[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 38.650316] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.057351] random: sshd: uninitialized urandom read (32 bytes read) [ 42.416408] random: sshd: uninitialized urandom read (32 bytes read) [ 43.511770] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. [ 49.277613] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/27 13:52:18 fuzzer started [ 50.710380] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/27 13:52:21 dialing manager at 10.128.0.26:41751 2018/08/27 13:52:23 syscalls: 1 2018/08/27 13:52:23 code coverage: enabled 2018/08/27 13:52:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/27 13:52:23 setuid sandbox: enabled 2018/08/27 13:52:23 namespace sandbox: enabled 2018/08/27 13:52:23 fault injection: enabled 2018/08/27 13:52:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/27 13:52:23 net packed injection: enabled 2018/08/27 13:52:23 net device setup: enabled [ 56.199637] random: crng init done 13:54:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) keyctl$clear(0x7, r0) 13:54:20 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, &(0x7f0000000240)) 13:54:20 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000100)=0x54) keyctl$clear(0x7, r0) 13:54:20 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r0, &(0x7f0000004040)=[{&(0x7f0000002dc0)="81", 0x1}], 0x1, 0x0) 13:54:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="cd949e0c5b7b787e249f7c34063b7ec5516b843f747d8dc75ca669e2c9c46b6adf1b7baf2d072090f08ca464fcebef01c7bf13a7ba83016d5507f28aac56", 0x3e) 13:54:20 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 13:54:20 executing program 2: getsockname$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5421, &(0x7f00000002c0)) 13:54:20 executing program 3: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340), 0x0) keyctl$clear(0x7, r0) [ 172.544876] IPVS: ftp: loaded support on port[0] = 21 [ 172.545560] IPVS: ftp: loaded support on port[0] = 21 [ 172.632613] IPVS: ftp: loaded support on port[0] = 21 [ 172.641305] IPVS: ftp: loaded support on port[0] = 21 [ 172.643557] IPVS: ftp: loaded support on port[0] = 21 [ 172.666858] IPVS: ftp: loaded support on port[0] = 21 [ 172.695599] IPVS: ftp: loaded support on port[0] = 21 [ 172.717805] IPVS: ftp: loaded support on port[0] = 21 [ 176.154715] ip (4683) used greatest stack depth: 53928 bytes left [ 176.933286] ip (4731) used greatest stack depth: 53688 bytes left [ 177.280786] ip (4749) used greatest stack depth: 53432 bytes left [ 177.628323] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.634822] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.673990] device bridge_slave_0 entered promiscuous mode [ 177.732817] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.739319] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.788145] device bridge_slave_0 entered promiscuous mode [ 177.853612] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.860133] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.884905] device bridge_slave_0 entered promiscuous mode [ 177.912648] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.919116] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.940009] device bridge_slave_0 entered promiscuous mode [ 177.966566] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.973119] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.990568] device bridge_slave_0 entered promiscuous mode [ 178.022641] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.029110] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.052356] device bridge_slave_1 entered promiscuous mode [ 178.071312] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.077825] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.115438] device bridge_slave_0 entered promiscuous mode [ 178.145721] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.152228] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.178890] device bridge_slave_0 entered promiscuous mode [ 178.194981] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.201464] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.239503] device bridge_slave_1 entered promiscuous mode [ 178.256239] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.262706] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.284103] device bridge_slave_1 entered promiscuous mode [ 178.315521] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.322091] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.329902] device bridge_slave_1 entered promiscuous mode [ 178.348418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.365834] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.372305] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.395606] device bridge_slave_1 entered promiscuous mode [ 178.409526] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.416131] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.444575] device bridge_slave_0 entered promiscuous mode [ 178.467331] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.473792] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.501287] device bridge_slave_1 entered promiscuous mode [ 178.524874] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.531382] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.543144] device bridge_slave_1 entered promiscuous mode [ 178.564494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.571907] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.589495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.598010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.668623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.712934] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.719419] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.779617] device bridge_slave_1 entered promiscuous mode [ 178.837239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.856201] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.871826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.883164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.899115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.940828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.079104] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.111424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.186839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.367577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.638013] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.739405] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.841609] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.909344] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.938025] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.957870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.041258] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.081513] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.100081] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.157071] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.243396] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.269481] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.281890] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.294295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.355591] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.370629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.422378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.429336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.446944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.458223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.533571] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.569286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.576266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.597310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