[ 65.823303][ T26] audit: type=1800 audit(1574595015.105:25): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.856213][ T26] audit: type=1800 audit(1574595015.115:26): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.916464][ T26] audit: type=1800 audit(1574595015.115:27): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 66.273130][ T8838] sshd (8838) used greatest stack depth: 22920 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.217' (ECDSA) to the list of known hosts. 2019/11/24 11:30:25 fuzzer started 2019/11/24 11:30:27 dialing manager at 10.128.0.26:37225 2019/11/24 11:30:27 syscalls: 2563 2019/11/24 11:30:27 code coverage: enabled 2019/11/24 11:30:27 comparison tracing: enabled 2019/11/24 11:30:27 extra coverage: enabled 2019/11/24 11:30:27 setuid sandbox: enabled 2019/11/24 11:30:27 namespace sandbox: enabled 2019/11/24 11:30:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/24 11:30:27 fault injection: enabled 2019/11/24 11:30:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/24 11:30:27 net packet injection: enabled 2019/11/24 11:30:27 net device setup: enabled 2019/11/24 11:30:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/24 11:30:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 11:33:36 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x4, 0x6f3, 0x1, 0x4, 0x8, 0x5, 0x3ff, 0x80000001, 0xd01, 0x7fd, 0x4, 0x0, 0xa5, 0x6, 0x1ff]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x80}, &(0x7f0000000200)=0x8) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000240)={0xffff1d88, 0x7fff}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0xd1082, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x5c2, 0x3202a588, 0x1}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={r5, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x3d, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, &(0x7f00000003c0)=0x10) r6 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000440)={{0x2, 0x4e20, @broadcast}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x52268396945cd539}}, 0x20, {0x2, 0x4e23, @multicast1}, 'teql0\x00'}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x7, 0x1, 0xecfa, 0x0, 0x28, 0x3f, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x800, @loopback, 0x8}}, 0x9, 0x100, 0x40400, 0x76b, 0x7}}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x8205, 0xa3, 0xfffffffe, r7}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000640)=0x709) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000680)=0x725, 0x4) ioctl$TCSBRK(r6, 0x5409, 0x4) r8 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000000740)=&(0x7f0000000700)) setitimer(0x3, &(0x7f0000000780), &(0x7f00000007c0)) r9 = syz_open_dev$video4linux(&(0x7f0000000800)='/dev/v4l-subdev#\x00', 0x6, 0x3) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f0000000840)={0xc, @raw_data="bfaa1b6835ec765185d8f93188527164f42b4e79c475526c24037520ebac3a0e03661f3a5b8b335ea5301fd95ab00490b2c9b34c0cd6106f410ceae1b86990a7271ea25a2a09d0b169e1aff77b88423be34893d14d6c44b6d991c1eb786293c82e411010bf123d09e7066b85b51f881329e79ab5a15938c4034c71d2cdb777622967d2aa1f7d3d918e4c34b220e832992850c2e6b7acf9a664d4fd4136cda01b7ee39f685e97f525d43b9c0d895df60570086076d39127a968cf3f266bdee774e0a6a0fb19230a41"}) r10 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000940)={'bcsf0\x00', {0x2, 0x4e22, @empty}}) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000980)) fstat(r3, &(0x7f00000009c0)) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000c00)={0x1, 0x2, 0x1000, 0xf7, &(0x7f0000000a40)="fdc241335cf16ebac11e5a179e24a7a04329396cddf9c9e3ff378bd6fde40cada386eae73f88aab8dfcd9a23cfa473acd6693d73093e1e6430bd3f4b09d4df460a6ae28cca7c3d3275e82d2206a247e68c1c9699d8b5ce9559ce30efab50b5469304b17b6625cd8838c8640642973527165612e5b101310a349a068d56b79401b4b9e8d696347ab06c62a4c35bb02297597f093bf078a2ad66c7f0e59c1d1ef24b2e4ed43ef5cbd7ae8348e1820645fe4de63d4c6b9aafebad329eb6efa28dc5012742d2e51c1d9c1dee884fd24a71834deefa4b36c5ee553247e324bf5209b80ae7fd8d48e34d4f9a1367f03d65a0c57bc6d15cf25021", 0x94, 0x0, &(0x7f0000000b40)="860252ac230b341933f1b31f3deb20665178f8e0a84c9cdb86089909d91d2654274d55610f4d4504f101986ffe25f2a0a5a1f697139bdbaf1655ef1e691e8019e2eb9087cd81cd7ac160549629820c5b25757054073e04cec1b274e9ad8b9e3bd5539ee485875d41f95543f41e0382cf20b6c7a5823e990469a6a6b49e91fe8a348809b7b720d35165154bd03c8c9568f8acbd76"}) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="867cd1e6d04592da01e926305a92d3ccb637795ac74c14997b8e6a321dd2c71944f23a217243f1bd60e1af6c8d7baa6efdea3b86bc5b2842e4893a6bb97fd1bff655b38b9c431c3e3ac45124b2096f0dd270d87271f30429a13d8026de0bca05fc93b9ccc43aa7d6931be24f4091b87fea52b95a3eefbaac692b1ea4f91395117c480fba4737", 0x86, 0x8000810, &(0x7f0000000d40)={0x2, 0x4e23, @multicast2}, 0x10) 11:33:36 executing program 1: ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)={{0x7, 0x0, @reserved="0c5de9817cb52976014c7befcddfc8e824ba00e9da24415d3819219d396499a9"}, 0x9b, [], "aff142bd6c2bc09dee99e5cd12722b97cbb8d801357aae91388d8ca6cf6c7217857a13308dbad8aaffefe58f82e8b71528c6c6ab926ea388bc5a8c4d89d30e5c1ac357771225bb3c369caed009a95b70b7035ce68a4bc1ff723d9964a81b0e8c1f478e22452c7ada93ab2fde88dc82b476b6151d72344216438fc957d0ca157e2a47dc66ba4eebabff7247b74d2cc897748694451ca888ce90fa4d"}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0x7f, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/162, 0xa2}], 0x3, &(0x7f0000000500)=""/4096, 0x1000}, 0x7}], 0x1, 0x1040, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000001540)='syz0\x00') r2 = syz_open_dev$mouse(&(0x7f0000001580)='/dev/input/mouse#\x00', 0x7, 0x101) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f00000015c0)) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000001600)=0x3ff) r3 = syz_open_dev$video(&(0x7f0000001640)='/dev/video#\x00', 0x100000000, 0x100) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000001680)={0x7ff, 0xfffff801}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000016c0)=0x6, 0x4) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2004100}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={0x11c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000001900)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000001940)=0x8) r5 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000001980)) r6 = syz_open_dev$swradio(&(0x7f00000019c0)='/dev/swradio#\x00', 0x0, 0x2) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b80)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40808300}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x800) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/self/net/pfkey\x00', 0x48302, 0x0) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000001cc0)={[], 0x2, 0x1, 0x1, 0x0, 0x4, 0x2, 0x2000, [], 0x5}) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r10, 0x4018aee2, &(0x7f0000001f00)={0x0, 0x3ff, 0x1000, &(0x7f0000001ec0)=0xfff}) r11 = request_key(&(0x7f0000001f40)='keyring\x00', &(0x7f0000001f80)={'syz', 0x2}, &(0x7f0000001fc0)='/dev/radio#\x00', 0xfffffffffffffffc) keyctl$read(0xb, r11, &(0x7f0000002000)=""/115, 0x73) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000002080)='/proc/self/attr/current\x00', 0x2, 0x0) syzkaller login: [ 267.099296][ T8933] IPVS: ftp: loaded support on port[0] = 21 [ 267.271011][ T8933] chnl_net:caif_netlink_parms(): no params data found 11:33:36 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0xa, &(0x7f0000000040)=0x10000, 0x4) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) fremovexattr(r1, &(0x7f0000000140)=@random={'trusted.', '\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={0x0, 0x4, 0x3d, "f5997252bc5b029d73153485ef01685cebeb3b460e37b04f1d521a272d860d9ea2f191f8ad794d8e3098f24ab1f1ea03c889c70111f4c4bb2fe8735959"}, 0x45) r4 = open$dir(&(0x7f0000000300)='./file0\x00', 0x40000, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) fcntl$setownex(r4, 0xf, &(0x7f00000003c0)={0x0, r5}) exit(0x3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x400, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000440)={0x1, r6}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r8, 0x7260de7e55e96c83, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="1042c1759480207ceada87469ebb0617"}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x29}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x6020004}, 0x40) r9 = dup3(r7, 0xffffffffffffffff, 0x2e0a12a74b46f093) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = open(&(0x7f0000000a40)='./file0\x00', 0x809280, 0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r11 = syz_open_dev$sndpcmc(&(0x7f0000000b00)='/dev/snd/pcmC#D#c\x00', 0x962, 0x406000) openat$cgroup(r11, &(0x7f0000000b40)='syz0\x00', 0x200002, 0x0) r12 = fcntl$dupfd(r10, 0x406, r7) ioctl$KVM_GET_REGS(r12, 0x8090ae81, &(0x7f0000000b80)) r13 = userfaultfd(0x100000) sendfile(r6, r13, &(0x7f0000000c40)=0x96, 0xffffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(r14, &(0x7f0000001d00)=[{&(0x7f0000000c80)="0f44ea53196d7424dfc959af0d34124519e33e6ace1570086d24aa9fe0", 0x1d}, {&(0x7f0000000cc0)="221b11c80cebe7418d4cceb17dc37ec1171ab34cf3b78826617ffffa0809678f8298cfab2b2bae5a2c8fb096501b2078dfb70914a4ef41685fb9197b2201c18dda574de10a7ff8569f46e03436fafe3f388d78f2e0c492c1fac7d8bdc7fc2a1278d85d34bcdeba6fad2afc681e3c7ce89548c9a8d807188f5e480e3b1d0e4b9221934f8228d63ac110f1f8b92f8ee76d1a0c7c004676f6052f3bf73dd8f66560c91a87d9661748c03096db6e4bbc65fc84cd34b8a0f9521a26a565da1222a4595b3c7e37f74b9c139c336f478e917f02dbd1c2c8cd0bc6736038ab9bd0828a9979ef141151477a5b3e2e85d085af1a15f58bd878b71616deb9dc9be235e7aa0b9376794a84bf19e8df3c71e53118d01c5b5a29a9d0f3d91a56eb6de5931e3b3550024c47d925049bd81a92b1c76c2cc09fc559453fab4c2b440717f7340c2138a9c3eec5e9f284155f8262430b2a4e5a57285c772b8ce027d165c593a6c3084a3cb1531217b2f838b736a7f6a380bf4e5bd57ac4795f796159bce9a3a3b60380be5c6e89b5e4c4383bdef6a4f5faaa729f78868d292f131fbd6fbcaa486a69c3fb5a38ce6e38d4f85664bda3948aae148c00142cef11877d2426635a8f32b33baff8214ccfc8fcb03d267c65eef4f51956c33d27ebabbceb1ac56a51b5ae1c5be6e9cd87cde73739e1d70f900b6b917538e0fcd234055c298a130af73050ebc905316e6969dc14387076616bbb20288818c1534dc1c61a8ad53f491c5c2f3d437a379670d36894f1ab67da716728ba9f02a6605e823dc8a806a8b5fe62d58a3c058a1873b3b4d02bf49eb7242c47523a1be82dbdda59fbf2390a2243fca960707668f0686213cd6d74a016425625852065f0fe47c9a0d859b7b631b0ff0a1042e62b80a5f027b9a6f10a523abec32ee238c8701379f74d23f1555919a6b78884c9ed59910c2186b3669da4f2a447a9a251744c199301f9cfc02e2185a0be9c26edea35d10aa98134a7218e81970c1a498379a1f954e8575af94c629a743a8616ada54565fd256dcddc127e9adf9c1b366862ea14fdc3ec6674d814e78771cb5a90bfb963ea7dc68cc0658256b3954c6f973aea0f62bcf63addd550748e5f7a84c596f84a985ddab7be4487d7addb3119153cff637c99dcf4295702aaf3f2c1348e17b8b1a5fc9907d68b793bad7dea7fc7dd02d08ac99289088f80ed0bd653e5b19532b17df442