96db1f303249e095b7cb87be4bfe0dd5e1253711c0d3b3d1367f0c84b5863bcb96dee2982991ffa2f0cd1b08489ea9d1239135d99f43731013d5b108d54b505a4f545f58119c366f46f0f4bbf3c905500f1a10ba5545a4a29d4d167cf9ea38ed3b8bc47325930599bcf257c243b1f80b678980f9e88dac0f365be235d2ed5e4c4c3b1aab7d16d65dcde6f7a733eeaa2302b847fc88875c2b4d4cf78a2970670849e3542c72fd101ea37c003464baa3a30ad41a7f80ebbd83559180cf33f869794b2854d46bc8b4f05fbdbf4c9f7bc668bd2796cc82da9fcaadfda8d92ff4324ca1629c208f246b52d6ac061ca6391f1afc3d351bba644cc7c525ff77a6fa387a4a03301b12e515567ef0423e261da53393cca7cfddcc39c9bdf5fa929431e676ad1452e517fdc60865e1ff92a0412efc52f6e21a367369943c7da661135e837d164513223d93bc8713998ceb2ecc08e7649247c5c58f89e1f9579578ff5211c7e38244897c7e8d7eef2083fdd7b0fe264eb18a47ee22595085387685b303d05102cdf3c83e55da36c6c9cef413977bf61c114efd61ecce44f900af10856a7d68b693d9c2dfce3dc48e8e92f866d539c7d2c3c131ccc5ddea83a503b482f623474161d7c978702e99ceeea0a93f9b738f245de360087fead5ea90c6bc352ead9440a20f5e6449ae75caf459d5843e5838967fb1ef56807fa84c9232fb72424b62c12686513a2a46afb2eaa62a3e7f25806e3c90e9c0606c9ac77eaf97745cf1586cf5bd70e588189c3cbe43215848edd1852b9cf87ce71e69ede6885ec6ce86eb6e78138933084d5d8d7f745a2efd2ccb0689a1dd258a454762b5d2866232e79ec384c37a0fa52541ac8116e1760d28f2ec1b94045d2f4fc4fdfba53984127c95053149b4d9eec54a1da041be245dd5f4e337a6930cb265ed0c77d2a33f64f1ca4b7b6a6099975b1435eebba2d98aba8c83c64d2e078370da12a40a8be29ec274539737e6c5d25f9adcda6847657b018bd0c15bc056247f64f4b02373979ee7c0ca3f086176dfddb8bbe138faabdf52af4c879f98e5c175fbc2c27e8246eb47a21cebac24ed669e23254cc696b516e55536dca5063df8ad9b4132b9d923a8f871a8c311fbb17550cb5886cb4e123ac5ae7f02c2404a8453c699e49772168a958f33224c2c1ce739f416f4022f98e6e88328a493ceee7fcf13828df61b54667776ce36a5b4c33ae0c338a4f3f9a408657a6b6a54a046496fe337a613aa135c83d5073f01ac022338b4a5fd8e457ab30fce8ce74b8027428301c7c301541ca7daeb39f75ae426c83a798698630170474b565d92412fef2378556ccb66bbf4ea529e0fc850caac940260fb96a2e13ce1c51026ddde25091f23e4d352601b4a36cc0358c48a9a15315b462ec2a5370a129404d1193c694d4423d7b96af1be6428480842254a7e672386038954bbe4587fb21a65dd1c79e9cb5121c82800498cd95d26b70ea51d776b917b8ae2dcf97596371dce8c231a7b9c4a3a5c1f42007cbfce05518f60268af8fa1ebaf3ba1cb16fc32b0ee511a2ac9c90858748ef7571e348aaa9aef5cdf8342e82fd29b8359a7ae6e6b35e1f651430d5a741e73b67559560d17029db39285fe6aca17ac86bf3012e0901a4387d93218d269b2d5b5414009e7d46a0717e89759f11803b1e30514873e075dad57f6e6b0f9c2e591ec53357e60fdb200c51d5156424d682acddc81cdd3fb9a3ccadfafc59ff5ca0cf27f4b877ca416f92b714cf69418414118578202aaf3bfe57964c7b1e68be0066e59bfcdddf803b79d600a85958c5740dcb491eb4cbcf8f545102d7fd98a894e09d831af406b19dc4e24b49652efc307066c48e642ee812cefb42f7cf862cae5573985d56025dd6ed99f95954061c9419eee0cf6f1b8df02846e8fff4bce039760007f811df16bb09fe094abfb5d24edfa58b56397f874fb532c5a5d070b5b703dbde93ec8ea9c45ad1da65fc2e2e0d354ea21b43e0d4336926be7c25809138ecdff68890612c4dd05565cd16a41a9d5df33bfc84c621d96e5ffe5988229e76567396c9bf41161a8f98ba4f2f48402252c2cd99d2517a2fc0539b44f89ccbea2dc0394cf2e47eba4fcfd132b0fefdeae649da038603b28cf0bafa97d0310586682d2c520c64a795e27e5e86f4a5002202d72de7523a72c26b69f979fec6232b3001b69bbdc393205901e60437f92f4b751c7f492b1ae38fc2ce026f2d38805d4cbb9c9192bcf373ace42d9e3dfe49d1e55f862c61281b9a403ade1c300d710e537e1628d8b140d76f8f6a6e037e119c1ece7fba1277bc3334f3c95a6c88ded2976c7ee97df08e2c6d2c9e57215a5291b0787216b1ba1accded66e25a0584d710db20e702194703559f31fb89ae0734b549e4eb9b39f463df07cf1f6539ded0a13ced784a72d7517a766932ddb854c57acf1ee7daf73a03680a3c890f7712f7c8aa8582e6b427a5569e9b381f09917945620c16856f389b738e3f05f584b2c593ffa4a7981cca3230b792f9aa8506d23b6ba769f33813f7c1551ea6e2223fe1fe7352e13f62e5a7f13407e5e9dd548d008f81e93da766760ce53fd3f049499ff726ad4f6136d897647d79d6cb0b24d91e2c4dbc741cdbb4b09f9604b06fcffafb6815b630ce164947041e33875f5827ed99c9dcbf4a841952971666806ab12f139a2e873c0c3148116803c2f8969b84e385cfae31866035c28b0246edd4d09a70549d5c9180e910866d730c22bbced675fee817d8caf85987c41f213757b1aea4c5c965f99ca5a503bfac7b1ac25ebccaf9f2510042e7c2a4a6d0c639d903d4f328b85da0c5838fb075b09c4be267e65cb2cc49c0f3f75e47b2765d90282d204734ca852c98240590c9eb1060373e9894c7af7ce40a3a612820ad2b8bc47c7c4964d8336e1499cce14cfa119b6634651e2b5ce0065705e1bd2ae8477fb68bf7691424510785831b730a086ad3d017e7f484d6e5bfac6fa7a30416e6d9db538b5bf0f17e72be8629ec9687f55f1071e0187e368ae9e7fa4cffd6abae1fe9921b27f8f375a8f88c89b960f759e6136f7880db9eb148ea453d64f18ef696809c70509d5ee8da00bd9b040554e626c261eee068b7637f133a8d14245f461d09ccb40e576165a2fcd87f427e6aff592861738b8cc17a8d655fe8e43055534398af783382e89a200925bea57e8c42dbeef22eec7a4a13694272517d27580a91d0c978c18d99de5317f74cfd79be0ffb976cd27a2c1065cf110bf31d6fe9504a3f17dfd5724ff9efbb6ba4e781637ae3e099e74b585ca32aa817f1c72dd60988be6dfd0f93ae43943e0c5c7048530751112fc159652aa9b0301106a9b20ffdff96a5abd7993c7ef279ee905f35fdb17be0ad9ee6f36af4a696a6477efb3d7a278f0270636b5f75edcf9feb70f7cc957b6476a2aab9d2311d1f6e996ef944e7a32fa3569f2e2b0ff81181a9aaeed85a01bb59ba9c9e59c2f5a5b56e2a9a1a0555e6bd6d56f61ef831956c81912257d6a57521ba5dc83410b027062b0658e4eb6a1a47851daa040d76cead7140f7f34de9df2d930e03312a10803ef839a7b56a27ac89627379d6db944252f8bef0238ac660b73f77a9a572995b617f111caae567ad3601a8338209f274b60fb2b9eaf41298fbd2d9c7c3404cd78e004bb857ad53e7b58d1ff3a5fd68be27d87777ba21fbe094caafdbed6f379b9c441ef695f33f7e3166f623fa5741e445a1c094c270352e2f4a73870610793ceb06c10c617985e85ce703bf36c90940539794791cd8e05bf4109bc05b65cce3a14d16694f4c4c076bdfb6df1ae9b6a02ae193775428c7bb1797eb7613daac57b924bdc1c5a2256546a5bb9e1cdc817bdfa204b28f6915c7d6c5db9d8108e02bd26c684cd077b0378059a3413ddd094ca0cf9c0db2dafed982c850ac5b4ce7cbfc1262dfee99ce864f7e306cec1b2ade1b430d8e8ddc2c899b69db3add45fededf771d0e3630849324c596d91f486f61caa3ed7c1c040dc910c18e69ae1f7f525daa30080d2e8cb2112f65c261f3596296238ec80b238c460691f76a071f4fdb0f94ffdf825c02b569664849aa30772ee899cdcd06919a9c50bb931699b9684dd76311a9e50cbf4d0e04bcb370f5dbd4d1c2982477456a1fdf984f5062516121421ab56a7295874e58f3b44a03ffa3d94021857970a05d7bd8b534e178cb19c7a6d493a3655", 