.604280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.632382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.639325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.661666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.668647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.749709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.764012] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.771721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.826645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.833728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.878421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.885427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.908572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.915813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.984458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.991431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.015327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.026488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.046729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.053774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.194075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.201148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.385832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.392808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.580474] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.611370] team0: Port device team_slave_0 added [ 181.738217] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.765185] team0: Port device team_slave_0 added [ 181.800641] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.819428] team0: Port device team_slave_0 added [ 181.893260] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.917693] team0: Port device team_slave_0 added [ 181.950415] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.985883] team0: Port device team_slave_1 added [ 182.004786] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.021273] team0: Port device team_slave_0 added [ 182.060549] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.084238] team0: Port device team_slave_0 added [ 182.102082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.118562] team0: Port device team_slave_1 added [ 182.167311] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.186637] team0: Port device team_slave_1 added [ 182.194372] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.213553] team0: Port device team_slave_0 added [ 182.242956] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.280232] team0: Port device team_slave_1 added [ 182.316275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.327689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.341072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.379362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.386977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.398894] team0: Port device team_slave_1 added [ 182.424714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.447631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.501263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.513600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.523523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.551826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.564841] team0: Port device team_slave_1 added [ 182.580008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.592303] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.605189] team0: Port device team_slave_0 added [ 182.635092] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.655267] team0: Port device team_slave_1 added [ 182.672078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.708382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.739739] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.748948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.768731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.816370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.823746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.837279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.864571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.872234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 182.879804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 182.890697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.907674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.925612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.963541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.982682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.013293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.062703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.072254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.083538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.091267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.101841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.124248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.144324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.161326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.182495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.197620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.205007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.227323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.237120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.244764] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.255673] team0: Port device team_slave_1 added [ 183.269216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.285954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.310891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.343535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.359751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.382522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.399405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.422404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.435753] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.445697] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.455670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.465706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.480783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.502466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.526358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.557521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.595153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.615336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.630525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.648696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.672105] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.693417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.702834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.713855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.727195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.742555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.767909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.786408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.805720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.825067] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.833691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.853227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.877193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.884901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.893734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.903653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.925500