da2eabef545bcdc6bccb9f12c15b3b2e2459e185a961925bd622b137d76cce3bb1744a68f81c2ccaaf074071c0513c52fead08018746dffcd8a5268e5a05fe0caca554986544f412e0ad2664851ded4957192c304ab6ad92e654a48664cb8b3ab1066824c5055f0df8fc68aeae31830bdaf191c431389a8cd9a5f20257de18219338eff057941ead268f34336e9411452a3d99bcc70449601790a131584dd1bb42cb327ca8723585585ba5eba97472faeab323c0118967d1fc68b886b9d75e6c3461593b3f688379d04702bde3f55548f47c28953c85ca371703e2c3cd4bb3d3becc39e70e168568f9148be9edb70226231ae183a98b9846f0b036466cac9e0102006afb3b0d345f6ba704e2f378987f171a77c84c83991041f36210e52aef2dd98c3452edd11c315e7c8310ba143476415a2a48cbcda669d03a20b324742168479c652c2ece981a17c0d2e469b301f046b7c798950fa46588489e8ec798eb5bbdf7306f86703bcef7d752ec5005a4e5f168371824cf15a2f3247c0d9ed6ea2afce544cb83f5677dc4a216057b4e2b3c13e89209970f1da37713e8c5408f1bc5acc8e18b610faeebb18bddbac45a46a17c71edb71c670e5b73429076f553f5a6a20b41a5581ea4b0547509b2dba22fb96680c3f4b07aee9927768d68bb0962222506fbc275d9a1009f79edf7c190381a4797e0216e7fe1dff8b9ceeed46a7d8ee6899c38363fd808dd2a9a46a928a3d9dfd850de899b87b925029f4e7a5152503d5ba14e7627b4b3257df3c68c7f06e457318edf46df9351c0753434b6b6ad3b4dcdd465f648b82530ad3df03ded06ab70d71c523805217eccacf384615df5db1ef1a71bf362d56131285b5fe902c610b49f7dd9d018cb11f0a80f29591e41555a3bd13035519ac5a934953c5eda29e9d705e6cb1163f13f22eb31700b7a5ad8e16881f74d8b21fd519d786ee32dd972ded8f82b420ea19540561242855094f8a7e496b2bd7c740757dbf03ea7795ed09833d073ddf2aa7d5647786090f3c4c3f256711b88cf2714295baafbfccd4f8d5fbec2c3c7bf39b89141ab4644924c7be57a138993a305393b9ea47763466568410949aec19e11d47095b1541d0895d73a391390460c15580028c08344d09a46cc65f1ded4405ecbb60841c1114052c4b090189cf5cb488d664b5f22ebb8ddd1562e507df08e8fa9d667f4a99ddbef08abdad258606d648d25d08ee6fcfadc0df596b9f39f8d73165593394189d930a09ce9f26babed4a298e74b8c93e8e9583af84849cfedbba6a00c9e7b9b1804270853d32159aaa7e09fff5cf9a230c6aa08fa9001607f2f1aa46ef2b3f06cf88976a0e477f9c7edd996c9242634829368660defcbb81d21e682cd4e98f1492a35bb5dcfe5468446f6f206c4cf3aebb2fd7ab845f082aa6729e281121ea8b1792fc55404a23d276abeb436ffb70a08b34c8ecd23130f0a2ff797ccb149aca59ed077383aea1cc654f654979478df74dc2fb58fd2dc40a35a63ccf8e907b8da6f2bf4dc82867b77541fe45a30002514a5a9a5b91b2861cd7ab4046343a338c6946c35af26687bdc8966cd471ad9dd240b4cee1fcb95bf3e8268a8fc51f09384f4a196897e52f1b534099944959c5c18fbe87d12bc8384a3f3e0a9fc3a86e80ebcae25084ea7ae5b701eb173dba25a7b72bb347a1906a1abb284ab5f27931f719e8889237c5f379dd5422d3a14e1542cddf3c36e8e818986890cd417bbc9c82897f90c2310f310c1b98c89cc111486a3d7b7b609ca710b85a83925a51dc586d0994113f2d7cad944ba3c33ca1800517648a70d54e6c8d32740beb4156b180c13583dbad8385eead65a957546c0abc13282a853b44f68c9477e3a6acc2dad880bb10b451c919b693324acf9879898c49dd34527e0f8cf026f12ed23ff0e944959ec53f146f1a452a2111e6dfebab9d7af2d188cda3a02725ce9d060286c6cba66717ef07f58c0067094027b24f4963d9d296177f5a75b96f7a1ff6a1d60a6b0514546f18eac8be0492cda455fee594275dbc2011a001db097460d8520ce7570096c0d68e19faf0d77f484d1b44d9762bd426de1f4b2a6481ecf3aab60ce3d7ef726e7c2628539405e2911e42fa44fa2a170c2f1546ce0d0dc7869892847bc2c8adae00b892b241ba366383872aeb0064d8aa23bb3f43839f86f5e9b367e186d49ffbf57f1ccd090b0f0d787d84b9faaaf7bbe3baaa3e06c1cccdd62c3efc1e4fb784e06139995fd104e60312f9b58993b092bc39b1d2435c06d173e1ba6315a4dbd98992c9335e66d1dc72423b618acfca67b11246a00be72a9a8db2f48575f767f9450c7c456d8c7534e7804a13be1868636fed34b997350d4510b542cbd60acc92e3e0a8c12d2fb1786499a2d85cb560aeb000ca71e495b0d313d88f3172fe6d2117137727bfa49fe1354affaab997b565a1d34774eed8fd09d8133a4e11c676ee8f75047b45b8c18588f310d2a467adfa3fa7ee619ed343ec31e1ea69c5e6f4f95cb3ffc1b3c40fb29dd64ca9237af460f6a249fdccfde3811975015ce31a4c613c5a8133bc61f4a8c98b017d2454b3dc32de673565719bdd4ff43a213b8329887d14cadc4b225a946a973d86665cca32e57d094a51ba55964155ef51239227c2d2e9b55e678effca0d1461bf7b792f4caed8ff5666d372bc1ec8f3bb22bf53a5143498354d709181eff9bcb0999e21ec348a0308dae46f1be1a95a229479281db53906ea4dc97fdcde893ece14b33e1e11f36c98e71e5d84b85583e66efa7aa0c31f1a0f9b06a697b2ff832dab64cff6eebbb39f4d8e41a6e4bb10ca5020afa46d976047dcf71924bb285c9d28e35c8d6eeaebbeebbfd7b8275efe7bd7b8bc1c122a70ad6631a0e7422fc77f9022a3140afcb5daca2825e804aabda4a9ba3acbee0f9c39d54c46319c5e4e7888b8402a808785e6b4a9559e5ed56ed86d97c230025a32fb3a4803b91f4939344b538f589ec4e3d7ea12a8f327ee13004f130bcbeb772f4b04871dd81e6c41efb6fb3c4b7d112c39feed84e87d75f5e8931a7525cbcba5086176e0ea3aa382ed661a7a3660be739ef6193e67ae2ef5db005023024e6e2362dadfcb732edb5fe3b6440ce556660c4946539af2bd98ed5373f08cc8b1da27cbfeb9facfc6f4b70db638612cb309bf25f7c6a13349a784f924135d15026a00212cc2c228272ececee3b9841f91a250f87ce93c2adafdf332a8f476406d16ab18ed9c383c52c9375a3138676c1cdc9b54421605b4c0d261397dfe43ba278224747e690a5a320454773c5f1fdc9e35848a12d2551e44d7ac603efea6d0a08402ca9e762fdd916ea712401a9102d8f1bcd1cf7e35349b0ab3fe1b404dec0c9e85969cf9c446c97397367a4373016e3475fc48e809374d20c9250a035d78a6ff45e99af2964d737ef21a3c47f7a80332000b79fd532fdf74c4be718fa2f84b2a9bbec151aea8ffebb45c37cb83087f58b8741d2f760cc91d2d8376de07dece0bc573d8461da7071f5768cda33c3ba0b1318d9e71751898b9afd9cc09de75614b3e0d968948912d05571e984600929f0573db069cdea4d2825162480bd63959978c9dc1fcc61ab318cc08e6e6128733d9ae93364a20f192d5b0a654acd82a8c37ec365be9adb8b344000d9d4df53275db217203c010ee1543cea598eb038d73ff7d61812cf71146a075d4449b8b14ba8c42ed8a762e573c90ea7fcbfc37a32c489e220370667763628a4420bf5457e9c1794fbfc1e2c9f0871741f1b50e62110b6e4a488f19a5959c9851dd4a2edd002ce5fa93ef90f523e2575fb1ff77fa03362e3b537db7737918a8101101e841bd2e0285d06a44d59713eb046f43976e80afa3bdfc3b0795790a0de37fb32a84f0fb45c4615d2f9b1dfd07ea8343c8070646b993037e5cafbc1aa716f347403f34d4ea3526d4f1f6bf23e0586fbb484f01c3684dbad10f0c7f316607a755f12ca065e1d3f15cef84b3a16c40f873afc4625aa4ad4c311ae6e549e266dfb6d88b334c5de4fcfc1cf65f383d2520fb63f79c76fd4e35c6e9381ce412b15e1c0b952fc4f7fa4bbe56d10f3ad31dc9badbf92b66a4308ac3b2802074ea1cb73268547fc79de1390824264ac59c084364797cda0e36f8b9c91c15cd45fe53a01091ad989596801d9eae5d7d41fdd750841ace6103f68370c2cd2264caf5987a42024fecbf07fdba88b1537d2d16c4505eedf4df42c59f7f95b10e492e496647e34405a3f5abeca5057255b5422f17e7dc2bd08436e4e0b7f8aba3190f1744317bebcb3a0751339057ad3b2380d819a5963f8b69cf92ab86d57df1e1737f1823f2c3c8a7ba37857d31ded829adb4dce5ae33bf3865d9b91a0e04f7a40a093ae335ae507593e8421ec14ab2a09522af70bd2c3ad67259f46d448d4afcb757d66b208e02fd105203ea136abbba6d475bbd3555642dbb62b9f711d90aeadc43ba04dc420ed2d9f9db7baab44456d11b3fc8905cf58c6cfef8cae7c1d86a4ad239553896ef58fc8039b8cab732599c", 0x1000}, {&(0x7f0000001cc0)="a49e05ac15f618ac15b0f4fef2164172db99d55ba4f181fa9f190ab24e49c094b1e52f988be20a6d200015b608713783a5b6d7b558928461615fa29561703a", 0x3f}], 0x3, 0x8) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/hwrng\x00', 0x4000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r15, 0x11, 0x2, &(0x7f0000001d80)=""/208, &(0x7f0000001e80)=0xd0) [ 267.344063][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.367634][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.380486][ T8933] device bridge_slave_0 entered promiscuous mode [ 267.412140][ T8936] IPVS: ftp: loaded support on port[0] = 21 [ 267.416844][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.425915][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.434272][ T8933] device bridge_slave_1 entered promiscuous mode [ 267.499386][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.521517][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.597075][ T8933] team0: Port device team_slave_0 added [ 267.617701][ T8933] team0: Port device team_slave_1 added [ 267.635339][ T8938] IPVS: ftp: loaded support on port[0] = 21 11:33:37 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9}, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x800000, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x5, 0x81, 0x2, 0x9}, {0x4, 0x12, 0x5, 0x20000000}, {0x1ff, 0x40, 0x7d}, {0xc84, 0x5, 0x6, 0x5}, {0x8, 0x0, 0x20, 0x101}, {0x7c, 0x7, 0x1, 0x9}, {0x3, 0xf8, 0x5, 0x8}, {0x4, 0x40, 0x0, 0x6}, {0x3f, 0x5, 0x1f, 0x8}, {0x1, 0x6, 0x7f, 0x1}]}) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.mems\x00', 0x2, 0x0) fcntl$dupfd(r2, 0x80c, r3) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0xe6f6, 0x80000) write$sndseq(r5, &(0x7f0000000280)=[{0x3f, 0x7, 0x4, 0x2, @tick=0x1, {0x80, 0x7}, {0x4, 0xde}, @connect={{0x81, 0x5}, {0x7, 0xfd}}}, {0x40, 0x1, 0x14, 0x81, @tick=0x6755, {0x2, 0x2d}, {0x5, 0x40}, @time=@tick=0x1}], 0x60) r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x486000, 0x58) close(r6) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000340)="199170", 0x3}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r1}) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000400)="f2bb81c8fe92dab2123812efbc0ffcdd2bd5fbe8148a53f3c2924b5c2be63bdc557758bd074b0504153bb04e00f23b58e55a9dc1a95879baea08e8184eace7699b4fbdf6dca938d9f40dd710ce1d01afc6b245f742d8345a91ad5941c449c21a3da4f6667a244cf5982601d7983b5c0563dcf60604b30d87483ccbfa6d6a9f98a1401ca94c21b98797a092d03a168e5304188ae1d9b07bb2a2f61e91c99778b0be88a84f4ea6dc03aaea361f707da74516c6ee3350cadc6c3b2a0388b6e69facdbce819f11e2737b2bcaec61a31377f04974b88673527527db9bbacc478426c8fa2016ae2bc58ce262108af67d29") r8 = getpid() process_vm_readv(r8, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/186, 0xba}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x5, &(0x7f0000001900)=[{&(0x7f0000001840)=""/68, 0x44}, {&(0x7f00000018c0)=""/44, 0x2c}], 0x2, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940)='/dev/autofs\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0)='fou\x00') sendmsg$FOU_CMD_GET(r9, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x6832402}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040082}, 0x10) r11 = add_key$user(&(0x7f0000001b00)='user\x00', &(0x7f0000001b40)={'syz', 0x0}, &(0x7f0000001b80)="f1d2c73e382bcb2cc562862ea3efd9dc673e5125b8c64c0104acda5dca434e8dd0e6122358780713d2a77c00afd5b534cc3f65305a7189f47fdccd2855a6bb0203c83b61da6fb3715a78e13b41e315b5e945907d7ca7999e2189cc82e5563f266003c0581026e5f1dcbc834162b112144d611cc9b35bc466e793762a2f0fbe9d9f59d335f3abfcef7bfd053b7e1a57ec67f88cc576aab70e0595cd6298db789d155aad31a9120f9fe6d98dcfdad08fd5c32fb2decce417bb58c1ecbe63e9785b9e7c985817c952d28e3079bfcc99c7243b877924d64b0446d4ac", 0xda, 0xfffffffffffffffb) r12 = add_key(&(0x7f0000001c80)='cifs.idmap\x00', &(0x7f0000001cc0)={'syz', 0x3}, &(0x7f0000001d00)="b2bc022b27a3d2ea629a171c42a22db0f3ce99e887f69d0f7a896c9fef0f4b64759779f015eee09f2b24", 0x2a, 