[?25l[?1c7[ ok 8[?25h[?0c. [ 90.079397][ T32] audit: type=1800 audit(1576049711.126:25): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 90.111912][ T32] audit: type=1800 audit(1576049711.156:26): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 90.152652][ T32] audit: type=1800 audit(1576049711.186:27): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. 2019/12/11 07:35:23 fuzzer started 2019/12/11 07:35:27 dialing manager at 10.128.0.26:42787 2019/12/11 07:35:28 syscalls: 2514 2019/12/11 07:35:28 code coverage: enabled 2019/12/11 07:35:28 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/12/11 07:35:28 extra coverage: enabled 2019/12/11 07:35:28 setuid sandbox: enabled 2019/12/11 07:35:28 namespace sandbox: enabled 2019/12/11 07:35:28 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/11 07:35:28 fault injection: enabled 2019/12/11 07:35:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/11 07:35:28 net packet injection: enabled 2019/12/11 07:35:28 net device setup: enabled 2019/12/11 07:35:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/11 07:35:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:37:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f00000000c0)='\x00vwx\n!p\xdd7\xb8\rS\x12\xe5\xec\xc1\xd5\x95bBS\xd9\x97\xdf\xdd\x05\xf8Q5\x1c\x9f\xcc\xf0\x86ax\x86B\x194\x04', 0x0) syzkaller login: [ 227.186124][T12702] IPVS: ftp: loaded support on port[0] = 21 [ 227.331012][T12702] chnl_net:caif_netlink_parms(): no params data found [ 227.387550][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.394867][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.403751][T12702] device bridge_slave_0 entered promiscuous mode [ 227.413438][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.420701][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.429556][T12702] device bridge_slave_1 entered promiscuous mode [ 227.463031][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.476457][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.511564][T12702] team0: Port device team_slave_0 added [ 227.521139][T12702] team0: Port device team_slave_1 added [ 227.676708][T12702] device hsr_slave_0 entered promiscuous mode [ 227.812652][T12702] device hsr_slave_1 entered promiscuous mode [ 228.087931][T12702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.347147][T12702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.618606][T12702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.768422][T12702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.103281][T12702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.125483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.134774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.150693][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.168273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.178397][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.187752][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.195049][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.207065][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.231952][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.241365][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.250494][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.257879][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.266164][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.275508][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.285988][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.296235][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.306805][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.334611][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.345144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.355038][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.364515][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.395604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.404980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.421558][T12702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.451666][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.459831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.479775][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0 07:37:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f00000000c0)='\x00vwx\n!p\xdd7\xb8\rS\x12\xe5\xec\xc1\xd5\x95bBS\xd9\x97\xdf\xdd\x05\xf8Q5\x1c\x9f\xcc\xf0\x86ax\x86B\x194\x04', 0x0) 07:37:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f00000000c0)='\x00vwx\n!p\xdd7\xb8\rS\x12\xe5\xec\xc1\xd5\x95bBS\xd9\x97\xdf\xdd\x05\xf8Q5\x1c\x9f\xcc\xf0\x86ax\x86B\x194\x04', 0x0) 07:37:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f00000000c0)='\x00vwx\n!p\xdd7\xb8\rS\x12\xe5\xec\xc1\xd5\x95bBS\xd9\x97\xdf\xdd\x05\xf8Q5\x1c\x9f\xcc\xf0\x86ax\x86B\x194\x04', 0x0) 07:37:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) [ 230.305551][T12726] IPVS: ftp: loaded support on port[0] = 21 07:37:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x4]}, @in=@remote}}}, 0xb8}}, 0x0) [ 230.504811][T12726] chnl_net:caif_netlink_parms(): no params data found 07:37:31 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffeab, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60ffff00a8430008000c00060000f3180015e005000600000000dc1320d544070000000000059f06d20072660a4427957c2b6400"/85, 0x55}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 230.615615][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.623167][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.632115][T12726] device bridge_slave_0 entered promiscuous mode [ 230.648202][T12734] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 230.662931][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.670174][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.679505][T12726] device