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.933242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.944382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.967873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.999578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.047394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.054431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.084673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.167817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.175972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.189335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.376870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.384840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.402598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.510521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.517982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.538713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.661248] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.668698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.685714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.221603] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.228120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.235069] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.241526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.320678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.327289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.354190] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.360664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.367543] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.374056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.387396] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.395887] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.402349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.409243] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.415695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.427460] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.440717] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.447160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.454012] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.460552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.471607] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.491176] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.497620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.504455] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.510895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.541583] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.556266] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.562727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.569563] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.576021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.650119] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.118351] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.124844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.131699] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.138156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.211156] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.261783] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.268255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.275147] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.281585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.371637] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 188.386016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.415995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.451198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.472337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.483250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.491782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.501227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.932733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.129657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.220243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.607411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.676822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.767996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.836820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.125656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.194131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.372739] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.389563] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.809241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.896698] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.929201] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 202.034399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 202.295731] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 202.372149] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.378481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.397389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.566463] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.574390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.588192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.626198] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.636456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.650983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.945738] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.953260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.966997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.067600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.073853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.084567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.250667] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.256981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.274865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.381309] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.394440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.413247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.643626] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.649902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.662197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.701684] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.740890] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.156626] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.288388] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.374596] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.394837] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.641588] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.680806] 8021q: adding VLAN 0 to HW filter on device team0 13:55:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0xfffffffffffffd92) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 13:55:00 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) 13:55:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000001c0)={r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x7, @local, 0x5}}, 0x9, 0x5}, &(0x7f0000000340)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xfffffffffffffff9, 0xa, 0x5, 0x69519baf, r3}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000240)=""/236) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/dev/snd/controlC#\x00'}) recvmsg$kcm(r2, &(0x7f0000000940)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/97, 0x61}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/165, 0xa5}], 0x3, &(0x7f0000000840)=""/249, 0xf9, 0x200}, 0x2043) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000980)={@local, 