0xfffffffffffffffe) keyctl$unlink(0x9, r11, r12) write$UHID_INPUT(r0, &(0x7f0000001d40)={0x8, "4eee52e572b36a49bc1d5821d6ed53d706c32aab9f83d3e1e6b2367f6b7eb56b317f6b384bea0a376ae39031bc91edf07bb49b17174667a0937118a70a02cc3fea5c99ddcc91889751c201c3f488c98de7b614ffd7ded8ddebe3b5821112c6356fefc0f2801544f726522d461d79495a9c506c28e1e447cdd7a108b388e4a2bf26d63dd37a512e788989c8020cea9dc91a57a5963f4de706a0689012a38eec3a99433ccff59fbf2d97a4fc70dcf786956b4a7dcf6b9934e0161612e4b55abb747bf288cfb144e983e1432194060f1a92981b0cb1ff21a6b50bdc62dae5c8c2328a89912c3bd5e06ec12d225432a6a2d6544df713c12cebbb18748aa8c1c14d9de1e16ccf1037a868f3a8da27b742442b192b690f4ec1c54769fbb7c37592d44a601f2d1f99e84a175642c911713e46f3a35d4b98fead7138da5abd6c99fae312a841019c1bc420c46ad6c0a677f015ef986264acaf740e89472677358f34edfae75840097eb4ab0032919fb885d94e270fdea3324df9f77f380a67e2306209c7d644ea0b496ab0c9b32de02e138ba5facf4cbc2fb036d46fda3a9cdd4f6d07677c761c0b7ed2c31235af272eb1fc62212e453f2b4bf2a4faacb2fce8d8d4844c0b16028bd400679778f18faffa1008ec1e8d0227b68ad2b85eb2d2f75736c1f95e7c32c709c00d6518f454bd7862611b4a54db64ba6b4fa03b5af4478fb920c6ac9f523ee76d985eee4dc63b4c1d9aac8d3b4ba64b19cb4d649743b8f6e16cf6e81b5690b221ab28e18117f966a242c719fa08b51637f8c5a0c2e1b821bda3bb8b1c4e6087de4d9c5de4c4ba96f7d15c3838a189fa25d5d7193c1ec241cf1f64deea48d65f1abdcaa7a0484e23e30cf3be1104df8c519591b369110b363b4480a77a17ee1c57306263c93c23741d53847c725b0252b00b433bccd5ea31e0cb8f56682988c138ce2632dcfe906518faee1e9175f4e956b0aff5ea3138407731d111ee38c0418feacb4cdaf81961222e219d783ee4701bce3e3981a417949ccf2ec35c617d79e5035b4226b5dfe1f4ffdb5103137215f1c6adcea906f84c659cfb5f8624d0037a99e74537cbd03e164f8c11296fbdd71c4daf7500327b950892159f150bfcea349dad90852b4ac710730411f5cd55b159d6b704445bfdc229d4cd51aa27438af7a5b9f2c316145ec393f709822f0f8c729a6511e78d867be394b23ea508b1c0a38dc87ff363d50485fa399047fa9798256127c65e63bde1f72d6d13eb319dc8d669ecd47c7a82497c2fe7def213159c8d900bbc2035d51e582ffbc57d0f77c67275761afb724cdb47cf63f2bb15d8fdcfc1154daa128dc55312e2465e9af3a89557e24095a2b7128f9f40b0b42085b9390f23d5b4bd287c6ae905658884884f20e5816c19afb8a339969f7b808b11b44e54dd96de04044ce85c7c516d0f9145d803fc5df6d7b8f4ae87cb409fb16fc3a8744699411fa4a4c2635aa214b543be3fb3c6a005af2c8c9ef5b0a3a23dc187bcecfb60637d8281880ad28144bcd616bebeefab5901d46023451e212d0ee2aed997e114e60aa6ce7f8a40965bc0177c25d188b3d722d9a3169021ee894b53ca8cf1f25fc3ac59b6717ce354e7d8acb9444e43a8de57ca6023bf47681ca047d5c19b09aeb6359c40ec37ba042c539af4ea2aedef81dacbcdefb5683467060a9d9b4a8eb238beb31cfbacad4e3b9275f3ba9969b595f83670d147d1f44a3e27453e260a4b52a0d9f2560f46bbc7a33dddea9b73ec11d73245cfee6678c18ad6385a64204d4104e1986ec9ed08a4084c49827487ba946f691d47d67a0dc761f8e7f587f9e68f2e1830267f98b9785ff3ffad73c120915b81c6d3e300d3e1f8255e8c7dec47441d44c85ccdb80c041fb7a68a172e2215435e7781645bd694b7d1c8dd6c8d99b2514d39fc1ea4a545fd115c47c0dd19e0b749bc1d0b9b6a05199834cad44689e553b8e2352b2f37f9853687683982778b0e736a2a758ed8213d890690fb538704dc19f335f010f18f5f2b3f7b7a8ecdc5cb945fd4e3403d343bdf0d8f4f3bd57c0756af61a2f30e3c18c6ad2a64c981150dc23816343cf548d22a9b55e260c71953d92e9e3f5bbc25e806fdae2afb87c6d5e956223eed39cedd3fcb6df5589422e7f68b75cbb4e387385149add17e1cbf8ee02867d2bba81e7d061b0b98c131cd2134bd302a1dd9a8ba0a8d3ed8c88e894641a8cf662f4cdafd192c0fd04975debad7ecb0d9498957694746440de906f7fcc07d5ffc48389815d305fb68ae0d261a8f47d4feb6c9e525fcaacbd9c983716a46fcc0c85e4456b5c1bad08d5a1e38845c0b1f78aeaf2049d7d7e891754c3912df56d7e6cfd275ba0cf374639ae6f40d8ffc74fcf7d394f85348c580a7ac89d93c3d3953123d00710d05d65c8e75d86b9913e9147a9cfd4cb805de170313f856aa6c3f82907c5a8fe3539f1cc38d2d6fc434b4f98923cdf58b6ee9988b3e1fe4b3fdede5a7775d6dbdc799b8d8b1bc6215d68ddc421a8c69d229f55be4da6fedb4e540deff1cea92d5ed933b83b6db72aadbd41520f73a9370c1b5744e562a03920604011e6817cf0048b449241a2f623997b81622f7ef18da03c882bd5b4d11ffa7db16520a132ea1a2aa655b2b0bd8942f464d04ec41e45f56798222427c9037d71e4f0b7d2add0df132c5c058b28a9b6c7b5981d6a449b46e2d92aeeb7aba4a30ef204b8fa846a86355d5d9b9697ddb3c248ff3d3f12c60970aa385af2953851161d0d28b8a66c031b5521959fed713395bddf8583b12cd55c6b4756f2c2127b71e857f7fb6968083d925a0e966b138e0986fba890290174b8c21944f9ba1d9eea943d1aa6057fb1b6a3d1f8f1a39d8e8eefed736d689ac384228869e7c50c2e9b9ce1977556c766179313161e1c59c158733ed3c35b14000515dbd99c49eabc110110b69c9652fc5a3163b68aa043131455fbe43501ecdaf73b0d1eaf018b85bd6a550f0d42fe348f92116df43439c75728ffad94365774f7329821bb9ec01fc0102f6226a47006aee3ab4ef64b04d67013c28b438356b4cc9fb54499ff3326bd3aba55cd4be76c33f77088da651a6fb0939a9a3f8f08cec713edcd1b629fb3a386cc88be8c5315cffb9b0acc9b89b5a0f1899b7b186118c0a7ed58bc445d3d401b9224f0dfdcc9ee320d3aef3882d472fcd349fc98d6e69144e71d9fb46080fc667412f440f838caf2707895d2a9e4eeba11666a3b49fc09b11eaa9695676113c013cd7a8e38e8395d19d5e091664abfe346b17c30d7154797c4429b78c32dc9817b047cb1804df1d15eaeb0889d260ba9934d85e55d4185e2f545a4c5d011e16edd61bb00ee667674c628e4d05ee463718bfdc5aa758d9a3ddfb85ccf728dc5472abe46c18520b8bf7e05d8e63c8d61221f930b6da08b6de3d91def2f6b751691fa44084387d2095ed1683acd88bea81f5a29474afc13e46fcd3559ea6f981115b43bdd29a923751cd69e8aa4b5842873c580a70471caade21fb2c3c0190baa91a95c495bf774452cbd7881560b14f2d8390c799c16bfa30910c4d683eb81d687b5cdde571f1c33eee08da57d6822c9fb93b335ba5a68e2f35d730dde23bff1fbd2ca0cd64e55513b56be8807c8fd1ef355978ea753954370a40c97f31ce83307eb421ae44904a791a65aadaef6dcb4b53a1b2d7e3649100b264868de2777ca38c44952f5a703e567dbf6f932446f01ded23aca55c47288feeeadfdf10efa81551901548d008d20ad43edd4b690db00f41aee095ac19a3694991a4fb3924d8e71d8ac396e5a0accc1aa53ce22427fdb02762f55e51e7f0d167d8069c65346190d1e677c458f7bb5f5cdb16993a1b6b110b3586224ae90661d3e823d4ab485a447d5fc25170b20be593115fdd8a6991f6d2cfcef9010b413fa614767b47cb84fad2df65851085ab71381eb29f0f39c256111f55cd725d63021bbfbf045210ba98674523f98c01a647e0e2a0e9793d4a17b875de26def0f0d3e940302d5450908b11856675b6141c750ab83452ad79fd50651e7daf1cada599ebf361f0e2ff33328d82e5c25b6f14b8083cc1b02b31631db9f3e749cf1a0c4f402728c6093582f159c5cb9033dfdcfa2d4df4f543bceddc81695323ba25824f4ffef6697e45a6c7c0887af9998b36b954349a2ecd99df711cf6e9186afefedb2175f299e4433eea8743130345b94f3d33f5260b8bab6c7a50ae401e1c319b985be2a80ec21670ddbdefa19f755575fe413176869c825b7c3eae159d5a2791487771045695dbd2b19b1253077722a12f5529c14f07324c799c675414464fcba8458ebd5898904b1e9acff1f05faaaf306c03690b5d9498f7f071b56b1537e0c7430c1ea27933e665ad7d0b9d9e2343bbab715690dfa37d131cd81f28e1b044ae815721720bcae179ac4204eea1e0ec93a2c64a37720e9eed6ec0dd8a69e99f498f3819a4ec2b50204a59c04c2e242ec2bb28a7a455db25b74ad1af41c98816e63bf6cc25c3c6ec6c90a21798b4059e9cb5f9d8e6d64991f96973605d5e2a8ce91ddac27da6493c6cb6b1254389a8547c9a900816dfd4602c0e34e86f4a6e493e2712d436fb33c1bd0a65f71026ef3c6fd7382e121b7226b18c9e854db919bebe8fe62cafab756979070245fa3d06f4abedb354287e928cfa139071a5ee68f308075bc5268368c21e60132bac0c01af28835b28f77403a2565320f23bda660b83188fd71554b7d91656b3c3261d211d73d9a3eaa80b0b2ab8357b770ca9df62e9d022ed9e5b639d50f3815d2fae8c227dcd34f631acce20f3980210764b04e3085361ca9d482da7063291ba6a8c0f317f2b302192e13742099628809f3d1ff81703eb56fbf5e666363db1466655e6fd219f6f497a9fc117528a0d5234465a9e8a8f16eabbe60a7c1e7b4e35bbcd73e39425df8aeeae0967f65f9efaf45e96f894a3c257124c62c5b9f2dac51c4f2668768b1b0718f2e91042265e89b135a83e8b6ecea2ac58c23ae73a06981ed9f0d212f32914f9498ae7856ff01aaff83be21520df4d386bbc7d143e2794b65e3ea526fe2e6751d2f0e213cda03248dea79a0a0b2c69ea0ee4e15f46f5c067914f644cb48f167498af3417c56b511d4dae6995e4def97f84debcc5cb8882ee2e4a0eb7139171f4d0a8dd3ab84896a47e7934670c8a8d8fc2f7ecbac28af27020fb344f0bbd6c2831e0249878e8fdd0a26cd7748c4ad29bc6c89df086a1c61ec280daa388597c359e72fa830f5cda27179a947f78c1e25544803bc4958efcf31533ee4050da4d5dca84f8eadf59d99fa56dbc72cc3e837719fe2ab15020ea29188c58b3bd4a67acee721a0f8ba11c8ea4660da36d5841cbdfdf55a1e53ef63db6d444f38546b479f6e9bba45a9a64f64965d9f0edb5a6ba4386f79d379534a4584cb77ca629f62d0ccce98c482797de24a77ccd38d365628493aded78c4b158371a177243393e845d35966dfecb437980500df332e13fc1ea01293b190a668e24425a57493906781211d8d0553c2e715722531613d9b7f55c93c73d4ee3f4a2a62da2b8c334810193644d40dbb5c5ccd62b7f4ddfe3d3c1df0af77a4b3b0e1bf1c0dfb11876f3dda6f081d26cfdad70fe2569aac576f7d7993cc3ee046d8b88b4391861b36ff28e236574d3c6a50448f7f83b41a21b78958b718b2b7c9ac465aed7ece8a2eed165af5b07c0dad0c0274811a35b9f13465c9355a857c1d2087275a187ac12b6d2e08df632dfaf37", 0x1000}, 0x1006) add_key$keyring(&(0x7f0000002d80)='keyring\x00', &(0x7f0000002dc0)={'syz', 0x1}, 0x0, 0x0, r12) r13 = syz_open_dev$dspn(&(0x7f0000002e00)='/dev/dsp#\x00', 0x761, 0x800080) write$P9_RLERROR(r13, &(0x7f0000002e40)={0x14, 0x7, 0x2, {0xb, 'cifs.idmap\x00'}}, 0x14) r14 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003040)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000003140)=0xe8) accept(0xffffffffffffffff, &(0x7f0000003240)=@ll={0x11, 0x0, 0x0}, &(0x7f00000032c0)=0x80) sendmsg$inet(r14, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)="40e5e69647981cd07496ea1d695263001d47db884cd187982c34b95eca06587b3796717235902517f7e9f38cb0fd4851447b2a89e53fa694de802cd34a4137ade42c1f90e675c494369c1c571b3a7833dcf6586b701422bce69d595cca5b56c48f11f578bc62b54c5befecdcba0ddd7d3b376ac78076777b369a120902e9a125eb41ffb485", 0x85}, {&(0x7f0000002f40)="5eb91525432c4846ff0f43a976af090313796a67d1864c79337589972d4c4b8e61a1ef83a823b42cb41b49e5cf8ed8b8b39cfa1f0c0921", 0x37}], 0x2, &(0x7f0000003300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @ra={0x94, 0x6, 0x401}, @ra={0x94, 0x6, 0x3}, @noop, @rr={0x7, 0x1f, 0x9, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @empty, @rand_addr=0x3]}, @ssrr={0x89, 0xf, 0x6, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x3, 0x29}, @lsrr={0x83, 0x13, 0xd, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x2]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @broadcast, @multicast2}}}], 0xc0}, 0x0) [ 267.740031][ T8933] device hsr_slave_0 entered promiscuous mode [ 267.806773][ T8933] device hsr_slave_1 entered promiscuous mode [ 267.870174][ T8940] IPVS: ftp: loaded support on port[0] = 21 11:33:37 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x200c04) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000280)={{0x2, 0x0, 0x7, 0x442afdd207908837}, 0x1, 0x3ff}) r2 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x3, 0x2) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0xa6296829618d6046}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r3 = dup2(0xffffffffffffffff, r1) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000380)=0x1) syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0xffffffffffff8000, 0x40) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000400)={0x1, 0xff87, 0x4}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x101) r5 = syz_open_dev$sndmidi(&(0x7f0000000480)='/dev/snd/midiC#D#\x00', 0x80000001, 0x2) poll(&(0x7f00000004c0)=[{r5, 0xfb149dec5f64dde9}], 0x1, 0x5049) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000500)={0x5, 0xfff, 0x20, 0x3f, 0x2, 0xf7}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r6, 0x4040ae70, &(0x7f0000000580)={0x4, 0x5, 0xa66, 0x200}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @empty}], 0x10) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000600)={'filter\x00'}, &(0x7f0000000680)=0x44) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000006c0)={{0x2, 