bridge_slave_1 entered promiscuous mode 07:37:31 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffeab, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60ffff00a8430008000c00060000f3180015e005000600000000dc1320d544070000000000059f06d20072660a4427957c2b6400"/85, 0x55}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 230.748144][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.786102][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.859101][T12738] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 230.871245][T12726] team0: Port device team_slave_0 added [ 230.881454][T12726] team0: Port device team_slave_1 added 07:37:32 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffeab, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60ffff00a8430008000c00060000f3180015e005000600000000dc1320d544070000000000059f06d20072660a4427957c2b6400"/85, 0x55}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 230.993331][T12726] device hsr_slave_0 entered promiscuous mode [ 231.023983][T12726] device hsr_slave_1 entered promiscuous mode [ 231.082718][T12726] debugfs: Directory 'hsr0' with parent '/' already present! [ 231.096810][T12741] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 07:37:32 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffeab, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60ffff00a8430008000c00060000f3180015e005000600000000dc1320d544070000000000059f06d20072660a4427957c2b6400"/85, 0x55}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 231.163666][T12726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.217630][T12726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.264358][T12726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.319713][T12726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.359427][T12744] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 231.400359][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.407690][T12726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.415600][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.423592][T12726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.460913][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.478764][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state 07:37:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:37:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 231.628875][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.687454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.696421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.712778][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.738085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.747761][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.756775][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.764034][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.813862][T12726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.824781][T12726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.842720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.852356][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.861381][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.868679][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.878618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.888779][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.898733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.908746][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.918541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.928514][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.938306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.947608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.957427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.966685][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.015431][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.037737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.048001][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.056680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.065313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 07:37:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:33 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:37:33 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:37:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:37:34 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xfdfffffd}, {0x80000006}]}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) 07:37:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:37:34 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x419}], 0x1}, 0x1) r2 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 07:37:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_QUERIER={0x8, 0x19, 0xfffffff9}]}}}]}, 0x3c}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000080)=0x2d) r4 = socket(0x11, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0xd3, 0x0) 07:37:34 executing program 1: r0 = socket(0x10, 0x80002, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)="ab272b00e6d4fc13cf43af576f8e1e205f40d6a2166d5cc785e295c8428659a85b8b93c577144ccaf72c9ac32a5bdc8dac86d34c243e6379c9dcb01060981f7ce0e383a045e4eca037e971918e525e277daeb76303d580ce9e5afe54e55eaef0b3f319b2d0ebb6129dc9eae17d1f08a4c14049287caf84ed120d73cc27a3b12f011226a92042ce45a425c5b87c8093280f7e3ddf82e6260533f2f13f8a794f66c24a77c2daaecc94d0a4962ec6773c7d264f4ea802", 0xb5) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x3, 0x0, 0xb, 0x1, 0x1ff}, 0x20) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140004000c061903000000800000008754c0fa02ca1a098eb8"], 0x19}, 0x1, 0x0, 0x0, 0x300040c5}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 