0x1000) connect$packet(r0, &(0x7f00000005c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="d464e6ed34a6"}, 0x14) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x0, 0xfffffffffffffffd) [ 1500.733868][ T26] audit: type=1804 audit(1570050953.912:245): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir874060238/syzkaller.GFkZZ7/14/file0/file0" dev="loop2" ino=114 res=1 [ 1501.004791][ T7259] 9pnet: p9_fd_create_tcp (7259): problem connecting socket to 127.0.0.1 [ 1501.130674][ T26] audit: type=1800 audit(1570050954.502:246): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17041 res=0 21:15:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="440f20c03504000000440f22c00f20c3b8546200000f23d00f21f835000000090f23f80f01c3f3360f01dfb8010000000f01d9dfc80f01cbb8cf95c1d70f23c80f21f8350000a0000f23f8c4e2a59c84eb00000000", 0x55}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00'], 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:15:54 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:15:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000880)={0x100}, 0x1a0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x40000000000006d, 0x0, &(0x7f00000001c0)={0x77359400}) [ 1502.157434][ T26] audit: type=1804 audit(1570050955.532:247): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2265/file0" dev="sda1" ino=16625 res=1 21:15:55 executing program 4: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000780)={'trans=tcp,', {'port'}, 0x2c, {[{@loose='loose'}], [{@fowner_eq={'fowner'}}]}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$packet(r0, &(0x7f00000005c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @random="d464e6ed34a6"}, 0x14) 21:15:55 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1502.210288][ T26] audit: type=1800 audit(1570050955.562:248): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16625 res=0 [ 1502.302668][ T7376] IPVS: ftp: loaded support on port[0] = 21 [ 1502.513200][ T7382] 9pnet: p9_fd_create_tcp (7382): problem connecting socket to 127.0.0.1 [ 1503.252991][ T26] audit: type=1804 audit(1570050956.632:249): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2266/file0" dev="sda1" ino=16609 res=1 [ 1503.370782][ T26] audit: type=1800 audit(1570050956.662:250): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16609 res=0 [ 1504.075378][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 1504.247428][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.254872][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.265653][ T7376] device bridge_slave_0 entered promiscuous mode [ 1504.273791][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.282420][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.290313][ T7376] device bridge_slave_1 entered promiscuous mode [ 1504.314896][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.468404][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.490596][ T7376] team0: Port device team_slave_0 added [ 1504.497712][ T7376] team0: Port device team_slave_1 added [ 1504.542550][ T7376] device hsr_slave_0 entered promiscuous mode [ 1504.611227][ T7376] device hsr_slave_1 entered promiscuous mode [ 1504.660746][ T7376] debugfs: Directory 'hsr0' with parent '/' already present! [ 1504.998974][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.016913][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.024954][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.037120][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.048607][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.058690][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.067398][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.074673][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.086659][ T5146] device bridge_slave_1 left promiscuous mode [ 1505.093709][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.161831][ T5146] device bridge_slave_0 left promiscuous mode [ 1505.168112][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.232808][ T5146] device bridge_slave_1 left promiscuous mode [ 1505.239015][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.271975][ T5146] device bridge_slave_0 left promiscuous mode [ 1505.278322][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.041045][ T5146] device hsr_slave_0 left promiscuous mode [ 1509.080908][ T5146] device hsr_slave_1 left promiscuous mode [ 1509.160968][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 1509.176782][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 1509.189760][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.255734][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.358408][ T5146] bond0 (unregistering): Released all slaves [ 1509.521334][ T5146] device hsr_slave_0 left promiscuous mode [ 1509.560733][ T5146] device hsr_slave_1 left promiscuous mode [ 1509.613794][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 1509.628195][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 1509.641674][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.675069][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.769124][ T5146] bond0 (unregistering): Released all slaves [ 1509.851260][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1509.859470][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1509.868192][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1509.876930][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.884186][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.892984][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1509.902097][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1509.922012][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1509.931145][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1509.939638][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1509.948969][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1509.957924][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1509.966451][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1509.978855][ T7376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1509.991319][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1510.005280][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1510.013814][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1510.022553][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1510.042074][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.271131][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:04 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1510.624844][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="440f20c03504000000440f22c00f20c3b8546200000f23d00f21f835000000090f23f80f01c3f3360f01dfb8010000000f01d9dfc80f01cbb8cf95c1d70f23c80f21f8350000a0000f23f8c4e2a59c84eb00000000", 0x55}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00'], 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:16:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0506107, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x403, 0x603) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(r1, &(0x7f0000000040)=[{0x7, 0x8001, 0x1800}], 0x1, 0x0) setns(r2, 0x0) flock(r0, 0x4) ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380), 0x0, 0x0) 21:16:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0xa4) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/170, &(0x7f0000000000)=0xaa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:16:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000001c0)='syz1\x00') r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) memfd_create(0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:16:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1510.818534][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:04 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1510.940410][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0000753e028a9064c694690000542ae512bb4c91a30d4ac6ad2506de352cfa18bb263bd2f8a80806cc6d811fa4f53df58f7cc912631cb0b5d4a07d4a8d1470cefc74ad5cc727306bbebbcebc083c20fa0c6074c8de4c8c1a7abce198f4436cda0be5f8d57922aacf0d223cffe4f1"], 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$inet(0x10, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x800000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'tls\x00'}}, {@loose='loose'}, {@cachetag={'cachetag', 0x3d, '/dev/cachefiles\x00'}}, {@posixacl='posixacl'}, {@privport='privport'}, {@mmap='mmap'}, {@privport='privport'}], [{@obj_type={'obj_type', 0x3d, 'proc'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105000700050000000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) 21:16:04 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:16:04 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x88})+\x00', 0x0) write(r1, &(0x7f0000000140)="5a04d6a77027", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0xff8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=')et\x02\x16\x00W\xca\xdad\x8dt0:loppp0\x00') [ 1511.262349][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:04 executing program 4: socket$kcm(0x2, 0x0, 0x73) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="2e0000001e000507edcc0345f675c3930532e55c84131e210080647e6394f20531d2000500fc3711404b480f0001", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 1511.440918][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) [ 1511.598010][ T26] audit: type=1804 audit(1570050964.972:251): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2267/file0" dev="sda1" ino=16849 res=1 21:16:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x10000597, 0x0, 0x136}, 0x0) pread64(r3, &(0x7f0000000140)=""/178, 0xb2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1511.715064][ T26] audit: type=1800 audit(1570050964.972:252): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16849 res=0 21:16:05 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x88})+\x00', 0x0) write(r1, &(0x7f0000000140)="5a04d6a77027", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0xff8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=')et\x02\x16\x00W\xca\xdad\x8dt0:loppp0\x00') [ 1512.500971][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1512.529885][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1512.658482][ T26] audit: type=1804 audit(1570050966.032:253): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2268/file0" dev="sda1" ino=16547 res=1 [ 1512.720888][ T26] audit: type=1800 audit(1570050966.032:254): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16547 res=0 [ 1513.411873][ T7739] IPVS: ftp: loaded support on port[0] = 21 [ 1513.513670][ T7739] chnl_net:caif_netlink_parms(): no params data found [ 1513.552084][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.559243][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.567747][ T7739] device bridge_slave_0 entered promiscuous mode [ 1513.576545][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.583871][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.592098][ T7739] device bridge_slave_1 entered promiscuous mode [ 1513.616402][ T7739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.628713][ T7739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.654584][ T7739] team0: Port device team_slave_0 added [ 1513.670157][ T7739] team0: Port device team_slave_1 added [ 1513.743022][ T7739] device hsr_slave_0 entered promiscuous mode [ 1513.780900][ T7739] device hsr_slave_1 entered promiscuous mode [ 1513.850798][ T7739] debugfs: Directory 'hsr0' with parent '/' already present! [ 1513.899729][ T7739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.913287][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1513.924756][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1513.932814][ T3449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1513.954186][ T7739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.966018][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1513.975291][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1513.984223][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.991350][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.011869][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1514.020304][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1514.029187][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1514.037696][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.044928][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.067778][ T7739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1514.078591][ T7739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1514.094419][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1514.104030][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1514.112551][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1514.124324][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1514.132682][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1514.140343][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1514.161188][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.310112][ T7746] IPVS: ftp: loaded support on port[0] = 21 [ 1514.402987][ T7746] chnl_net:caif_netlink_parms(): no params data found 21:16:07 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0506107, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x403, 0x603) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(r1, &(0x7f0000000040)=[{0x7, 0x8001, 0x1800}], 0x1, 0x0) setns(r2, 0x0) flock(r0, 0x4) ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380), 0x0, 0x0) 21:16:07 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x88})+\x00', 0x0) write(r1, &(0x7f0000000140)="5a04d6a77027", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0xff8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=')et\x02\x16\x00W\xca\xdad\x8dt0:loppp0\x00') 21:16:07 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) 21:16:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="00004838214c5a75f8896870bc84c60000"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xa4) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000140)=""/99) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 21:16:07 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 21:16:08 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) [ 1515.324628][ T26] audit: type=1804 audit(1570050968.702:255): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2269/file0" dev="sda1" ino=16820 res=1 [ 1515.410630][ T26] audit: type=1800 audit(1570050968.722:256): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16820 res=0 [ 1515.580637][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.587736][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.595843][ T7746] device bridge_slave_0 entered promiscuous mode [ 1515.608218][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.617051][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.624927][ T7746] device bridge_slave_1 entered promiscuous mode [ 1516.029444][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.041018][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.296824][ T7746] team0: Port device team_slave_0 added [ 1516.304554][ T7746] team0: Port device team_slave_1 added [ 1516.364057][ T7746] device hsr_slave_0 entered promiscuous mode [ 1516.432038][ T7746] device hsr_slave_1 entered promiscuous mode [ 1516.470649][ T7746] debugfs: Directory 'hsr0' with parent '/' already present! [ 1516.719924][ T7770] IPVS: ftp: loaded support on port[0] = 21 [ 1517.274012][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.290120][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 1517.535965][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1517.544351][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1517.566273][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.573372][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.580408][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.588626][ T7770] device bridge_slave_0 entered promiscuous mode [ 1517.816818][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.825864][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.834012][ T7770] device bridge_slave_1 entered promiscuous mode [ 1517.859933][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1517.868925][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.877452][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.884679][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.894148][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.907052][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1517.915669][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.922777][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.932785][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.952256][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1517.960338][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1517.970069][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1518.197778][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.211661][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1518.220412][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1518.229913][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1518.259134][ T7770] team0: Port device team_slave_0 added [ 1518.267598][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1518.276715][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1518.285910][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1518.294528][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1518.303673][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1518.312466][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1518.323816][ T7770] team0: Port device team_slave_1 added [ 1518.338265][ T7746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1518.347053][ T5146] device bridge_slave_1 left promiscuous mode [ 1518.354178][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.401862][ T5146] device bridge_slave_0 left promiscuous mode [ 1518.408139][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.447766][ T5146] device bridge_slave_1 left promiscuous mode [ 1518.454180][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.502193][ T5146] device bridge_slave_0 left promiscuous mode [ 1518.508432][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.563578][ T5146] device bridge_slave_1 left promiscuous mode [ 1518.569755][ T5146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.601801][ T5146] device bridge_slave_0 left promiscuous mode [ 1518.608050][ T5146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.441265][ T5146] device hsr_slave_0 left promiscuous mode [ 1524.480887][ T5146] device hsr_slave_1 left promiscuous mode [ 1524.535362][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 1524.548130][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 1524.560654][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.597258][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.668684][ T5146] bond0 (unregistering): Released all slaves [ 1524.811498][ T5146] device hsr_slave_0 left promiscuous mode [ 1524.850768][ T5146] device hsr_slave_1 left promiscuous mode [ 1524.901121][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 1524.913945][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 1524.926907][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.999168][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.089715][ T5146] bond0 (unregistering): Released all slaves [ 1525.231411][ T5146] device hsr_slave_0 left promiscuous mode [ 1525.270706][ T5146] device hsr_slave_1 left promiscuous mode [ 1525.330318][ T5146] team0 (unregistering): Port device team_slave_1 removed [ 1525.345269][ T5146] team0 (unregistering): Port device team_slave_0 removed [ 1525.358246][ T5146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.418122][ T5146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.498995][ T5146] bond0 (unregistering): Released all slaves [ 1525.674244][ T7770] device hsr_slave_0 entered promiscuous mode [ 1525.730990][ T7770] device hsr_slave_1 entered promiscuous mode [ 1525.770696][ T7770] debugfs: Directory 'hsr0' with parent '/' already present! [ 1525.790833][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.875363][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.899672][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1525.907794][ T3433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1526.034384][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 21:16:19 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:16:19 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0506107, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x403, 0x603) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') semtimedop(r1, &(0x7f0000000040)=[{0x7, 0x8001, 0x1800}], 0x1, 0x0) setns(r2, 0x0) flock(r0, 0x4) ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f0000000380), 0x0, 0x0) 21:16:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) 21:16:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x88})+\x00', 0x0) write(r1, &(0x7f0000000140)="5a04d6a77027", 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0xff8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)=')et\x02\x16\x00W\xca\xdad\x8dt0:loppp0\x00') 21:16:19 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) [ 1526.130829][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1526.201323][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1526.253335][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.260444][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state 21:16:19 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) [ 1526.328137][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1526.345809][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1526.370015][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1526.448496][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.455735][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state 21:16:19 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="00a095d347150000000000", @ANYRES16, @ANYBLOB="00022bbd7000ffdbdf250700000004dd010014000100080001000a00000008000500020000000c00020008000b02004b000008000500030000002400020008000b00020000"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) 21:16:19 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xe2, 0x410000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved}, 0x10, 0x140000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) dup3(r3, r2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84601030}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b400", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004008100000008000600", @ANYRES32, @ANYBLOB='\b', @ANYRES32=r5, @ANYBLOB="04100200", @ANYRES32], 0xa}, 0x1, 0x0, 0x0, 0x40080}, 0x40) [ 1526.513730][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready sendmmsg$sock(r3, &(0x7f00000042c0)=[{{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x2589252a}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)="0e8c2a6f1c9b1d3528e020b2adba8dd11b4749982da536aef1370d2bcccf5264b8dbc933c81d46214364226a751543058628c7261870650e102a327b26fbe7b3f04fb07ec568ffc0015236a5bff7cd091b10efc8f166e01b08a6659396bd4f5cf75494def2085b2bccdea24c85177bb5f1fe4e9fa0fe2ecb6a5da74286b9d57c373223c9901ff2fe4e36dde3bd7cbf52f6367c5a2c99fad1b283d3d93e6a41d04a13d8e3b3a281c037a0edc0ec965e39f93ff4880ee0353a78620637f5652cceda6eeaa2fcf2b217", 0xc8}, {&(0x7f0000000900)="68209d2e99f44feb690df8c257b6e6c0412295c7821445eda9b090b34000378f063a49a37cc08319b0d9c85c8b0585b5d525020671c223daf322d06bdab1c600e2", 