0x0, @reserved="5eea3277ab86e20214b0034b900aefb9a022a6d4752780327b70258c107a5f3d"}, 0x74, [], "7971b8043ff170476933cde8c4108af99e5c0e64cef3b4dd4c457a992a37d85f6d477d19b2bf01aee5a6f00a7a46ba6b47900bd2add0e8a3b4c04eb25e73dee922f8f4eccb6b727a0deb5e8867b2d896d1eaa5efd8c2ea307930c1a3855ca955731d3a5553c3849dce6ea4ebbd523b6693ce808e"}) r8 = syz_open_dev$sndpcmc(&(0x7f00000007c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x195682) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={r8, r6, 0x1c}, 0x10) connect$x25(r3, &(0x7f0000000840)={0x9, @null=' \x00'}, 0x12) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/video37\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000880)='GPL\x00', 0x0, r9) [ 267.995181][ T8933] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.059638][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 268.088530][ T8933] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.148653][ T8933] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.191495][ T8933] netdevsim netdevsim0 netdevsim3: renamed from eth3 11:33:37 executing program 5: r0 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.bdev(#\x00', 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000000c0)=""/21, 0x15) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000140)=""/71, &(0x7f00000001c0)=0x47) r2 = request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\\eth0posix_acl_accesseth1+-wlan1vboxnet1eth1\x00', r0) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000005c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x78, r6}) bind$llc(0xffffffffffffffff, &(0x7f0000000600)={0x1a, 0x324, 0x80, 0x0, 0x2, 0x0, @random="807f09c7cb63"}, 0x10) r7 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0xffffffffffffff34, 0x400042) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000680)) r8 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x6, 0x2000c0) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000000700)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r7, 0x111, 0x5, 0x400, 0x4) prctl$PR_GET_THP_DISABLE(0x2a) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ubi_ctrl\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r7, 0x10, &(0x7f0000000900)={&(0x7f0000000800)=""/235, 0xeb, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r9, 0x10, &(0x7f0000000980)={&(0x7f0000000780)=""/94, 0x5e, r10}}, 0x10) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r11, 0x10f, 0x82, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/full\x00', 0x4, 0x0) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/ubi_ctrl\x00', 0x109082, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r12, 0xae78, &(0x7f0000000b40)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) fcntl$notify(r13, 0x402, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000bc0)={0xffffffffffffffff}) bind$ax25(r14, &(0x7f0000000c00)={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) [ 268.322268][ T8943] IPVS: ftp: loaded support on port[0] = 21 [ 268.345087][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.366542][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.375133][ T8936] device bridge_slave_0 entered promiscuous mode [ 268.423374][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.438990][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.447345][ T8936] device bridge_slave_1 entered promiscuous mode [ 268.512003][ T8946] IPVS: ftp: loaded support on port[0] = 21 [ 268.529059][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.542215][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.573066][ T8936] team0: Port device team_slave_0 added [ 268.581492][ T8936] team0: Port device team_slave_1 added [ 268.589165][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 268.689685][ T8936] device hsr_slave_0 entered promiscuous mode [ 268.716838][ T8936] device hsr_slave_1 entered promiscuous mode [ 268.756658][ T8936] debugfs: Directory 'hsr0' with parent '/' already present! [ 268.800481][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.807943][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.816083][ T8940] device bridge_slave_0 entered promiscuous mode [ 268.828479][ T8938] chnl_net:caif_netlink_parms(): no params data found [ 268.875887][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.884329][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.892857][ T8940] device bridge_slave_1 entered promiscuous mode [ 268.910063][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.919282][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.927624][ T8938] device bridge_slave_0 entered promiscuous mode [ 268.969561][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.979430][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.987791][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.995744][ T8938] device bridge_slave_1 entered promiscuous mode [ 269.008356][ T8936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.060073][ T8936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.112110][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.135012][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.147073][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.160621][ T8936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.198304][ T8936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.302041][ T8940] team0: Port device team_slave_0 added [ 269.330179][ T8938] team0: Port device team_slave_0 added [ 269.348404][ T8940] team0: Port device team_slave_1 added [ 269.364219][ T8938] team0: Port device team_slave_1 added [ 269.382788][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.469156][ T8938] device hsr_slave_0 entered promiscuous mode [ 269.508020][ T8938] device hsr_slave_1 entered promiscuous mode [ 269.546740][ T8938] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.590166][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 269.689693][ T8940] device hsr_slave_0 entered promiscuous mode [ 269.747301][ T8940] device hsr_slave_1 entered promiscuous mode [ 269.786508][ T8940] debugfs: Directory 'hsr0' with parent '/' already present! [ 269.797052][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 269.823927][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.853861][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.862951][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.877646][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.884880][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.894014][ T8943] device bridge_slave_0 entered promiscuous mode [ 269.930553][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.938972][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.947091][ T8943] device bridge_slave_1 entered promiscuous mode [ 269.954662][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 269.967289][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.977204][ T3111] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.985135][ T3111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.002699][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.011464][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.023212][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.032530][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.040194][ T3111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.073780][ T8940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.142897][ T8940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.193171][ T8940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.228483][ T8940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.301019][ T8938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.368166][ T8938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.454602][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.466175][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.488137][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.495465][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.503778][ T8946] device bridge_slave_0 entered promiscuous mode [ 270.511991][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.519151][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.527448][ T8946] device bridge_slave_1 entered promiscuous mode [ 270.534927][ T8938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.589812][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.600040][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.611941][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.622719][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.638324][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.646746][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.655916][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.672137][ T8938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.734543][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 270.744357][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.763381][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.784442][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 270.793046][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.804469][ T8943] team0: Port device team_slave_0 added [ 270.817896][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.841860][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 270.852918][ T8943] team0: Port device team_slave_1 added [ 270.874377][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.900792][ T8946] team0: Port device team_slave_0 added [ 270.912405][ T8946] team0: Port device team_slave_1 added [ 270.989864][ T8946] device hsr_slave_0 entered promiscuous mode [ 271.036986][ T8946] device hsr_slave_1 entered promiscuous mode [ 271.106510][ T8946] debugfs: Directory 'hsr0' with parent '/' already present! [ 271.144174][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.160123][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.168660][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.177322][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.185390][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.239963][ T8943] device hsr_slave_0 entered promiscuous mode [ 271.286902][ T8943] device hsr_slave_1 entered promiscuous mode [ 271.356533][ T8943] debugfs: Directory 'hsr0' with parent '/' already present! [ 