07:37:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/39) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 07:37:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x1d, 0x10, 0x20, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x18568, 0x2092}}, 0x20}}, 0x20000000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x4}, 0x10) 07:37:34 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000240)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}}}, &(0x7f00000001c0)=0x84) 07:37:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5d10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_misc(r0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x58) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000340)='user\x00', &(0x7f00000003c0)={'z\x00'}, &(0x7f0000000200)="97edef7d6fe7c31f3b26313004b0a6c8474eb09f39c226a9864b65af4c82fc40b9d0499894eb", 0x26, 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="8700000004000006000000b5724e5560f05b193329c0f860f1ca1842cb2c2a0c2074e7d4116d16139d94a22754269941e040b205dc7ab4bc28274ce3a13065b08e6537f8b9280fce0bab1afd80148e93c6b3b5bc62f36e259467d23fb797410bb37c9cb87698e51c5f4eb9bc6a8484e03a4f7dce8cd096f30d6e39e93bebd9c0896a46335f38ae6ac228550be5019260470df687dc6d501e16f89b881200"]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='ns\x00') setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000300)={0xffffff83, 0x57f, 0x78c, 0x8d}, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/\xa2\xd6\x8b\x84\x0eI\x93\x8dm\x00', 0x67082, 0x0) ioctl$int_in(r4, 0x0, &(0x7f0000000000)) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x200000008002) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x7, 0x202c00) fcntl$dupfd(r0, 0xe09, r5) r6 = open(&(0x7f0000000680)='./file0\x00', 0x4000, 0x8) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)) poll(&(0x7f0000000000)=[{r8}], 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000480)='trusted.overlay.nlink\x00', &(0x7f0000000600)={'L-', 0xffff}, 0x28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000090000000000000000003ee8ffffff000000950000008cf10080"], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r9 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r9, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r9) r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r10, 0x0) r11 = add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r10) keyctl$link(0x8, r9, r11) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r9, 0x5a, 0x1000}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'poly1305-generic\x00'}}, &(0x7f0000000580)="6a03c0bc53f582048f7359c94a103e248002ec0db03a90292182e32a94eefc8e868ce1f15e0b93d0f56c432b142303847fb6a4fed9b5a57e7d810b676b81bebb14e2e7fd9978e6f8ba47ea5ba7a46e27352584a8b615217d09a6", &(0x7f0000000ac0)=""/4096) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x20000, 0x0) 07:37:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000240012000200080002000000f23204ab2e3dc323a359f3c93707619cab8e2a517f2fd8c9fb8d7c5f55064f7b14ba854cf3a2b6ea016c2dbc21c15305eba11ad8e936f50eda", @ANYRES32=0x0, @ANYBLOB="ebfe010000000000"], 0x44}}, 0x0) [ 233.925271][ C1] sd 0:0:1:0: [sg0] tag#992 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 233.935904][ C1] sd 0:0:1:0: [sg0] tag#992 CDB: Test Unit Ready [ 233.942492][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.952195][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.961900][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.973375][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.983049][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.992681][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.002360][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.012017][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.021643][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.031337][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.041024][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.051122][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.060765][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.070439][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.080179][ C1] sd 0:0:1:0: [sg0] tag#992 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.164703][ C0] sd 0:0:1:0: [sg0] tag#993 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 234.175261][ C0] sd 0:0:1:0: [sg0] tag#993 CDB: Test Unit Ready [ 234.181886][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.191499][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.201193][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.210907][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.220694][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.230353][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.240027][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.249730][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.259402][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.269074][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.278756][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.288419][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.298103][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.307770][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.317438][ C0] sd 0:0:1:0: [sg0] tag#993 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.340738][T12827] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 07:37:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000000000007abf189ae76e19aeecca312b57"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x78) 07:37:35 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@local}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 07:37:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r4, 