0xe, r4}) 13:55:00 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x7, 0x5}, 0x2c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="3555c52bd2f25cae3bdbae8c347b76fe883b92630f7bd5718beaef4233dae8b46412a2f5f9448a2c74c70fd0b04f2dfe6a18bd1ae75f65ca1afb411234c806adbaf9ee6bbf843396256dd509b79780cb3ee0e3be322e1a9dc0ae7e774a7a949b15440a3f0a68b7dcb7b3b50a2d7df72ae82e5b4e2180a16a14b8523c72c10b0bad12fe1fff53751c9e3c956acaed24113f227e41b616f4a85b6fbcb626149ed67d0912bc9c9136cc2893173d8f84644dd2dd5cf43a547886258b5342924e45f0652fcdce49d9df8fd3b66cf708474313b1b7b52953a949b80fbd226c36", 0xdd, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000200)={{0x1f, 0x4}, {0x7, 0x101}, 0x0, 0x6, 0x8}) keyctl$invalidate(0x15, r2) ioctl(r1, 0x8, &(0x7f0000000280)="0a5cc80700315f85715070") socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000340)="9ce2f1aebaa038d54b8f5de1fb9cc6e55f034f2f8f4148ef51bfa17ff670aac783ebe981dc1a0d86214566c116fbcb8a2bd6b7b00a761025dd104a325b976b80efe932ab3edc1369245456e17b9c3d5155b04e55972a26e6aaca2dc727151e2dd0a6ced0a30180ffff80fcf388138ea94d9fdd546d09e970dd2542e5ddca0c5e4d1ec04417b0b97bc90b5f263f4ed0dccf231013b3ae92e0fbd65f9744934a961bf5b31f5ac9", &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x80000000, 0x1, 0x20000000, 0x0}, 0x51) 13:55:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x101000) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") getsockname(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000002c0)={0x6, {{0x2, 0x4e22, @broadcast}}, 0x0, 0x6, [{{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @rand_addr=0x29e3}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @rand_addr=0x8}}, {{0x2, 0x4e22, @multicast1}}]}, 0x390) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x2800001000000eb, &(0x7f00000000c0), &(0x7f0000000040)=0x4) 13:55:01 executing program 0: r0 = socket$packet(0x11, 0x400000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x44002) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000240)={0x9, 0x6, 0x7f, {r4, r5+10000000}, 0x8, 0xec03}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000100)=""/30) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000908000000000000000000000000c2a50da77f1ccdaab123dd125edb32ec39ddf4e96c7482aa67b05f", @ANYRES32=r1, @ANYBLOB="000000000000000014000300626f6e645f736c6176655f3000000000"], 0x34}}, 0x0) 13:55:01 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}, 0x90) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)}}, 0x20) 13:55:01 executing program 7: r0 = socket$inet6(0x10, 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001640)='/dev/midi#\x00', 0xa5dd, 0x48000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001680)=0x1, 0x2) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@nl=@kern={0x10, 0x7003}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="5500000018007f4500fe01b2a4a280930a600800ffa84302910000002d00050023000c000b0000000d000500fe8000000000c78b80082314e9030b9d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1, &(0x7f0000000080)}, 0x0) 13:55:01 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) chdir(&(0x7f0000000080)='./file0\x00') r1 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000001c0)) tkill(r1, 0x15) fcntl$setstatus(r0, 0x4, 0x42800) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0x1000) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ptrace$getsig(0x4202, r1, 0x6, &(0x7f0000000480)) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000240)=""/171, &(0x7f00000000c0)=0xab) io_setup(0x5, &(0x7f0000000140)=0x0) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000003c0)="3444daa2f418433e24e6", 0xa, 0x4, 0x0, 0x1, r2}, &(0x7f0000000440)) 13:55:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000040)={0x103, 0x29, 0x1, {0x1, [{{0x1, 0x3, 0x3}, 0x3, 0xdc3c, 0x7, './file0'}, {{0xa, 0x0, 0x2}, 0x4, 0x7fff, 0x7, './file0'}, {{0x85, 0x1, 0x8}, 0x589, 0x100000001, 0x7, './file0'}, {{0x20, 0x4, 0x4}, 0xc15d, 0x6, 0x7, './file0'}, {{0x1, 0x2, 0x1}, 0xb2, 0x4, 0x7, './file0'}, {{0x4, 0x0, 0x6}, 0x1, 0x401, 0x7, './file0'}, {{0xc0, 0x0, 0x7}, 0x9, 0x8, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0x100000001, 0x7fff, 0x7, './file0'}]}}, 0x103) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="24000000010407041dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 212.501920] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 13:55:01 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) r1 = semget$private(0x0, 0x3, 0x108) semctl$IPC_INFO(r1, 0x7, 0x3, &(0x7f0000000180)=""/244) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000002c7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/218, 0xda}], 0x1, &(0x7f0000000800)=""/155, 0x9b}}], 0x1, 0x0, &(0x7f0000002940)={0x0, 0x1c9c380}) getsockname(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) [ 212.552883] netlink: 9 bytes leftover after parsing attributes in process `syz-executor7'. [ 212.605207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 212.631662] netlink: 'syz-executor3': attribute type 3 has an invalid length. 13:55:01 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setfsuid(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x80000042801, 0x0) ioctl$int_in(r2, 0x800000c0045006, &(0x7f0000000200)=0x20) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x1) close(r2) [ 212.696236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 212.789387] netlink: 'syz-executor3': attribute type 3 has an invalid length. 13:55:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="8169fd", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f7d643d580c35b7f41a8510fa692dbb1a4176f04701c2089699eded3cf97fdbd6a6025683e5a88be6ff", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffffff6c, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000280)=""/69) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cdg\x00', 0x4) mount(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='nfsd\x00', 0x10002000, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000640)={{0xa, 0x7, 0x100000001, 0x6, 'syz1\x00', 0x100}, 0x2, 0x30, 0x1f, r3, 0x1, 0x0, 'syz1\x00', &(0x7f0000000600)=['cdg\x00'], 0x4, [], [0x7, 0x1f, 0x7ff, 0x7fff]}) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000440)={0x1f, 0x1, {0xffffffffffffffff, 0x0, 0x8, 0x2, 0x2}}) r4 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x8, 0x4000) r5 = getpid() write$FUSE_LK(r4, &(0x7f00000005c0)={0x28, 0x0, 0x8, {{0xff, 0x800, 0x0, r5}}}, 0x28) umount2(&(0x7f0000000400)='./file0\x00', 0x800000000a) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000001400c6da0000000b000000000066ce656d316e6f246576656d31000002000000000000f386616a1a0a3c0000000000002c0e0000000000619fcd3823b7c94f5a3276ce8c9461000000000000051c0005000000000079737465746a48be1b31486dcc6370757365746367726f757024a3d030914ce145fe700471595c"], 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 212.840851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 13:55:01 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0), 0xfffffe0e}]) 13:55:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x1, 0xb6, 0x4, 0x4, 0xb4, 0x80000001, 0x3ff, 0x8, 0x8000, 0x45c, 0xffff, 0x1d681b46, 0x3f, 0xffff, 0x3]}, &(0x7f00000001c0)=0x100) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000005c0)={{r5, r6+30000000}, {0x77359400}}, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@broadcast}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000016c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRES64, @ANYRES64=r2]]}) close(r3) r7 = getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl(r0, 0x6, &(0x7f00000006c0)="638b3701b7da96fe81e336cf87aaa07cf3e8c473009e3c904d8c") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x4, 0x9, 0x9eaa, 0xffffffffffffffff, 0x8ac42, r7}) close(r1) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) r8 = fcntl$getown(r0, 0x9) setsockopt$inet6_dccp_int(r3, 0x21, 0x1, &(0x7f0000000700)=0x2, 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={[], 0x3, 0x100000000, 0x1, 0x800, 0x100, r8}) 13:55:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008010, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) r2 = socket(0x11, 0x803, 0x300) socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) [ 213.055754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:55:02 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe2(&(0x7f0000000000), 0x4000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140), &(0x7f0000000200)=0xb0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:55:02 executing program 4: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0xff45) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x142) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 13:55:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x1, 0xb6, 0x4, 0x4, 0xb4, 0x80000001, 0x3ff, 0x8, 0x8000, 0x45c, 0xffff, 0x1d681b46, 0x3f, 0xffff, 0x3]}, &(0x7f00000001c0)=0x100) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000005c0)={{r5, r6+30000000}, {0x77359400}}, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000440)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in=@broadcast}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000016c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRES64, @ANYRES64=r2]]}) close(r3) r7 = getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl(r0, 0x6, &(0x7f00000006c0)="638b3701b7da96fe81e336cf87aaa07cf3e8c473009e3c904d8c") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x4, 0x9, 0x9eaa, 0xffffffffffffffff, 0x8ac42, r7}) close(r1) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) r8 = fcntl$getown(r0, 0x9) setsockopt$inet6_dccp_int(r3, 0x21, 0x1, &(0x7f0000000700)=0x2, 0x4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={[], 0x3, 0x100000000, 0x1, 0x800, 0x100, r8}) 13:55:02 executing program 6: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) unshare(0x8000400) r1 = dup(r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x80000001, 0x4) memfd_create(&(0x7f0000000000)='\x00', 0x2) shutdown(r0, 0x0) 13:55:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000d0607031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 13:55:02 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30}, 0x30) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x7, &(0x7f0000000380), &(0x7f0000000400)=0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r4 = accept4(r3, 0x0, &(0x7f00000000c0), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, &(0x7f00000002c0), 0x10000000000443) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/243, 0xf3}], 0x1) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x100000001, 0x40100) open(&(0x7f0000000340)='./file1\x00', 0x2, 0x110) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x8a) 13:55:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) io_submit(r1, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)}]) 13:55:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x2000000004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0x243d615c5e3e0811) 13:55:02 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1000) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000000)=0x2) [ 213.647964] netlink: 'syz-executor2': attribute type 1 has an invalid length. 13:55:02 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000840)="ab553fec94248c32e27d04000000288a", 0x10) [ 213.774836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:55:02 executing program 6: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000001000), 0x0, &(0x7f00002d4000)}, 0x0) 13:55:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00001000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)="73797a6b616c6c867200"}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x1000, &(0x7f0000000000)="9f433229f3bb88e7efaab6b9059a", &(0x7f0000000540)=""/4096, 0x7ff}, 0x28) close(0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x7, 0x9, 0x4}) socket$kcm(0x29, 0x2, 0x0) 13:55:03 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x40) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x84) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000b40)=@in6={0xa, 0x0, 0x0, @remote, 0x400}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000bc0)="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", 0x6b3}], 0x1}, 0x0) r2 = open(&(0x7f0000000780)='./file0\x00', 0x141046, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000800)={0x0, 0x0, 0x1f, 'queue0\x00'}) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x54, 0x87ff7) 13:55:03 executing program 1: 13:55:03 executing program 0: [ 214.227119] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:55:03 executing program 6: 13:55:03 executing program 2: 13:55:03 executing program 1: 13:55:03 executing program 7: 13:55:03 executing program 0: 13:55:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x2000000004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xf) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0x243d615c5e3e0811) 13:55:03 executing program 2: 13:55:03 executing program 1: [ 214.664810] hrtimer: interrupt took 32011 ns 13:55:03 executing program 6: 13:55:03 executing program 4: 13:55:03 executing program 7: 13:55:03 executing program 0: 13:55:04 executing program 1: 13:55:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000040)={0x2000000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 13:55:04 executing program 6: 13:55:04 executing program 2: 13:55:04 executing program 7: 13:55:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x2000000004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xf) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080), 0x4) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0x243d615c5e3e0811) 13:55:04 executing program 4: perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = accept$unix(r1, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) connect$unix(r0, &(0x7f00000001c0)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) write$binfmt_elf64(r2, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8afd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, [{}], "", [[], []]}, 0x278) 13:55:04 executing program 3: setrlimit(0x7, &(0x7f00000000c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') 13:55:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000840)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000080c0)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000380)=""/180, 0xb4}], 0x1, &(0x7f0000000140)=""/94, 0x5e}}], 0x1, 0x0, &(0x7f0000000080)) 13:55:04 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000500)=[@in={0x2, 0x4e20}, @in6={0xa, 0x5, 0x8, @loopback, 0x20}, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x3}]}, &(0x7f0000000740)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}, 0x80}}}, 0x84) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000980)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x2, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r2 = dup(r1) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$void(r1, 0x5451) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000007c0), 0xffffffffffffffba) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000a80)=""/183, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x7}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000580)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[]}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@broadcast}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r3 = open(&(0x7f0000000780)='./file0\x00', 0x141046, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000800)={0x0, 0x10000, 0x1f, 'queue0\x00'}) ftruncate(r3, 0x2007fff) sendfile(r2, r3, &(0x7f0000d83ff8)=0x54, 