271.389477][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.403097][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.411962][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.419102][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.428250][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.438308][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.446952][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.454145][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.503302][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.512146][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.522040][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.532008][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.541597][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.550713][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.559942][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.570302][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.579642][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.588752][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.600712][ T8936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.613134][ T8936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.646587][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.655401][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.669913][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.685494][ T8946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.753336][ T8946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.824273][ T8943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.885372][ T8946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.910556][ T8946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.973141][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.982154][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.990435][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.998322][ T8943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.051350][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.078962][ T8943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.124347][ T8943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.141649][ T8954] QAT: Invalid ioctl [ 272.154800][ T8954] QAT: Invalid ioctl 11:33:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000010c0)=ANY=[@ANYPTR, @ANYBLOB], 0x2) socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000100)="22000000140067058d000005004c030402080313010000000a00020041020ece76ab", 0x22) [ 272.194445][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.205205][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.229215][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.238055][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.303307][ T8938] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.311724][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.326297][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.358930][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.366039][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.389703][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.397778][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.407736][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.444414][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 11:33:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00.\xc9\xe8\xbe\f0\x14\x8c{\xe9\xc3\xea\x18aY\xd1\xbe\x8a\x19\xe7\x00V\xa5\xf3\x92%o\xcb/%\xc6O\xdc\x851\x15}\xd0\x86\x8c`\xd2\xa16V\x10\xbd\x83;\xf4\xe3\xe4\xf9\xc8\x86\x1e\x10\xd4\xf1F\xe6Y\xd5\'t\x8f\fE\xe9\x04\xb6\xb6aGgk\xbaT@\x06\xbe\xbd\xb0}\xa6-p\xe8\x06\xff\xfb\xcf\x92\x0e\x1e\xf9\x8dL\x1d\xa4\xeb@9\xb4\xd2_\xa8\xb5\x98\xa8#\xfc\x1f\x8dhU\x05\x91\nY\xa4>|Z\x1a\xc5\a[\x92\x8f6l\xaa\x12i*\xc5\xe0\x115\x90\t\xcb\xfeG\xaa\xc2\xf4\xb3\x9e\xaa\x8f&:\xc5\xea[\xd6\x16\x84@\xeb\xc3}\xd4@\xc9\xa92\xdb\xecU\x1a\x8f\xfe\xb3\xb0U\xaa\xd5\xe0\xcav{2:;{\xb5\xe3\xbf\xf0\xd9\xdc\t\x0f\x8bN5\xd5\xc1\x14\xb7s\xfb\xb4m(\ry\xd1\xe8}\x8av\xb0\x05\x1c\x91\xcd3(Ov\xe7\xf5S/Bk\x88\xd0;\x82D\xb9\x876\xd5\x0e\n\xc37\xca\x9c\xb2\xbf\xd7.\xf5eb\x81M\xd3\xd6%\x92=z\x8f\xff>S\bm\xa7\xcd0y\a&\xfe \x91_b<\xe4\xd9+\xdc\x9d\x13P<\xc4\x8e\x87<\xf4\xed/XyW\xd0MK\xa7\xc7\xa4i\xb1\xf6\xdff\xbe\xe2\x99i\xbeF\b\x9bpW\xabI7\x8e\x17d\x87\xbc\x98q\xd6(0!\xd2;\x86\xff\x1a\xf8\xa8y\x9a\t\xca\xe1\x96\xe3\xb3\xfe_Y\x84\xab\xefoF\x8e\x83\x19\b\f\x96W\x16\x80s\x9b\x8eIP\xc4\xc2\xb1\xdc\xd5A\bI\x88dCEh6\x17\xa8 \x82\"\x12\x11\x1d:*\xd8\xcd\x92\x97\xc7\x05+\x9e.\xc7\xec\x12b\x1e<0\xfb\xdb\xb1\xeb\x00\xa7\xeaJ\xdck\xaa\x96|\xd5\x7f9+W\xfaZ\xf3Z:#\xdd\xbc?\xc9#=\xc6\x17\x10m\xd2\xd5(wDEq\xc7I\xad\xf9\xfbN\xff\x86)\x0fC\xdbdJz\xab\xfe\xff\xdd\x7fV\xc6;g(\xb9w?\xff@\x80\x17K\xb1\x93!\x13\xee\xeeq\x80\xd2\xf3iN\xd3\xe6J\x11\x05\x18e\xfc\x9a\x8dix\x12\xa2BH}Uj\xe7\xd7\a\xed\x0e\x17\x00x\x8cK\xe0c\xdb\x11\xbdY-4w\xed\xbe\xb4\xfe\x00\xa3\xd0\xac\v\xde[9[\ac\xb9B\xa4.e@\xbdmL\xeb\xf4\xfd1\x90\x145\xcb<\xfa\xf2') read(r0, 0x0, 0x0) [ 272.453528][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.470688][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.477834][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.482309][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.500604][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.515264][ T8962] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 11:33:41 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100}, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6", 0x39, 0x80, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) init_module(0x0, 0x0, &(0x7f0000000100)='/dev/kvm\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r1, &(0x7f0000000280), 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0xa3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x2060, &(0x7f0000000900)=ANY=[@ANYBLOB="439969b0d0de34d732c19c47b29f433ef0d93ed089a4ce909fd192906953f532ddb0fa1c02a22b9856e5a45cbdb3720346da9a502899036b5208000000000000006dc7738dce9b62bcd3c37fd04fe97f689d4fc103af1ab23f7e1843f21219e1fdf78b3384aa25bc5f2c0f872b63fb044943f20439fe85a7578359cc49a269b7eacd022cc95090d329eca7603b4b3bab41c0ddbd7ddfb84aee8b2ade12c42d310ed46618707066bb9de5b025a74b707f1ae7796e49f4478902131d558971cdead262fc456995d827410000ca97b2408b", @ANYBLOB="c37dfa8c3a3d93e1ae14d882322507ca15aa2acc3655332d434713dc363393f9390726757ff4d2eb0ca027686a792aa8cc87c63987b531d674e10e32c5675c0a2cd70d284ef397d3220064bdd1ae70c0ed83db63652f5fd2e6f6f841c866d397b1def55421733d9da66f6c5078f038", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) write(r9, &(0x7f000018efdc)="2400000052001f0014f9f4070009040002000710108fb500feffffff08007ca6a8790000", 0x24) r10 = socket(0x0, 0x3, 0x0) write(r10, &(0x7f000018efdc)="2400000052001f0014f9f4070009040002000710108fb500feffffff08007ca6a8790000", 0x24) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x200000000000800, 0xb) perf_event_open(0x0, 0xffffffffffffffff, 0x2, r8, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000200)=0x8, 0x4) creat(&(0x7f0000000300)='./bus\x00', 0x0) [ 272.575509][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.585744][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 11:33:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) [ 272.620707][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.627847][ T8944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.651814][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.667529][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.676050][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.678950][ C1] hrtimer: interrupt took 43921 ns [ 272.683178][ T8944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.705774][ T8975] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 272.714525][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.739841][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.754194][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.763329][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.782771][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.841029][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.850863][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.859497][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.869458][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.879145][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.888057][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.897748][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.911414][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.920337][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.931909][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.941068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.961704][ T8938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.975327][ T8938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 11:33:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) [ 272.999663][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.045184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.058781][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.067673][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.076193][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.085172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.100625][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.113814][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.147311][ T8940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.165170][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.173355][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.187808][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.222009][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.244685][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.268601][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.276191][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.301667][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 11:33:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) [ 273.319523][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.328480][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.336072][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.345336][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.353858][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.380071][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.390906][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.398095][ T8944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.408765][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.417881][ T8975] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.446612][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.455304][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.471956][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.479130][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.499070][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.516751][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.527075][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.534338][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state 