0x1, 0x3, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0xfffffffc, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0xffffffffffffffc2}, 0x1, 0x0, 0x0, 0x1}, 0x0) 07:37:35 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@local}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 07:37:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a1e0ccae20000001379000025da3f0dc7ec6e26f7ff80000200000000000000765d7e5293f81a76e5cb8b77c2277b09c1453b21ba1cbb4547ef5faa8d1db9445dc9b767238e5d934b812ab4c9d6876c50570086c5e5225fa1eb31aa81c1c178d5460e32ccca65e2d54768c8739f8822f29629e8ebf032ff9fddc0c2cde2be9747898dc6d3"], 0xbb) syz_open_dev$swradio(0x0, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000400000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0x4}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)}, {0x0}, {&(0x7f0000000a00)="3068e03861b61de4552616b7f495e8c5da1f337d8932a1790920108b4834bdc5f3ceac3cd9a8f63b164ab28429819f8dd99ad41f706e77a8ff171ff0a766df8f46a73400c341968d9d8fdd0614d872fcbff173eb49b35f988d67dcad74fa0d99cc5f5f4cb99965bd28d32a02ee65acf3c7a22d6a25333c358ab4cc48c2b8", 0x7e}, {&(0x7f0000000ac0)="b8362676e09e1d8e927ffdfc2aa9825c065c8956b5fb5d47954f7c685dc802792ec2238e8c6d060b0602824aa52bd299601cc858914de292d66c39733b51494600715d7d8bdcaec1b3a7f5b4b8c681624f2203d319860652b5a24ad4ec2c8266a436754552695c1664f19a637388244b6abebf778a2068fad9946f3f5aeb942f36d4b57e0ba1ed6a2a23b9a668bdeb", 0x8f}], 0x4}, 0x10880) socket$inet(0x10, 0x3, 0xc) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0x326, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2000c0b1) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/37, 0x25) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23", 0x1f) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 234.899658][ C0] hrtimer: interrupt took 70702 ns [ 234.918568][ C0] sd 0:0:1:0: [sg0] tag#994 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 234.929111][ C0] sd 0:0:1:0: [sg0] tag#994 CDB: Test Unit Ready [ 234.935730][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.945397][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.955069][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.964847][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.974531][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.984243][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.993930][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.003637][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.013338][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.023494][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.033191][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.042884][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.052563][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.062277][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.071950][ C0] sd 0:0:1:0: [sg0] tag#994 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.140264][T12848] input: syz1 as /devices/virtual/input/input5 07:37:36 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x404e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@local}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 235.204504][T12850] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:37:36 executing program 1: userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000002000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3a090000000f0000"]}) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000280)=""/97) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8001, 0x0) ioctl$int_in(r1, 0x80000080045017, &(0x7f0000000040)) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 235.427468][ C1] sd 0:0:1:0: [sg0] tag#995 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 235.438006][ C1] sd 0:0:1:0: [sg0] tag#995 CDB: Test Unit Ready [ 235.444610][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.454316][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.463998][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.473687][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.473752][T12858] dns_resolver: Unsupported server list version (0) [ 235.483369][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.499632][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.509320][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07:37:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x5000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x8, 0x1, "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", 0x1f, 0x3, 0x7f, 0xb1, 0xc3, 0x4, 0x0, 0x1}, r2}}, 0x128) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000200)={0x1, 0x3, 0xffff, 0x2}) socketpair(0x41f2c5c8bb6e2edd, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000280)=0x1, 0x4) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f00000002c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)=""/146, &(0x7f00000003c0)=0x92) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000004c0)={r5, 0x2c0}, &(0x7f0000000500)=0x8) r6 = open(&(0x7f0000000540)='./file0\x00', 0x80000, 0x40) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f0000000680)={&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000005c0)=""/164, 0xa4}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)=0x0) prlimit64(r7, 0x7, &(0x7f0000000700)={0xffffffff00000000, 0xb01f}, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000740)={0x0, {0x3, 0x5}}) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='security.capability\x00', &(0x7f0000000880)=@v3={0x3000000, [{0xffff, 0x5}, {0x9, 0x4d2}], r8}, 0x18, 0x0) r9 = syz_open_dev$media(&(0x7f00000008c0)='/dev/media#\x00', 0x5, 0x20000) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000900)={{0x2, 0x4e22, @broadcast}, {0x1, @random="e2cfc0c57263"}, 