0x87ff7) 13:55:04 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(r0, &(0x7f0000000040)={0x2000000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 13:55:04 executing program 4: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="7175657565310000000000000000000000000100", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, "7175657565310000000000000000000000000100"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000002c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) write$sndseq(r0, &(0x7f00000001c0)=[{0xffff, 0x7fff, 0x1ff, 0xffffffff81b65110, @time={r3, r4+30000000}, {0x4, 0x800}, {0x5, 0x7}, @raw32={[0x0, 0x4]}}, {0x41, 0x0, 0x5, 0x1, @time, {0x4000008, 0x651767d6}, {0x80000000001, 0x100000001}, @time=@tick=0x1}, {0x9, 0x100000001, 0x7fffffff, 0x8, @tick=0x8, {0xfffffffffffffffc, 0x500000000}, {0x7, 0x40}, @addr={0x7cd2, 0x2}}, {0x63, 0x0, 0x6, 0x1, @time={r5, r6+30000000}, {0x8, 0x20}, {0xcc23, 0x9}, @quote={{0x10001, 0x6}, 0x8, &(0x7f0000000100)={0x0, 0x100, 0x80000001, 0x7, @time={0x77359400}, {0x7ec3, 0x1}, {0x1, 0x200}, @connect={{0x4, 0x5}, {0x7, 0xd20}}}}}, {0x3fe000, 0x6, 0x7fffffff, 0x3, @time={r7, r8+30000000}, {0x6, 0xffff}, {0x93fd, 0xff}, @note={0x7, 0x1, 0x5, 0x1, 0x4b}}], 0xf0) 13:55:04 executing program 7: unshare(0x2000002000402) 13:55:04 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x0, 0x8}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 215.598359] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:55:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xffffffff00000000, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x40000) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000001c0)=""/130) move_pages(0x0, 0x215d, &(0x7f0000000080)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x0) 13:55:04 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101040) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x5}, &(0x7f0000000280)=0x90) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000c0, 0x20000470, 0x200006f8], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[{}, {0x0, '\x00', 0x3}, {0x0, '\x00', 0x4}]}, 0x108) 13:55:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x6]}) 13:55:04 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000004f40)={r2, 0x0, 0x7, 0x7, 0x80000000}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) recvmmsg(r0, &(0x7f0000004840)=[{{&(0x7f0000000300), 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/66, 0x42}], 0x2, &(0x7f0000000500)=""/175, 0xaf, 0x1}, 0x4}, {{&(0x7f00000005c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/112, 0x70}, {&(0x7f00000006c0)=""/125, 0x7d}], 0x2, &(0x7f0000000780)=""/79, 0x4f, 0xa30000000000}, 0x2}, {{&(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/79, 0x4f}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000980)=""/226, 0xe2}, {&(0x7f0000000a80)=""/87, 0x57}], 0x4}, 0x2}, {{&(0x7f0000000b40)=@ax25, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000000c00)=""/245, 0xf5}], 0x2, &(0x7f0000000d40)=""/106, 0x6a, 0xd14}, 0x6}, {{&(0x7f0000000dc0)=@sco, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e40)=""/200, 0xc8}, {&(0x7f0000000f40)=""/206, 0xce}], 0x2, &(0x7f0000001080)=""/188, 0xbc, 0x4}, 0x5}, {{&(0x7f0000001140)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/91, 0x5b}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2, &(0x7f0000002280)=""/152, 0x98, 0x7e9c}, 0x4}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000002340)=""/123, 0x7b}, {&(0x7f00000023c0)=""/16, 0x10}, {&(0x7f0000002400)=""/27, 0x1b}, {&(0x7f0000002440)=""/133, 0x85}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x6, &(0x7f0000004580)=""/66, 0x42, 0xfffffffffffffffd}}, {{&(0x7f0000004600)=@ipx, 0x80, &(0x7f0000004700)=[{&(0x7f0000004680)=""/93, 0x5d}], 0x1, &(0x7f0000004740)=""/230, 0xe6, 0x80000000}, 0x7}], 0x8, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000006e40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000006f40)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000007540)={'gretap0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000007580)={@local, 0x0}, &(0x7f00000075c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000007600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000007640)=0x14) recvmsg(r1, &(0x7f0000008e80)={&(0x7f0000008c40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004d00)=""/55, 0x37}, {&(0x7f0000008d00)=""/194, 0xc2}], 0x25d, &(0x7f0000004cc0)=""/4, 0x4, 0x1}, 0x140) r11 = accept$packet(0xffffffffffffff9c, &(0x7f0000008ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008f00)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000009000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000009040)=0x14) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000004a80)='/dev/zero\x00', 0x4200, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r14, 0x400448c8, &(0x7f0000004b40)={r11, r2, 0x7, 0x40, &(0x7f0000004ac0)="9caa733c0271f3a8bfd3e77fb1b8a0e53a86ee1f1fdb20e8d2091093d919bddb1a46eccccb9afce46fd66ec8826f786496db4c4f43675d02984e72a878ddcd7c108bd8217cbc1eb3c63fedc1f58e4fb10ded4ec26429d11c704d", 0x1, 0x2, 0x5, 0x2, 0xe217, 0x9, 0x5, "958a84fd8f4f4319332b1176fd686bad1f1724a5b64901a5ff056788c45023886bebc68a05aae11156ce93d6f7525fbf4ac7985e449426c8381a446dd28526dcdce97edeb2f7a63af6faffaa0fb3190ab2b663b418c4050723c9316739e02a548a38f4cd691f3309e8bbbf9182456f764463e594054576d22327e9ed5b69119f574b1211594e8403b2387b45a66fedc1c4abaa68a56aa4b457405cca35e69f61"}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000009080)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000009180)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000009200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000009240)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009280)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000009380)=0xe8) r18 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x511000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r18, 0x0, 0x48a, &(0x7f0000004a40)={0x0, 0xfff, 0x1f}, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000004f00)={&(0x7f0000004c40), 0xc, &(0x7f0000004ec0)={&(0x7f0000004d40)={0x16c, 0x10, 0xf, 0x0, 0x70bd27, 0x5, {0xb, 0x0, 0x3}, [@typed={0xc, 0x4f, @u64=0x101}, @generic="08adc02b757e24398dd58bad2531affa5b2984edce9c7b940f57d2c34b2b9ee2d3d7ce5fcf91db6210123925d5687e1eeb454d91d02a12a76c20901200c155938406d971cb2e75939bf906b2fc1a7a", @generic="b6af99e928883951ed232fd48afb051384d3c5e3fd1ca8097e6d97ce6b19941b894d6870aca734601708c27b9bb9134d3145bc0e7192d16cc094592ed0845aa20ef73ea5b6476352cd5b044e21a6380b0726e3ee3f13582230121350e69428b2eec08033dd5bafc1ac52273915a594d6426ccc70d75af2ba69", @generic="de0989986c7a8aa235e785dcb4628732567852083eba04ccdc1f2b7a93eb1a6ab3e57013f0ab9091503add70efd3e6abc421563419da679d508fa7483e9d16582464c7e67a3d3b005645b64af43e73641e71f0e97935fabbea3ef93929ee34983acc", @generic="102eb9f5716b26d6f6376dc643d4683ccbd3c90fa343c5762315a1f2f6", @nested={0x4, 0x94}]}, 0x16c}, 0x1, 0x0, 0x0, 0x14}, 0x20044010) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000009900)={&(0x7f0000000080), 0xc, &(0x7f00000098c0)={&(0x7f00000093c0)=ANY=[@ANYBLOB="f8040000", @ANYRES16=r3, @ANYBLOB="02082abd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000ffff40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=r6, @ANYBLOB="b800020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400810000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="a401020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000100800070000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r15, @ANYBLOB="ec01020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000101000008000600", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400080000000800070000000000"], 0x4f8}, 0x1, 0x0, 0x0, 0x48040}, 0x800) r19 = getpgrp(0x0) rt_sigqueueinfo(r19, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) 13:55:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x233, &(0x7f0000ffd000/0x3000)=nil, 0x6) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) 13:55:05 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) listen(r1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth0_to_team\x00') 13:55:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x380000000, 0x10000) poll(&(0x7f0000000300)=[{r1, 0x2004}], 0x1, 0x5b279141) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x5, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000280)) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000004c0)={0x2, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @loopback}, 0x140, 0x29795671, 0x1, 0xa4f, 0x6ea, &(0x7f0000000200)='veth1_to_bridge\x00', 0x200, 0x5, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x4, r3, 0x0, 0x0, 0x1}}, 0x20) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000340)=r4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000680)='/dev/snd/pcmC#D#p\x00', 0x0, 0x301) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @multicast2}, &(0x7f00000003c0)=0xc) write$P9_RWRITE(r5, &(0x7f00000006c0)={0xb}, 0xb) 13:55:05 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0x7543) 13:55:05 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.evm\x00', &(0x7f0000000100)='ppp0\x00', 0xfcd2, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xe2, 0x200000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4, 0x4, [0xffff, 0x4, 0x6, 0x8001]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x1, 0xae2a}, 0x8) rmdir(&(0x7f0000000040)='./file0\x00') 13:55:05 executing program 4: pkey_mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xc0d, 0x80400) tee(r0, r0, 0x9, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) write$evdev(r0, &(0x7f0000001fdc)=[{}, {{0x0, 0x2710}}], 0x0) 13:55:05 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x5, 0x101801) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x1}}, 0x1, 0x9, 0x2, 0x4, 0xffff}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x5, 0x1, 0x3, 0x1, 0x9}, &(0x7f00000001c0)=0x14) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000080)) 13:55:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) mprotect(&(0x7f00006e3000/0x3000)=nil, 0x3000, 0x1000002) ioctl$HDIO_GETGEO(r1, 0x1279, &(0x7f0000000100)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@dev}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000600)="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") sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a40100002400000029bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x10) 13:55:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="77b90e5eab5f50d8edd9950b8be2ef5a", 0x10) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000006c0)="126090ae9d9d4036de9b40905e4ae9cd5671f98c339b5b8608b6ede3f6df9ba05840b05a5b3c1c2e9c3db52eff0e6341323bdda26f69b0fa74549a5d184edf301fd39b62bf1c324dab20b37de9df355c8aff761679efead97d647c381d08ec7cf230eb0672edc9ecbe11f86cfbc30e3db3f0a10a22a9975c550a34ce67f5fb9a443153088b139275be0b", 0x8a, r1) r6 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000780)="d633b98f32fdcd2ab0d00ba8b5e38591e65be910c03c40114afed35e279d1751e0c08f403d1585de45fc1733fc9dbbc1ee3b68a876112df799bc2b4681fd6bbe54a6042c8ed7b01f60399b181cfce816385049520f7b887c64df47ece7ebfb0fd40524d1e8dce5f43530f05ef21e4306382747a39e217d9a3200b8f8029981191f6895099438807db90e79e0a9f9afb2be4731e55e6129003053bf811a37bfa015a636a937f9b3034fea6d97ee3814288fc01998db07a5c4dbe27be27bf594bac6e88e400dc8aa8fb203cae2a1dea0b9562eb1377ccc4e0c52d119249d3af3922a3d2ad2058531da8bb755b1cb02b3368c81", 0xfffffffffffffed3, 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000880)='blacklist\x00', &(0x7f00000008c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000900)='keyring\x00', r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001a40)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x5}, &(0x7f0000001b00)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001b40)={r8, @in6={{0xa, 0x4e24, 0x7, @remote}}}, 0x84) keyctl$dh_compute(0x17, &(0x7f0000000940)={r5, r6, r7}, &(0x7f0000000980)=""/4096, 0x1000, &(0x7f0000001a00)={&(0x7f0000001980)={'cryptd(crc32-pclmul)\x00'}, &(0x7f00000019c0)="22f8861a1c2b27426743c34af6f435338a3757d14b28b39ac8b753213d36627d", 0x20}) r9 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000200), &(0x7f0000000400)="c6d5628012c878af041c5f253ea192ee5cb7feae7b7383db89eb004ad68beee3a65f5ea5668ad773da48b5bc1b6953777996f63c8af1b00d779d57abddc0acbf0f093b5fd740356f921e14a53fb4a99aa1c09dae98ba699c87f6610a1b8ba2c68e1f7276dbbbf78e3b2f6444495fdd62abbbfaafc3bfe9cbb8af8edd32f2aa3a03", 0x81, 0xfffffffffffffffb) unshare(0x10000000) r10 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0), &(0x7f0000000280)='^', 0x1, r4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) r11 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100), &(0x7f0000000280), 0x23e, r1) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r10, r11, r9}, &(0x7f0000000600)=""/132, 0xfffffe63, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 13:55:05 executing program 7: r0 = socket$inet6(0xa, 0x1010000000003, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2002, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x4) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000080)={0x0, 0x0}) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff57) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/96, 0x60}], 0x1, &(0x7f0000000a80)=""/168, 0xa8}}], 0x1, 0x0, &(0x7f0000001080)) 13:55:05 executing program 3: r0 = dup(0xffffffffffffffff) getsockname(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000000)=0x80) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000180)={&(0x7f0000000580)=@delsa={0x28, 0x11, 0x401, 0x0, 0x0, {@in6=@mcast2, 0x0, 0x0, 0x6c}}, 0x28}, 0x8}, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7) 13:55:05 executing program 6: r0 = eventfd(0x1) ioctl$FICLONE(r0, 0x40049409, r0) io_setup(0x676, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}]) 13:55:05 executing program 0: r0 = socket(0x1e, 0x805, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x3f}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f0000000080)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000001340), 0x0, &(0x7f00006e9c68)}, 0x0) close(r0) 13:55:05 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x184d, 0x40402) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xfffffffffffffffc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000a40)=@nat={'nat\x00', 0x19, 0x4, 0x3c8, [0x20000400, 0x0, 0x0, 0x20000430, 0x20000828], 0x0, &(0x7f0000000040), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x11, 0xf9, 'ip6_vti0\x00', 'bcsf0\x00', 'veth1_to_bridge\x00', 'sit0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xf8, 0x260, 0x290, [@limit={'limit\x00', 0x20, {{0x9, 0x8000, 0x8, 0x0, 0x4, 0x10001}}}, @quota={'quota\x00', 0x18, {{0x1, 0x0, 0x100000000, 0x200}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:dmidecode_exec_t:s0\x00'}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'vlan0\x00', 'team0\x00', 'bond0\x00', 'veth0_to_team\x00', @link_local, [], @link_local, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@random="419817c2acb9"}}}}]}]}, 0x440) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000380)=0x13) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x0, 0x10, 0xaaf7, 'ip6_vti0\x00', 'syzkaller1\x00', 'bond_slave_1\x00', 'veth0_to_bridge\x00', @random="7f4e8e27c6fd", [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1b0) [ 217.041371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 217.068963] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 217.112651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 217.130133] kernel