0x41}, {&(0x7f0000000980)="518d0f11a837b16f383c0c124b2d7591f4ae636b089874b4fc4eb8fcda1727ed55264c9a82b6165824897fa24dba7721243dbd4a62c5f8c9f67636979450ed1caa55b4c6786d8cdab493af473d0fad066c5afff40497a68a98292f04a54e0d5c7132d16dd65bdbb8b313f0bad41b739d00640feaf720b5ddda8b20aaffbfa85994fa2b0070ac35496b85c3b7ec2282ff710c63459cf59b40494fd814761661c0f2d917318466228fc9468b62252b9b7b9d0559755219f46a9a0467cfd96ad4f16cffb7b79f16b5068ee85e745d2b26dcca764d8f78d16b506627179ac0f80b60e50ccdea227b333d4145d40a56e7335b1f", 0xf1}, {&(0x7f0000000a80)="27763a52e6d11c5cddb18467877475df99bb0d9a47cc313a85d06c0200586af6eafad3a10e2213435bfa466fb7fda80998209a81c729164e8e9aefb48b02dbeaa5fae8d812becabefbaf17774305e98b2208e5964179dd00d685ccb62a377f23e3138bc10294b362f4f79c7e22b3a39722aacd547ccf375bd075a072144cfb0435f4a2fdfc17365a2fe95e7824282b36026885c3ee05bd9bd1faa75b49e4aaaac5d9acf54bbdbc6876e4f08b1b82fb2b3602d5b749f0b46cab3365bdb7466df6238dc24d5ba8e8d7e73ca6516d9b54f8165047c0d4f7aca956923f50299e228048bf09b455c4c64132d9ea78d200f3a8bc12cb3d02e9fbf0", 0xf8}], 0x4, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x16a1}}, @txtime={{0x18, 0x1, 0x3d, 0x677}}, @mark={{0x14, 0x1, 0x24, 0xfffffc00}}, @txtime={{0x18, 0x1, 0x3d, 0xf5}}], 0x60}}, {{&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="693ba55196d200f2492601fa479885b608a3109fc1f6284389609d095fbb7f56b4c66d6af57a058014339ff0cc604109ba82e0ecec3170e710d8764fbd74d30bc38ae932a5f0330b5a4e1fed709fa0c802048220bb1896c999c6083d2c0409eba247eeb369c85703e72bec5ac38aa103ee87152bb2dcbf1b43bd68e43c4e4108af2848177605ad64bc8bb14dffc987c6740cf0e9e2b2183493aa95479a95b30c5758f03391810bdad0ac55213387b6f758b31b30730a1764156608ba85fe0705246fa3bced467c48c72fdcc3bde8b7c073fdddafd0180758c94feb5d98751cc4cc15f72e356997e5", 0xe8}, {&(0x7f0000000dc0)="a145af4fd1c2bf156e8551b98a21651112c94b96f31b21536d959ecba1d79e72e40ebd898fe5b671d4bbf3573d246dbddefe31a5c568e42a7bad6f0d7a273b50c77a2f5cb85ebc2bb661a8d547376a25567d7c8389dfdcf5e8fade6abafad93cfc1fcdb7107616f2ee336ef0d63336b815414b362dc89ba73cf03bc9fd761d5f4429f7caca15007904e85c170eac9a5bf970c6fafae7cc6d9165384cd5bcbd6df2dd06", 0xa3}], 0x2, &(0x7f0000000ec0)=[@timestamping={{0x14, 0x1, 0x25, 0x5b}}, @timestamping={{0x14, 0x1, 0x25, 0x1825}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x60}}, {{&(0x7f0000000f40)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000fc0)="e3dade7c0ec9588e6d8a9d9fd9e0e6e6a29cdd58464fb1a44a9149fd43281d57cbb22de0ccfba82e3f8ce3dfa5b4d79c2a817378f65a818c9e811a8610035683ad6839f16ece0f340c22c04fac37ec63", 0x50}, {&(0x7f0000001040)="5d2444b9872f3103cf9ae116286cae75c141cd341ad2f4368f79683da78b4a9b1464fae44e49cf7c96c113e393e02ea2c91efa6c06a1449577c9944bbd863f115fa2cce9b0aece19716b7bac368112b619c993309362b6214c1c6889c1336039fd343100aec7023ed0d83b6933197f525d1327beffa94e7e90836a6f7eeedd2b424b8a2859b2cfb47cc8b959c2d61f5dad320c2b66b11144960ac5c7199572c2509002f70718956bdc0979c85e6cd196852be808026824c15e859d1a79a8e6c20a68698ce230707825b40493c2", 0xcd}, {&(0x7f0000001140)="9ac12a8c00e5524071465b9f22042f6eb99119fb71b50500efcf8e978ab45f151d0e3df4173faad972764394d88e8838e5468f0297eb037b736adcabf67be73e3466dec9b88f3455727256ce5ca4b476a59e048a1dd19267346d293856afe413eb00c193596b0e9b928eef484c2bc58df46dc03f1c557206548c37199d7711617670b5953546a2ea3bc4d9114a0123e9548cada1ee1df19bd7bef1247d187084a6bb133032538c6a23fb53e8d84193a68eaddba2ed5c61ac3abc39cc185336159667a108a4dd3caf9071b1b4382d901937ea2f2bf81ec2875b89f8f835096c", 0xdf}, {&(0x7f0000001240)="a544423d455d068445", 0x9}], 0x4, &(0x7f00000012c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001340)="cb0f7b7a9c08b3089281f172d2936ebd068a06a08340f892c9da8d8c59fc16659f867482bffa0c9d2c355641c324279478b26c0446ae9f1e6f2189a3545451c34d925840848318821449d932999b90ad9a0ed29442a14632caaab5720de945c563d7225d0945824d31db", 0x6a}, {&(0x7f00000013c0)="95e572f6b564b6fbc37cf54b3f15c1b38c799b9cc5446f85bb2a3dc5664972841cda017df976e52a21c1c873e25480153ffb98afc7b485e9a19f627a01cf232c37dee7c807e35dc58819e14331f1d976cf08f752576496b7625152b772f7ad1a0c1ee7364ae3aae3ca1ac38dae3f0fa4c412b92b954369da2a0a540b447c163641ed7984827ac75bdaa36fbb4e4bc3be2b47087454bcf9dee78ebb8c2291a620feec0841ea6d29ada8331aba", 0xac}, {&(0x7f0000001480)="7d985a8853784d57308637ffaa5e456a95d3c474d2711df9ada7030f0651f6b5c7613ea13d5f75776caf3b824edf99af5859e7146a0b72f201af10186866894b78f43ab2b1ca7d8c255c9cb8e8cfaaa5419c80cf7ac2ec3f6b473a998ddcb4f80bf029bd017eee4afd8bc513e14fba882c90386f16840479d66484e2ccf9bcbbe5daeb37a632701c", 0x88}, {0x0}, {&(0x7f0000001600)="898e5e7938de429ec4b223e5850ffbb5b7a29a5ad95cdee7b2403db86a01cc1eee6592755c04a158021f56ee45ac3a78e466cfe41e781c3285a1706e8334f99ca935346af30fdd7e5486026ec488fdeee6982ca52c56567588854679c6b2bdca6176894f7858723303dc2a69f1e4e508f866d4531d49f7968e76e07745909b467b14754c77ebd2df49856bb3d43e9631aabdece1cbe04f4df69b625f3e5e59f859dfeb35005f57c92d98568621038bc44fd43d76badbd8f071f3cd9d74ee918d18bfc2bdf6715588ef4ab7c14121", 0xce}, {&(0x7f0000001700)="a7a48f76ec2e36b9e86f187ce86e2da061db788bd0e6232fbc25d529f8716b2ad5bfba07f28edb54c149170314ab828d755227fc49e3d5595c0aefedd0ba6b8915b0f02058dd2fa6059c910e32b82fd0714661e256f4397005b98a0f9b87041e99c4d7e0f1d765cdd49173e8f3543d87eab8c699e5d95bd4c200e5e5f0e4341ef814ce194c69c492be917561c6380d074fffb5f0a54b90283a50c305ec0f5a82494634f4baf4f2027d9f17a95d2c1fa28542884b283a205490f5cec1421b615a5c6430d5a47b0a4f5f096f2caaa21b1477b7", 0xd2}, {&(0x7f0000001800)="bb3a849ccdd27cc18e06d7f3e636beee9dd01b742c3126a7aebfbd1d5ddad86cf7581c858161763f745ac45075fb035c1f3e2e5eaf709d488fad386a0001c2e8e14c9fa241a34fb379d93681e0258f5965cfb3015740bf4ee6cca7d16d6f5b197cb8a10ed97220774c281359934dad7d41db35b50773414e50aa9d22de8212392a9054dbd8a135210f8c5b09ee7283f4cb85c902c5d7d17071517f5c8a8123cecc152c6a114a44c7110e416323437d27", 0xb0}, {&(0x7f00000018c0)="06b6f2b8c3be6ec27d714dad5cea2d76b6", 0x11}, {&(0x7f0000001900)="5c7befb0a1a9d812cf8dfdd165f2bac4d10afebf14bfa2389513f612586ce4c3e3d5108671696100685bbfc2c5fe7803bbdec5968fc7573fb222cf9152cecef82a9889b4401ce3fff32643c0ca169485398bef7d60425f8e3021a1ac45de1e160cafa62691707b24d00385cffcfcc6f21185ef6e3a9cede6d63c68c4991283af347a396a", 