0x50a7973b2115906e, {0x2, 0x4e22, @multicast1}, 'sit0\x00'}) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snapshot\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000009c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @mcast2, 0x9}, {0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}, 0x1}, r11, 0x7}}, 0x48) msgget(0x0, 0x42) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@ipv4={[], [], @empty}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000c40)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c80)={{{@in6=@mcast1, @in=@multicast2, 0x4e22, 0x3f, 0x4e20, 0x80, 0xa, 0x180, 0x80, 0x16, r12, r13}, {0x8, 0x7f, 0x1, 0x10001, 0x93, 0x4, 0x21, 0xa78}, {0x8000000000000, 0x8001, 0x7, 0xa14000}, 0x80000, 0x6e6bbe, 0x0, 0x0, 0x3, 0x3}, {{@in6=@remote, 0x4d6, 0xd4}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3502, 0x2, 0x1, 0x20, 0xb8c, 0x9a50, 0xffffffc1}}, 0xe8) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r14, 0xc0106426, &(0x7f0000000e00)={0x1, &(0x7f0000000dc0)=[{}]}) [ 235.519054][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.528745][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.538462][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.548171][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.557962][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.567685][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.577398][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 235.587158][ C1] sd 0:0:1:0: [sg0] tag#995 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 07:37:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x34}}, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x2, @empty}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffee7) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x1, r2}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x10) [ 235.640520][T12850] input: syz1 as /devices/virtual/input/input6 07:37:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a1e0ccae20000001379000025da3f0dc7ec6e26f7ff80000200000000000000765d7e5293f81a76e5cb8b77c2277b09c1453b21ba1cbb4547ef5faa8d1db9445dc9b767238e5d934b812ab4c9d6876c50570086c5e5225fa1eb31aa81c1c178d5460e32ccca65e2d54768c8739f8822f29629e8ebf032ff9fddc0c2cde2be9747898dc6d3"], 0xbb) syz_open_dev$swradio(0x0, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000400000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0x4}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)}, {0x0}, {&(0x7f0000000a00)="3068e03861b61de4552616b7f495e8c5da1f337d8932a1790920108b4834bdc5f3ceac3cd9a8f63b164ab28429819f8dd99ad41f706e77a8ff171ff0a766df8f46a73400c341968d9d8fdd0614d872fcbff173eb49b35f988d67dcad74fa0d99cc5f5f4cb99965bd28d32a02ee65acf3c7a22d6a25333c358ab4cc48c2b8", 0x7e}, {&(0x7f0000000ac0)="b8362676e09e1d8e927ffdfc2aa9825c065c8956b5fb5d47954f7c685dc802792ec2238e8c6d060b0602824aa52bd299601cc858914de292d66c39733b51494600715d7d8bdcaec1b3a7f5b4b8c681624f2203d319860652b5a24ad4ec2c8266a436754552695c1664f19a637388244b6abebf778a2068fad9946f3f5aeb942f36d4b57e0ba1ed6a2a23b9a668bdeb", 0x8f}], 0x4}, 0x10880) socket$inet(0x10, 0x3, 0xc) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0x326, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2000c0b1) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/37, 0x25) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23", 0x1f) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 07:37:37 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 236.000361][ C0] sd 0:0:1:0: [sg0] tag#996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 236.012195][ C0] sd 0:0:1:0: [sg0] tag#996 CDB: Test Unit Ready [ 236.018892][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.028675][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.038437][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.048648][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.058381][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.068648][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.078809][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.088513][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.098214][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.107895][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.114376][T12875] IPVS: ftp: loaded support on port[0] = 21 [ 236.117918][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.133407][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.143086][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.152765][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.162743][ C0] sd 0:0:1:0: [sg0] tag#996 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.250036][T12873] input: syz1 as /devices/virtual/input/input7 [ 236.529086][T12880] IPVS: ftp: loaded support on port[0] = 21 [ 236.821383][T12881] IPVS: ftp: loaded support on port[0] = 21 07:37:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a1e0ccae20000001379000025da3f0dc7ec6e26f7ff80000200000000000000765d7e5293f81a76e5cb8b77c2277b09c1453b21ba1cbb4547ef5faa8d1db9445dc9b767238e5d934b812ab4c9d6876c50570086c5e5225fa1eb31aa81c1c178d5460e32ccca65e2d54768c8739f8822f29629e8ebf032ff9fddc0c2cde2be9747898dc6d3"], 0xbb) syz_open_dev$swradio(0x0, 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000400000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0x4}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)}, {0x0}, {&(0x7f0000000a00)="3068e03861b61de4552616b7f495e8c5da1f337d8932a1790920108b4834bdc5f3ceac3cd9a8f63b164ab28429819f8dd99ad41f706e77a8ff171ff0a766df8f46a73400c341968d9d8fdd0614d872fcbff173eb49b35f988d67dcad74fa0d99cc5f5f4cb99965bd28d32a02ee65acf3c7a22d6a25333c358ab4cc48c2b8", 