msg: ebtables bug: please report to author: Valid hook without chain 13:55:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000180)="a98ad9c78e9d8005da92f3052437dec56cc179df94fad782f4d2bb7e72db06a8c5", &(0x7f0000000700)=""/239, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ea5a9b9cd393fa51e3ffffff7f0400000000000000"]) 13:55:06 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r1 = memfd_create(&(0x7f0000000380)='#vmnet1nodevem1\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b0000007d0000000084000000000000000000000000000000000000000000000000000000000000000000000000000000000400757365722d007573657240626465769676626f786e65743065746831766d6e6574302178726f63657468314a40766d6e657431100023766d6e6574316e6f646576656d3100100023766d6e6574316e6f646576656d31000bfdc51c17298ab8cb7e4b5055b0"], 0x8b) 13:55:06 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r1}, 0x14) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000ee8312a4a403957061a44630da257d6f6e973d6d4750a5907e68851ee16f53ecc19fac388be40f5951b3091fe07e89b444c60172547862d9fff3726edf1096df6d1549495e022f26a46237adc646cdbf8fdd470eaa41db2c827a8b2e74f15534d526751f89efbf236fbdc3efc7d9cb0428c3bf11d71fe15174ed017dfa08212f666a16b71e5298dbc718615f1435ce099ebbd29b8605e457774d80b9c0686a964f55d6554314fdfc3c91a0c52ea8a26e66100bed80545b1f0dcfd83a6b0959bd695f074f96da08045e017ae3c12b3b5040ce8e00000000000000000000000000000000000000000000"], &(0x7f0000000240)=0xba) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r3, 0x7ff}, 0x8) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000300)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xee01, 0x0, 0xee00, 0xee00]) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0xfffffffffffffff5, 0x5, {{0x6, 0x0, 0xffffffff80000001, 0x8001, 0xc2, 0x10000000000, {0x3, 0x800, 0x2400, 0x452b, 0x400000000000000, 0x0, 0x1000, 0x80000000, 0x4, 0x0, 0x9, r4, r5, 0xfffffffffffffffe, 0x5161}}, {0x0, 0x2}}}, 0xa0) 13:55:06 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40400, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f00000012c0)="32727d95", 0x3) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x8) write$FUSE_ENTRY(r2, &(0x7f0000000240)={0x90}, 0x90) close(r0) 13:55:06 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000700)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000400)=0x0) waitid(0x1, r3, &(0x7f0000000440), 0x40000000, &(0x7f0000000480)) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xf) 13:55:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x2000000000004e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x9) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x8, 0xfffffffffffffffb, 0x4, 0x8001, 0x9, 0x401, 0x8, {0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x5, 0x5, 0x400, 0x4, 0x2}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r1, 0xce}, &(0x7f00000003c0)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000000080)) getsockopt(r0, 0x8, 0x4, &(0x7f00000000c0)=""/197, &(0x7f0000000000)=0xc5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in, 0xf401, 0x0, 0x0, 0x0, 0xd}, 0x98) [ 217.410286] sd 0:0:1:0: [sg0] tag#6948 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 217.419160] sd 0:0:1:0: [sg0] tag#6948 CDB: Play track relative(12), sa=0xa [ 217.426435] sd 0:0:1:0: [sg0] tag#6948 CDB[00]: a9 8a d9 c7 8e 9d 80 05 da 92 f3 05 24 37 de c5 [ 217.435411] sd 0:0:1:0: [sg0] tag#6948 CDB[10]: 6c c1 79 df 94 fa d7 82 f4 d2 bb 7e 72 db 06 a8 [ 217.444398] sd 0:0:1:0: [sg0] tag#6948 CDB[20]: c5 13:55:06 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x101, 0x8400) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x5}]}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x38, "13f51f41f0fecd479e5a7d6111c2a382875b1f9a9e866b8e90917a69e42a54ae20f89f5bbc506770dc7e748bd8a07ec6511ede3ac9dd0d68"}, &(0x7f00000003c0)=0x40) [ 217.652740] Unknown ioctl 21545 [ 217.668892] ================================================================== [ 217.676319] BUG: KMSAN: uninit-value in __se_sys_waitid+0x338/0xaa0 [ 217.682749] CPU: 1 PID: 6954 Comm: syz-executor5 Not tainted 4.18.0-rc8+ #34 [ 217.689958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.699327] Call Trace: [ 217.701971] dump_stack+0x17c/0x1c0 [ 217.705634] kmsan_report+0x188/0x2a0 [ 217.709475] kmsan_internal_check_memory+0x17e/0x1f0 [ 217.714606] ? kmsan_set_origin+0x93/0x150 [ 217.718881] kmsan_check_memory+0xb/0x10 [ 217.722990] __se_sys_waitid+0x338/0xaa0 [ 217.727089] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 217.732496] ? schedule+0x1e0/0x2d0 [ 217.736161] ? prepare_exit_to_usermode+0x13f/0x410 [ 217.741240] __x64_sys_waitid+0x15d/0x1b0 [ 217.745424] ? __wake_up_parent+0xb0/0xb0 [ 217.749616] do_syscall_64+0x15b/0x220 [ 217.753545] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 217.758751] RIP: 0033:0x457089 [ 217.761965] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.781508] RSP: 002b:00007f8beb227c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 217.784242] sd 0:0:1:0: [sg0] tag#6964 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 217.789246] RAX: ffffffffffffffda RBX: 00007f8beb2286d4 RCX: 0000000000457089 [ 217.789261] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000001 [ 217.789275] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 217.789289] R10: 0000000040000000 R11: 0000000000000246 R12: 00000000ffffffff [ 217.789304] R13: 00000000004d6e58 R14: 00000000004ca1b6 R15: 0000000000000000 [ 217.789330] [ 217.789355] Disabling lock debugging due to kernel taint [ 217.798139] sd 0:0:1:0: [sg0] tag#6964 CDB: Play track relative(12), sa=0xa [ 217.805296] Kernel panic - not syncing: panic_on_warn set ... [ 217.805296] [ 217.805320] CPU: 1 PID: 6954 Comm: syz-executor5 Tainted: G B 4.18.0-rc8+ #34 [ 217.805330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.805338] Call Trace: [ 217.805367] dump_stack+0x17c/0x1c0 [ 217.805396] panic+0x3c3/0x9a0 [ 217.805445] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 217.812793] sd 0:0:1:0: [sg0] tag#6964 CDB[00]: a9 8a d9 c7 8e 9d 80 05 da 92 f3 05 24 37 de c5 [ 217.819978] kmsan_report+0x29e/0x2a0 [ 217.820010] kmsan_internal_check_memory+0x17e/0x1f0 [ 217.820031] ? kmsan_set_origin+0x93/0x150 [ 217.820062] kmsan_check_memory+0xb/0x10 [ 217.820097] __se_sys_waitid+0x338/0xaa0 [ 217.827485] sd 0:0:1:0: [sg0] tag#6964 CDB[10]: 6c c1 79 df 94 fa d7 82 f4 d2 bb 7e 72 db 06 a8 [ 217.834645] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 217.834669] ? schedule+0x1e0/0x2d0 [ 217.834697] ? prepare_exit_to_usermode+0x13f/0x410 [ 217.834744] __x64_sys_waitid+0x15d/0x1b0 [ 217.836456] sd 0:0:1:0: [sg0] tag#6964 CDB[20]: c5 13:55:06 executing program 7: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='cgroup$}bdev-md5sum-:-@$mime_type,wlan0eth0{inodev/\'.\'\\\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x81, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x2}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, &(0x7f0000000000)={{0x7fffffff, 0x9}}) [ 217.841840] ? __wake_up_parent+0xb0/0xb0 [ 217.841860] do_syscall_64+0x15b/0x220 [ 217.841891] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 217.841907] RIP: 0033:0x457089 [ 217.841941] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 217.987918] RSP: 002b:00007f8beb227c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 217.995671] RAX: ffffffffffffffda RBX: 00007f8beb2286d4 RCX: 0000000000457089 [ 218.002969] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000001 [ 218.010259] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 218.017543] R10: 0000000040000000 R11: 0000000000000246 R12: 00000000ffffffff [ 218.024834] R13: 00000000004d6e58 R14: 00000000004ca1b6 R15: 0000000000000000 [ 218.032453] Dumping ftrace buffer: [ 218.035994] (ftrace buffer empty) [ 218.039713] Kernel Offset: disabled [ 218.043332] Rebooting in 86400 seconds..