0x84}, {&(0x7f00000019c0)="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", 0x1000}], 0xa, &(0x7f0000002a80)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}], 0x30}}, {{&(0x7f0000002ac0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002b40)="0bc5d140f315010775e6ddba5ae65e3b44c67515e92dc714d34461747fd6ded48aa81170a50a9b83406df41c9b0954f762e480a422ca116aee273c9817c8cc3016a0a20f582f8673eb090eaad37b993231bcee7f3aca1227b4a3c5a2fcd07467c2cfe55f47d60dc0b85e8f42d164966650adc587b11906639430cb5ea256b1bf98211673cce83b326391eb550e6101a03224e74efee587a242d61b49353d0824362f13e6b6a21cdd06be5899eb1519c8292bb829b59692c82a53cff6a217341ea1e5ce25dce26bc494f7816957b3cad1bbb81918a4cc11759d27d4ef002e4b94b40c45babf13a3351da88c", 0xeb}, {&(0x7f0000002c40)="b0b7cf8f64ed87244fdc940c00aa031c92c86a091512def5c8300d634e14ba28aee8a014b2e702b54d4b75dc94e3b1808484ffae1c2d596f34e6bd3f1ad5b4119eef0e7d147015737c200b1cab6197c212c38fc24b90a7784a5fa4ad329263879574325baecfc47c93533e4fec8070a90bb48c4533cbc15e44de86d6d941f33b9229c4d09c0c6778f0c89613b6db3efef3d506c0d7361b00d5de119c171e86ecbdc5acff056ff2be0916435d587f2efeaf81b700604174265777d7ccf3916795aa912ffe79c5852dd75064", 0xcb}, {&(0x7f0000002d40)="e0a28490766a2f141bd40f50836d850b37e6c4360f21fb9d96e5befaacd73d72225ca36b3adc98ffdadc425d612bd86b8c2e12f6f79dc3ca2e959cb94b63af6135f24d5ff2fd897df1601bc779d223d77658f7dbd19d441c41e206a84030902aeabb8b4140b99b58b4", 0x69}, {&(0x7f0000002dc0)="a632c49d1d4fcaa9e33290227eb00dc2020afde31e90773c3eec1c21ad34bb7e52e5601d6984f8206dafde2f56594b8f63e68fecc43173a139049ca1e5c583083a1c0a4667cee54f7a025a1df888721823e74b5917d2101cd2d640411603fc30368a3052e492f656ba8665f9012d6bc4054e352ee6521dd3654e0f5d9f7831f51f52072cfac830e13ea6809a0b874e0b1b9d6eef62dcfc", 0x97}, {&(0x7f0000002e80)="5ec09c93ed8faef3c337cd7609d43d3cf1e02d2137", 0x15}, {&(0x7f0000002ec0)="cb2862e8a55c582594c785d218218c972d4cd324fdd690212a97e5617e84347d750ea8945349260a847a6c4b73a277a4fd9a774eba768bab263f138328461a49c9c5efaa7698c1a0c221ffada79a", 0x4e}, {&(0x7f0000002f40)="e7ddb58d47f959d23f25c5d291bf7a22c5cc69e47eb528ec4f3621e52b6b8e6624aece4746cca3d9a346fc114f8b5390633afb4c632a82c1bd241f8a59f3b2fb4a14731a13b5eceb9e573211f9e5ce00bcc7ec53e4fd962fb48d2c6f2f573ebcff6ab5c11f99e64755b59223084de2ecc714f656851805160c724c8d107138e198b67cc64f2f141ed3da32cc70450cd377d5057cbd26717141f8", 0x9a}, {&(0x7f0000003000)="e2f4df622bf405c13dfd22c6388c5b83a365ce0235c04c0f9415730de003004941976c52151fae525c5d9586858fe85c7ee4175b4a83a5b5d7f1629fbd3cd95651270fdca3532582489fd009a7449bd723dd0dde3dfbdf31e1babf421323d4acb3a05400acb3e185b9bc3d5906bda85371dd34bc448121c7239259ac1c672333bd97e5aef4df5fdb1b79f31ae4d2da318f1bef9b16fc2e3a445520ca0362c38b21af2a06bc31d71e016e9f03a02ac8cb8984dce605a0b45acc50459ffb4ccab72ba96c1d0b919537178db9ad659aef72395521db", 0xd4}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="2cfb482ffe15c28799d76d8afca5ca52be0a36acbe29e5209437fac8d5e80124eac63396ef566b03d57f479d3f24471cc331120ac330d493bea16a9fe6909e6192ba397413063e8ca5d9cff12474809732645603f0ae118b946e6ee92ed596ed0eeb780ef625f3afc1ad01a17bae3b49fbf26092e9e688f8cffcc90faeadf392", 0x80}], 0xa, &(0x7f0000004240)=[@timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x48}}], 0x5, 0x4000000) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r8, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x277, 0x0, 0x17b], [0x3a]}) r9 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x8, 0x84101) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f0000000740)={0x9, 0x4, [0x80000001]}) r10 = getpgrp(0x0) setpriority(0x1, r10, 0x101) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x18, 0x4, 0x3, 0x0, r11}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r12, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) mmap(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x16ca9a2f22726620, 0x2010, r12, 0x0) readv(r12, &(0x7f0000004680)=[{&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000440)=""/44, 0x2c}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)=""/50, 0x32}, {&(0x7f0000004400)=""/121, 0x79}, {&(0x7f0000004480)=""/135, 0x87}, {&(0x7f0000004540)=""/138, 0x8a}, {&(0x7f0000004600)=""/98, 0x62}], 0xa) clock_gettime(0x3, &(0x7f0000000180)) 21:16:20 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) [ 1526.567314][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1526.629287][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1526.659043][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1526.726241][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1526.760437][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1526.809373][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1526.864001][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1526.908093][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1526.941690][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1526.970943][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1526.988406][ T26] audit: type=1804 audit(1570050980.362:257): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir788175651/syzkaller.UTXEAn/2270/file0" dev="sda1" ino=16570 res=1 [ 1527.029609][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1527.126087][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.156320][ T26] audit: type=1800 audit(1570050980.362:258): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16570 res=0 [ 1527.837280][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:21 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="240000001c0007041dfffd946f6105", 0xf}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)) ptrace(0x10, r4) keyctl$set_reqkey_keyring(0xe, 0x0) ptrace$pokeuser(0x6, r4, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000), 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', 0x2a13}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xa3c8640967c914a8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000600)={0x815, 0x2, 0x1000}, 0x4) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000500)=""/110) [ 