0x7e}, {&(0x7f0000000ac0)="b8362676e09e1d8e927ffdfc2aa9825c065c8956b5fb5d47954f7c685dc802792ec2238e8c6d060b0602824aa52bd299601cc858914de292d66c39733b51494600715d7d8bdcaec1b3a7f5b4b8c681624f2203d319860652b5a24ad4ec2c8266a436754552695c1664f19a637388244b6abebf778a2068fad9946f3f5aeb942f36d4b57e0ba1ed6a2a23b9a668bdeb", 0x8f}], 0x4}, 0x10880) socket$inet(0x10, 0x3, 0xc) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0x326, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2000c0b1) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/37, 0x25) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="515ce794263a049a27da90b58ce568fd6197eb1cdae13ba8df3ef6bd256b23", 0x1f) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 236.988857][ C0] sd 0:0:1:0: [sg0] tag#997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 236.999426][ C0] sd 0:0:1:0: [sg0] tag#997 CDB: Test Unit Ready [ 237.006039][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.015715][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.025693][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.041699][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.051651][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.061356][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.071104][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.080874][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.087838][T12880] chnl_net:caif_netlink_parms(): no params data found [ 237.090563][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.107142][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.116871][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.126577][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.136404][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.146111][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.155817][ C0] sd 0:0:1:0: [sg0] tag#997 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 237.193880][T12887] input: syz1 as /devices/virtual/input/input8 [ 237.206788][T12880] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.214770][T12880] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.223638][T12880] device bridge_slave_0 entered promiscuous mode [ 237.242722][T12880] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.249960][T12880] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.258976][T12880] device bridge_slave_1 entered promiscuous mode [ 237.299176][T12880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.333131][T12880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 07:37:38 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 237.373023][T12880] team0: Port device team_slave_0 added [ 237.383050][T12880] team0: Port device team_slave_1 added [ 237.442181][ T21] tipc: TX() has been purged, node left! [ 237.453588][T12880] device hsr_slave_0 entered promiscuous mode [ 237.483318][T12880] device hsr_slave_1 entered promiscuous mode [ 237.522075][T12880] debugfs: Directory 'hsr0' with parent '/' already present! 07:37:38 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 237.578577][T12893] IPVS: ftp: loaded support on port[0] = 21 [ 237.838920][T12898] IPVS: ftp: loaded support on port[0] = 21 [ 237.929872][T12880] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.959764][T12880] netdevsim netdevsim2 netdevsim1: renamed from eth1 07:37:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 238.650869][T12880] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.722857][T12880] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.812419][T12902] IPVS: ftp: loaded support on port[0] = 21 07:37:39 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 239.077205][T12906] IPVS: ftp: loaded support on port[0] = 21 07:37:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 239.958404][T12910] IPVS: ftp: loaded support on port[0] = 21 [ 240.036807][T12880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.093178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.104903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:37:41 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) [ 240.198708][T12880] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.268229][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.278187][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.287361][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.294831][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.383714][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.392852][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.402388][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.411376][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.418705][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.421403][T12914] IPVS: ftp: loaded support on port[0] = 21 [ 240.429040][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.442975][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.453293][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.463624][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.473338][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.483727][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.493861][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.503443][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.513038][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.522881][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.557547][T12880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.730000][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.825782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.835649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.847802][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 07:37:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x80000001}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:37:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="ed1f997d9f18ffb37810936be4d6fc22fbc10991b32a51"], 