11:33:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 273.545889][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 11:33:42 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) [ 273.597886][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.613094][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.635149][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.658921][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.666628][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.708863][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.740447][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.778345][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.793651][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.815592][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.824534][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.840133][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.849744][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.859612][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.883753][ T8946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.916507][ T8946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.940254][ T9014] QAT: Invalid ioctl [ 273.954142][ T8943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.978511][ T8943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.990311][ T9014] QAT: Invalid ioctl [ 274.016047][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.038096][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.061970][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.072618][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.081691][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.090690][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.099634][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.112419][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.121167][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.130226][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.139219][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.147808][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.157278][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.165300][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.173338][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.218082][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.227070][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.241352][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.253839][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.262030][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.280406][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 11:33:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x30, r1, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0xfffffff0}, 0x0) 11:33:43 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)) socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) process_vm_writev(0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {0x0}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000040)='&cgroup#&ppp1\x00'}, 0x30) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x9}}}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x107100, 0x1, 0x11, r3, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000140)) r4 = syz_open_procfs(r2, &(0x7f0000000080)='net/netlink\x00\xebf\xba\n\xa1\xb6\x1d\x17\x8c\fP6\b\x8bS\x93\xbf\x15\x06\xa5\xe9Ef\xe0\x86v\xf2\x82\x8e4\x91\xd9D\xc1\x8ed\xa4\x94\xfa\xca\x1a\x80\xc0\xf7k\xfb\xedV') r5 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') sendfile(r5, r4, &(0x7f0000000000)=0x8e, 0x7ffff000) 11:33:44 executing program 4: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) unlink(0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd39238d4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'crc32-generic\x00'}}) add_key$keyring(&(0x7f00000020c0)='keyring\x00', &(0x7f0000002100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005680)={0x0, 0x989680}) 11:33:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) waitid(0x0, 0x0, 0x0, 0x20000000, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) r4 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r4, r2) 11:33:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x102002700) 11:33:44 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000000000006798c8840900000040a6c8499e59f24c6ac68e5f17db9e1c2bc35f3aadfc7333530000000000000000000000000000000000000000000000000000000000000000000000000000007dd65599cef7d112e03f92d61e8a97f599ef5528afd5a2ddca6151142bdc3cf593f33b0fe73e3a011272a40a567907a44f2b27a69ba80f67fc1457a5a1cc173ee72e9f41e904fa9a65242c2ca04e08829832aefd0400a314007013e35ac3000000000000007b73d343d0de3a47ee8ff5edaa49180ec67ccc7ae4f73e80e0eb03733f361e6f9d265a3584c6e8e2eb0346c77a5edd49904b4a51a20e3c3b59bc"]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000c7ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87d1e059855db90a452c600301b9f01c936f71358edec3ff8897ad63aa106dd21ef6e8a753"], 0x58) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000000c0)=0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x10) setpgid(r7, 0x0) ioprio_get$pid(0x3, r7) ioctl$KVM_RUN(r5, 0xae80, 0x0) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88") 11:33:44 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x309, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000031000512d25a80648c3094fb0124fc00104c0b400c000200053582c137153e370900018025646e040081", 0x2e}], 0x1, 0x0, 0x0, 0xe9610400}, 0x0) 11:33:44 executing program 2: syz_open_procfs(0x0, 0x0) mlockall(0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) [ 275.461710][ T9068] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 275.519009][ T9068] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 275.542615][ C0] sd 0:0:1:0: [sg0] tag#6280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 275.553099][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB: Test Unit Ready [ 275.559749][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.569482][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.579113][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.588741][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.598369][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.608095][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.617730][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.627397][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.636991][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.646605][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.656522][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11:33:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) write$P9_RSYMLINK(r6, &(0x7f0000000180)={0x14}, 0x10000015a) 11:33:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) waitid(0x0, 0x0, 0x0, 0x20000000, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) r4 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r4, r2) [ 275.666386][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.676055][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.685745][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 275.695393][ C0] sd 0:0:1:0: [sg0] tag#6280 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 11:33:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r1, &(0x7f0000000380)=""/87, 0x20) getdents64(r1, &(0x7f0000000200)=""/198, 0xc6) getdents64(r1, &(0x7f0000000080)=""/167, 0xa7) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 11:33:45 executing program 0: msgsnd(0x0, &(0x7f0000000140)={0x2}, 0x8, 0x0) 11:33:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4c5df}}, 0x20}}, 0x0) [ 276.511159][ C0] sd 0:0:1:0: [sg0] tag#6281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 276.521671][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB: Test Unit Ready [ 276.528760][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.538402][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.548314][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.557968][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.567647][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.577331][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.586966][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.597493][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.607133][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.616739][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.616765][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.616789][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.616813][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.616836][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.616857][ C0] sd 0:0:1:0: [sg0] tag#6281 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 11:33:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) waitid(0x0, 0x0, 0x0, 0x20000000, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, r3, 0x0, 0x0) r4 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r4, r2) [ 276.715431][ T9109] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 276.755517][ T9109] device bond_slave_1 entered promiscuous mode 11:33:46 executing program 4: sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) gettid() gettid() syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpgrp(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) r3 = dup(r1) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 276.795952][ T9112] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:33:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="240000001a005f0214f9f4070009040800000000000000050000000008000f00fd000000", 0x24) 11:33:46 executing program 3: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0) 11:33:46 executing program 5: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x1c9c380}}, 0x0) 11:33:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) waitid(0x83b895581628fca4, 0x0, 0x0, 0x20000000, &(0x7f0000000480)) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) r4 = dup3(r0, r1, 0x0) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r2) 11:33:46 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) get_robust_list(0x0, &(0x7f0000000300)=0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000000)) 11:33:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) 11:33:46 executing program 4: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000b00000040000080000000", 0x2c, 0x400}], 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x202000, 0xe2) r0 = openat(0xffffffffffffff9c, 0x0, 0x4000, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320f) getcwd(&(0x7f00000012c0)=""/4096, 0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x14) r1 = dup(0xffffffffffffffff) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000540)={0x0, 0x2}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0xd3) r2 = socket$netlink(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="220000002000070700be0000090007010a0000d801003c0100ff040405000c008000", 0x22) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000001c0)={0x0, 0x6}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8d}, 0x28240}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x80) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r5, 0x6103123) keyctl$chown(0x4, r5, 0x0, 0x0) [ 277.592080][ T9140] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:33:46 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x309, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000031000512d25a80648c6394fb0224fc00104c0b400c000200053582c137153e370900018025646e040081", 0x2e}], 0x1, 0x0, 0x0, 0xe9610400}, 0x0) 11:33:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040), 0x10) [ 277.658496][ T9147] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:33:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="2d997e568b940344a40733b5e36b51d3"}}]}, 0x70}}, 0x0) 11:33:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x102) [ 277.803966][ T9160] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 277.822783][ T9160] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:33:47 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='nilfs2\x00', 0x1000, 0x0) chdir(0x0) open(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) iopl(0x98) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r5, &(0x7f0000000380)=""/233, 0xffbe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000400)=ANY=[]}) 11:33:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = gettid() kcmp(r3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r4 = dup3(r0, r1, 0x0) socket(0x11, 0x800000003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r2) 11:33:47 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x34b}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd39238d4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'crc32-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4800) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000340)=0x4) socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005680)={0x0, 0x989680}) 11:33:47 executing program 5: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="94", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)='*', 0x1}, {&(0x7f0000000980)='h', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)='9', 0x1}, {&(0x7f0000000b00)="9a", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000001f40)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000e40)='r', 0x1}, {&(0x7f0000000ec0)="d7", 0x1}, {&(0x7f0000000f40)="b68fd6609dd93c3fe01b7d3400b63ffb3e1bc0ea7f735cb6298f84d1b442f0fa17567e0f52de7793e993c9447a57636f1384683126412f3b2119453a55db976b683841c55f2173ce350ad5a432f28c64e1cb4d21e5418d8515c443cde744840feb6ae470e65d6432bc4d3b2d0bdb0a4fb487878e29f6c6dd0a4e7fa2e9555c166135d365783334d879088a974825f7b400bb96df10f4ea8120ff4d6c8d2fae6c1bcc8391667a0a8b940e343cbb50caa40e052c5d4d8c3dd52576eb0a9baae5e278", 0xc1}, {&(0x7f0000001040)='=', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000011c0)='L', 0x1}, {&(0x7f0000001200)="98", 0x1}, {&(0x7f0000001340)="da", 0x1}, {&(0x7f0000001400)='e', 0x1}, {&(0x7f0000001500)="f6", 0x1}, {&(0x7f0000001600)='Q', 0x1}, {&(0x7f0000001640)='a', 0x1}, {&(0x7f00000016c0)="f6", 0x1}], 0x8}}], 0x6, 0x4000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa5y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc9*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0(\x18\xe9\xef%nM\'\aF\xb7\x95\xcbm\x04\xa8\x05\xef@&\xc4') sendfile(r1, r2, 0x0, 0x80000003) 11:33:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x309, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000031000512d25a802a8c6394fb0124fc00104c0b400c000200053582c137153e370900018025646e040081", 0x2e}], 0x1, 0x0, 0x0, 0xe9610400}, 0x0) 11:33:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x62160555], 0x0, 0xc00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:33:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) [ 278.502341][ T9214] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 278.538268][ T9214] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 11:33:47 executing program 3: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0xfffffffffffffc88, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/5, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/29, 0x22}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f00000009c0)=""/217, 0xc9}], 0x29e, &(0x7f0000000940), 0x7, 0x0) getpgid(r1) r2 = getpid() process_vm_writev(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) r3 = getpid() process_vm_writev(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000080)=""/11, 0xb}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000500)=""/34, 0x20}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/201, 0xc9}], 0x6, &(0x7f0000000940)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000680)=""/87, 0xac}, {&(0x7f0000000700)=""/117, 0xfffffee0}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/220, 0xdc}], 0x7, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0xab, &(0x7f00000011c0), 0x327}}], 0x1, 0x44080) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0674155d3139926c99a252f6830315d017e1b7b308b1663207fef993e843c90500000000000002889177b3fdbbc0385c875760f22ce73f07e07b78f0b9c6877d4df38f674c55bd4700e0f12ac74dad448c1f38350700000051cb9b66a5f300"/104], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r6, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r6) ioctl$FICLONE(r5, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 11:33:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:33:48 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f0000000100)) sched_setscheduler(0x0, 0x5, 0x0) capget(&(0x7f0000000000), 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1) accept$alg(r2, 0x0, 0x0) 11:33:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) 11:33:48 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0xb4a, 0x1f4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6", 0x2d, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x3, 0x800000000, 0x0, 0xff, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:33:48 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0xb4a, 0x1f4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$dmmidi(0x0, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x62160555, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 279.163330][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 279.213330][ T9232] kvm: pic: non byte write 11:33:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) [ 279.307891][ T9232] kvm: pic: non byte write [ 279.338034][ T9232] kvm: pic: non byte write [ 279.371595][ T9232] kvm: pic: non byte write [ 279.402191][ T9232] kvm: pic: non byte write [ 279.429009][ T9232] kvm: pic: non byte write [ 279.470468][ T9232] kvm: pic: non byte write [ 279.497422][ T9232] kvm: pic: non byte write [ 279.523600][ T9232] kvm: pic: non byte write 11:33:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) [ 279.545282][ T9232] kvm: pic: non byte write 11:33:49 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x309, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000031000512d25a80648c6394fb0124fc00104c0b020c000200053582c137153e370900018025646e040081", 0x2e}], 0x1, 0x0, 0x0, 0xe9610400}, 0x0) 11:33:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) 11:33:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0xb4a, 0x1f4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67f79cb0c6f5", 0x2e, 0xc00c038, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x101040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x3, 0x800000000, 0x0, 0xff, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 279.987356][ T9271] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 280.027171][ T9271] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 11:33:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) 11:33:49 executing program 5: socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)) semop(0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0xffffffff}], 0x1) semop(0x0, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}, {0x0, 0x7f, 0x1000}], 0x2) 11:33:49 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffff6, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 282.156619][ T301] tipc: TX() has been purged, node left! 11:33:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$exfat(&(0x7f00000002c0)='exfat\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)={[{@gid={'gid'}}, {@allow_utime={'allow_utime'}}]}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 11:33:51 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000300)) readv(0xffffffffffffffff, 0x0, 0x0) 11:33:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x20) getdents64(r0, &(0x7f0000000200)=""/198, 0xc6) 11:33:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) 11:33:51 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x10401, 0x0) fdatasync(r0) 11:33:51 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x7) 11:33:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x309, &(0x7f0000000000)=[{&(0x7f0000000140)="2e00000031000512d25a80698c6394fb0124fc00104c0b400c000200053582c137153e370900018025646e040081", 0x2e}], 0x1, 0x0, 0x0, 0xe9610400}, 0x0) 11:33:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) [ 282.471263][ T9329] [EXFAT] trying to mount... [ 282.575724][ T9339] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 282.588258][ T9339] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 282.596871][ T9329] [EXFAT] ffsMountVol failed 11:33:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) mkdir(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 11:33:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10004d96}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 11:33:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) symlink(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file1\x00') setreuid(0x0, 0xee01) rename(&(0x7f00000004c0)='./file0/file1\x00', &(0x7f0000000500)='./file0/file1\x00') 11:33:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x4000) [ 283.830806][ T9353] : renamed from eql 11:33:53 executing program 1: 11:33:53 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'b%idge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pivot_root(0x0, 0x0) 11:33:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getflags(r0, 0x0) recvfrom$inet(r0, 0x0, 0x10000002c, 0x0, 0x0, 0x800e0054e) shutdown(r0, 0x0) 11:33:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) 