1528.142553][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:21 executing program 3: membarrier(0x10, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) membarrier(0x100000008, 0x0) 21:16:21 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) 21:16:21 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x80000001) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 21:16:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x36a, &(0x7f0000000080), 0x282}, 0x0) setsockopt(r1, 0x400, 0xb, &(0x7f0000000140)="000000027ade50d34c1a876022b2c3bf12936005f20f0d7221fc4793e32530677f85b404b9d970701ab48508f043d4579794ccc705a90032de8ea4347403b425d0811dd9325d4155eecca9fe53a926dc22a7d80c1dfeb0a261f9e3e68d75442230d97a2131d88f6e7bc58ad4f9ff817d72fc78e7f195614064d9655e816e3805000000000000008bde050ee1cb1ea6d1c665debc8cf4d6fd5d0c670eb08231263b825312d5da09a119b5962b13f4435c3a7b7ed67e3a7130e16f6dc926a004da1ec5fb4c4ed811d3978187", 0xcb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="06030000"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) socket$kcm(0x2b, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 1528.277587][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1528.310330][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 21:16:21 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81}, {0x6, 0x0, 0x0, 0x50000}]}) [ 1528.330828][ T7834] [ 1528.333206][ T7834] ================================================ [ 1528.339708][ T7834] WARNING: lock held when returning to user space! [ 1528.346212][ T7834] 5.4.0-rc1-next-20191002 #0 Not tainted [ 1528.351873][ T7834] ------------------------------------------------ [ 1528.358372][ T7834] syz-executor.3/7834 is leaving the kernel with locks still held! [ 1528.366264][ T7834] 1 lock held by syz-executor.3/7834: [ 1528.371634][ T7834] #0: ffffffff88faadc0 (rcu_read_lock){....}, at: membarrier_private_expedited+0x180/0x590 [ 1528.383916][ T3872] kobject: 'loop4' (000000008842ae47): kobject_uevent_env [ 1528.395982][ T3872] kobject: 'loop4' (000000008842ae47): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1528.476078][ T3872] kobject: 'loop5' (00000000e9396933): kobject_uevent_env [ 1528.486419][ T3872] kobject: 'loop5' (00000000e9396933): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1528.503473][ T7834] ------------[ cut here ]------------ [ 1528.508994][ T7834] WARNING: CPU: 1 PID: 7834 at kernel/rcu/tree_plugin.h:293 rcu_note_context_switch+0x373/0x1910 [ 1528.518171][ T3872] kobject: 'loop4' (000000008842ae47): kobject_uevent_env [ 1528.519487][ T7834] Kernel panic - not syncing: panic_on_warn set ... [ 1528.533187][ T7834] CPU: 1 PID: 7834 Comm: syz-executor.3 Not tainted 5.4.0-rc1-next-20191002 #0 [ 1528.537472][ T3872] kobject: 'loop4' (000000008842ae47): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1528.542209][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.542214][ T7834] Call Trace: [ 1528.542238][ T7834] dump_stack+0x172/0x1f0 [ 1528.542262][ T7834] ? rcu_note_context_switch+0x2f0/0x1910 [ 1528.575755][ T7834] panic+0x2dc/0x755 [ 1528.579667][ T7834] ? add_taint.cold+0x16/0x16 [ 1528.584355][ T7834] ? printk+0xba/0xed [ 1528.588346][ T7834] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1528.593821][ T7834] ? __warn.cold+0x14/0x3c [ 1528.598242][ T7834] ? rcu_note_context_switch+0x373/0x1910 [ 1528.604057][ T7834] __warn.cold+0x2f/0x3c [ 1528.608315][ T7834] ? report_bug.cold+0x63/0xad [ 1528.613265][ T7834] ? rcu_note_context_switch+0x373/0x1910 [ 1528.619013][ T7834] report_bug+0x289/0x300 [ 1528.623353][ T7834] do_error_trap+0x11b/0x200 [ 1528.627963][ T7834] do_invalid_op+0x37/0x50 [ 1528.632392][ T7834] ? rcu_note_context_switch+0x373/0x1910 [ 1528.638134][ T7834] invalid_op+0x23/0x30 [ 1528.642404][ T7834] RIP: 0010:rcu_note_context_switch+0x373/0x1910 [ 1528.648770][ T7834] Code: 8b 13 48 85 d2 75 c3 48 8b 5d c8 65 ff 0d 9d 7b a1 7e 0f 85 fa fc ff ff e8 0a e5 9f ff e9 f0 fc ff ff 85 d2 0f 8e 62 fe ff ff <0f> 0b e9 1f fe ff ff 65 8b 1d bf 10 a1 7e 83 fb 3f 0f 87 0d 0e 00 [ 1528.668900][ T7834] RSP: 0018:ffff88809a1afd58 EFLAGS: 00010002 [ 1528.674979][ T7834] RAX: ffffffff89c604f4 RBX: ffff8880ae935ac0 RCX: 1ffff1100b4f48f7 [ 1528.682966][ T7834] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88805a7a47b8 [ 1528.690952][ T7834] RBP: ffff88809a1afdc8 R08: 1ffffffff138ba60 R09: fffffbfff138ba61 [ 1528.698937][ T7834] R10: fffffbfff138ba60 R11: ffffffff89c5d307 R12: 0000000000000000 [ 1528.706917][ T7834] R13: ffff88805a7a4440 R14: 0000000000000001 R15: ffff8880ae934d18 [ 1528.714959][ T7834] ? rcu_note_context_switch+0x51f/0x1910 [ 1528.720699][ T7834] ? schedule+0xd9/0x260 [ 1528.724962][ T7834] ? trace_hardirqs_off+0x62/0x240 [ 1528.730089][ T7834] __schedule+0x25e/0x1e70 [ 1528.734520][ T7834] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1528.739991][ T7834] ? preempt_schedule_irq+0xf3/0x160 [ 1528.745291][ T7834] ? __sched_text_start+0x8/0x8 [ 1528.750211][ T7834] ? retint_kernel+0x2b/0x2b [ 1528.755256][ T7834] schedule+0xd9/0x260 [ 1528.759392][ T7834] exit_to_usermode_loop+0x195/0x380 [ 1528.764733][ T7834] do_syscall_64+0x65f/0x760 [ 1528.769347][ T7834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1528.775246][ T7834] RIP: 0033:0x459a29 [ 1528.779150][ T7834] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1528.798847][ T7834] RSP: 002b:00007f74781eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000144 [ 1528.807270][ T7834] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a29 [ 1528.815251][ T7834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000100000008 [ 1528.823235][ T7834] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1528.831217][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f74781ef6d4 [ 1528.839284][ T7834] R13: 00000000004c607f R14: 00000000004daf48 R15: 00000000ffffffff [ 1528.849065][ T7834] Kernel Offset: disabled [ 1528.853547][ T7834] Rebooting in 86400 seconds..