11:33:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x538) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) [ 284.146284][ T9381] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 285.972009][ T9404] IPVS: ftp: loaded support on port[0] = 21 [ 286.126113][ T9404] chnl_net:caif_netlink_parms(): no params data found [ 286.162880][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.170825][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.179038][ T9404] device bridge_slave_0 entered promiscuous mode [ 286.187800][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.194914][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.202986][ T9404] device bridge_slave_1 entered promiscuous mode [ 286.222200][ T9404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.233651][ T9404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.253815][ T9404] team0: Port device team_slave_0 added [ 286.261899][ T9404] team0: Port device team_slave_1 added [ 286.318446][ T9404] device hsr_slave_0 entered promiscuous mode [ 286.366900][ T9404] device hsr_slave_1 entered promiscuous mode [ 286.406551][ T9404] debugfs: Directory 'hsr0' with parent '/' already present! [ 286.493943][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.501346][ T9404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.509236][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.516473][ T9404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.558620][ T9404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.573630][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.583591][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.593631][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.602495][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 286.617252][ T9404] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.630699][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.639149][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.646448][ T8944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.658187][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.669503][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.676647][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.699872][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.708643][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.717577][ T8944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.807116][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.815672][ T3111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.827665][ T9404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.845262][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.854902][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.868711][ T9404] 8021q: adding VLAN 0 to HW filter on device batadv0 11:33:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4f2080, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00e696"], 0x3) fallocate(r1, 0x3, 0x0, 0x8020003) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r1, 0x0, 0x3) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r3, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, r1, 0x0, 0xa, &(0x7f00000001c0)='/dev/ptmx\x00', r4}, 0x30) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) fallocate(r5, 0x3, 0x0, 0x8020003) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x3) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x800002, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="00e696"], 0x3) fallocate(r6, 0x3, 0x0, 0x8020003) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r6, 0x0, 0x3) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="00e6"], 0x2) fallocate(r7, 0x3, 0x0, 0x8020003) writev(r7, &(0x7f0000000380)=[{0x0}], 0x1) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_elf64(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="00e696"], 0x3) fallocate(r8, 0x3, 0x0, 0x8020003) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, 0x0) write$binfmt_elf64(r9, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 11:33:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) waitid(0x83b895581628fca4, 0x0, 0x0, 0x20000000, &(0x7f0000000480)) dup2(0xffffffffffffffff, 0xffffffffffffffff) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x2, 0x0, {0x0, 0x7}}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r3 = dup3(r0, r1, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x4d8100, 0xcae0df70d8499867) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x0, 0x9, 0x3, 0x40, 0xffffffffffffffff, 0x100, [], 0x0, r5, 0x1, 0x2}, 0x3c) setreuid(0x0, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r6, &(0x7f0000000d00), 0x400004e, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000002b00)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r3, r2) 11:33:56 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4e200, 0x0) pipe(0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffa7) 11:33:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x2, 0x1}) 11:33:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x5af4c977b55a8b9c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2454384e861c9217, 0x7, 0x0, 0x1000, &(0x7f000000e000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:33:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}]) [ 286.990900][ T301] device bridge_slave_1 left promiscuous mode [ 286.996820][ T9414] EXT4-fs warning (device sda1): ext4_group_extend:1748: can't shrink FS - resize aborted [ 287.005044][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.082187][ T301] device bridge_slave_0 left promiscuous mode [ 287.126801][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.131090][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 287.131150][ T26] audit: type=1800 audit(1574595236.415:31): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16604 res=0 [ 287.161711][ T26] audit: type=1804 audit(1574595236.435:32): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir918833265/syzkaller.CTnFfT/13/file0" dev="sda1" ino=16604 res=1 [ 287.191416][ T26] audit: type=1800 audit(1574595236.435:33): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16604 res=0 [ 287.268312][ T9425] Dev loop0: unable to read RDB block 1 [ 287.288022][ T9426] ------------[ cut here ]------------ [ 287.293627][ T9426] WARNING: CPU: 1 PID: 9426 at lib/iov_iter.c:1162 iov_iter_pipe+0x25b/0x2f0 [ 287.302441][ T9426] Kernel panic - not syncing: panic_on_warn set ... [ 287.309332][ T9426] CPU: 1 PID: 9426 Comm: syz-executor.5 Not tainted 5.4.0-rc8-next-20191122-syzkaller #0 [ 287.319182][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.329266][ T9426] Call Trace: [ 287.329626][ T9425] loop0: unable to read partition table [ 287.338271][ T9426] dump_stack+0x197/0x210 [ 287.338296][ T9426] ? iov_iter_pipe+0x210/0x2f0 [ 287.338313][ T9426] panic+0x2e3/0x75c [ 287.338327][ T9426] ? add_taint.cold+0x16/0x16 [ 287.338352][ T9426] ? printk+0xba/0xed [ 287.338368][ T9426] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 287.338382][ T9426] ? __warn.cold+0x14/0x35 [ 287.338400][ T9426] ? iov_iter_pipe+0x25b/0x2f0 [ 287.338413][ T9426] __warn.cold+0x2f/0x35 [ 287.338426][ T9426] ? report_bug.cold+0x63/0xb2 [ 287.338440][ T9426] ? iov_iter_pipe+0x25b/0x2f0 [ 287.338455][ T9426] report_bug+0x289/0x300 [ 287.338475][ T9426] do_error_trap+0x11b/0x200 [ 287.338492][ T9426] do_invalid_op+0x37/0x50 [ 287.338505][ T9426] ? iov_iter_pipe+0x25b/0x2f0 [ 287.338550][ T9426] invalid_op+0x23/0x30 [ 287.338566][ T9426] RIP: 0010:iov_iter_pipe+0x25b/0x2f0 [ 287.338581][ T9426] Code: 83 c0 03 38 d0 7c 04 84 d2 75 33 44 89 63 24 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8c f6 2d fe 0f 0b e8 85 f6 2d fe <0f> 0b e9 53 fe ff ff 4c 89 f7 e8 96 82 6a fe e9 f5 fd ff ff e8 2c [ 287.338589][ T9426] RSP: 0018:ffff888052eb7988 EFLAGS: 00010216 [ 287.338601][ T9426] RAX: 0000000000040000 RBX: ffff888052eb7a18 RCX: ffffc900109ca000 [ 287.338610][ T9426] RDX: 000000000001f196 RSI: ffffffff8345fd4b RDI: 0000000000000004 [ 287.338618][ T9426] RBP: ffff888052eb79c0 R08: ffff888052eec480 R09: 0000000000000000 [ 287.338628][ T9426] R10: fffffbfff139e730 R11: ffffffff89cf3987 R12: ffff8880a583ac00 [ 287.338636][ T9426] R13: 0000000000000010 R14: ffff8880a583acc8 R15: ffff8880a583acd0 [ 287.338659][ T9426] ? iov_iter_pipe+0x25b/0x2f0 [ 287.338677][ T9426] ? iov_iter_pipe+0x25b/0x2f0 [ 287.338699][ T9426] generic_file_splice_read+0xa7/0x800 [ 287.338714][ T9426] ? fsnotify_first_mark+0x210/0x210 [ 287.338729][ T9426] ? add_to_pipe+0x350/0x350 [ 287.338802][ T9426] ? security_file_permission+0x8f/0x380 [ 287.338824][ T9426] ? rw_verify_area+0x126/0x360 [ 287.338838][ T9426] ? add_to_pipe+0x350/0x350 [ 287.338854][ T9426] do_splice_to+0x127/0x180 [ 287.338881][ T9426] splice_direct_to_actor+0x2d3/0x970 [ 287.368217][ T9425] loop0: partition table beyond EOD, truncated [ 287.370690][ T9426] ? generic_pipe_buf_nosteal+0x10/0x10 [ 287.370713][ T9426] ? do_splice_to+0x180/0x180 [ 287.370734][ T9426] ? rw_verify_area+0x126/0x360 [ 287.370761][ T9426] do_splice_direct+0x1da/0x2a0 [ 287.442905][ T9425] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 287.443718][ T9426] ? splice_direct_to_actor+0x970/0x970 [ 287.443744][ T9426] ? rcu_read_lock_any_held+0xcd/0xf0 [ 287.580287][ T9426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.586719][ T9426] ? __this_cpu_preempt_check+0x35/0x190 [ 287.592386][ T9426] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.598667][ T9426] ? __sb_start_write+0x1e5/0x460 [ 287.603729][ T9426] do_sendfile+0x597/0xd00 [ 287.608340][ T9426] ? do_compat_pwritev64+0x1c0/0x1c0 [ 287.613645][ T9426] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.620817][ T9426] ? put_timespec64+0xda/0x140 [ 287.625610][ T9426] __x64_sys_sendfile64+0x1dd/0x220 [ 287.630837][ T9426] ? __ia32_sys_sendfile+0x230/0x230 [ 287.636230][ T9426] ? do_syscall_64+0x26/0x790 [ 287.640934][ T9426] ? lockdep_hardirqs_on+0x421/0x5e0 [ 287.646331][ T9426] ? trace_hardirqs_on+0x67/0x240 [ 287.651470][ T9426] do_syscall_64+0xfa/0x790 [ 287.656001][ T9426] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.661931][ T9426] RIP: 0033:0x45a639 [ 287.666010][ T9426] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.685808][ T9426] RSP: 002b:00007f4d120e5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 287.694244][ T9426] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 287.702326][ T9426] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 287.710320][ T9426] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.718305][ T9426] R10: 000000007fffffa7 R11: 0000000000000246 R12: 00007f4d120e66d4 [ 287.726290][ T9426] R13: 00000000004c85aa R14: 00000000004dec38 R15: 00000000ffffffff [ 287.736070][ T9426] Kernel Offset: disabled [ 287.740526][ T9426] Rebooting in 86400 seconds..