0xa) close(r2) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, 0x0) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa03, 0x0) r9 = userfaultfd(0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r9, 0xc028aa03, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRESDEC=r5, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYBLOB="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"], @ANYPTR=&(0x7f0000001400)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRESDEC=r6, @ANYRESOCT=0x0, @ANYBLOB="a028db3683ad36bd1c1b28446c86eb6ea7398889cb9173ccf6d21bedf732d79aef6d87fdf20992db874177378ac917e05958ddea31294c04e8e113d49ec667ac050ce5b356d59b6e3566206749449deb7cc6625f45", @ANYRES16], @ANYRESOCT, @ANYRESOCT=r7, @ANYPTR=&(0x7f0000001480)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR, @ANYRESHEX=r3, @ANYBLOB="71f2d9545db1e6c597473b0003d81397e8406a2dce9e9eb0d0351b113c1e0e48fc63bee7b14eebab6225ae2750e3baa02536fb0c3b8013c375f8abbf426bb2499e080a1cf63f0a0601c38fc41f795244f45d0680574a7fa37dfd34359b28124c749415270b8c7013ebc347ece1e20c6c165680693a79d613fd32f276dabf1b1ee92c47d051330589242a522d0eabb20fbe25f41c", @ANYBLOB="729b1234e5d8da35a84c8003275360078885cb0859d56650b828e6ff484c8e44fc19a4c7932676d9add33dde1f103da2eb24749262677a1c5cfea558f0d68369076316589ee3104598d6e56a89aacd27af4276f5e4c01b88a4a36a6e2d289d6949bc7d516d56d3506a06378c7dda5f7422fc115d7f06730c4f713b4809eeafa5741ab52e801a2ebf326d03b2c45385f8c86b", @ANYRES32=r9, @ANYRESOCT, @ANYPTR64], @ANYRESDEC=r2, @ANYRESDEC]], 0x26) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:37:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe80000000000000000f0000000000000000000000000000000000000000000000000000000000ca7ab5ebea190a1f7ac925691cc0e75d1c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x4}}, 0x0) 07:37:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() r7 = gettid() r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r10, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4, @tid=r7}, &(0x7f0000000200)) 07:37:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047f9, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) shutdown(r0, 0x1) [ 241.585879][ T21] tipc: TX() has been purged, node left! 07:37:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r9, 0x1}}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @broadcast}}) [ 241.732505][ T21] tipc: TX() has been purged, node left! 07:37:42 executing program 1: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @rand_addr="b0010077bbbcace979ed05ca3e0d4ea9", 0xfff}, @in6={0xa, 0x4e24, 0xe2a, @local, 0x3}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x7fff, @remote, 0x5460}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x74) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r2, 0x8020000) dup2(r1, r2) [ 241.882567][ T21] tipc: TX() has been purged, node left! 07:37:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x228) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x7}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/53, 0x35, 0x2041, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x616, 0x102901) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') read$char_usb(r5, &(0x7f00000001c0)=""/54, 0x36) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) 07:37:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r9, 0x1}}, 0x18) [ 242.012363][ T21] tipc: TX() has been purged, node left! [ 242.143523][ T21] tipc: TX() has been purged, node left! [ 242.153809][ T21] tipc: TX() has been purged, node left! 07:37:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) 07:37:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 07:37:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x280, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) [ 242.695508][T12965] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.709603][T12965] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x280, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) 07:37:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x280, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) [ 242.816857][T12968] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:43 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r7) 07:37:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) 07:37:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x228) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x7}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/53, 0x35, 0x2041, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x616, 0x102901) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') read$char_usb(r5, &(0x7f00000001c0)=""/54, 0x36) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) [ 243.213473][T12976] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:44 executing program 3: membarrier(0x20, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x8021, 0x3}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x81) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x144202, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)) sync_file_range(r0, 0x1, 0x8, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7ff, 0x20, 0xff, 0x401}]}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000200)=0x8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000280)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000300)={@remote, 0x76}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ppp\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) r8 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0xca, 0x0) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000400)={0x3}) r9 = dup(0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(r9, 0x2201, &(0x7f0000000440)=0x8) unlink(&(0x7f0000000480)='./file0\x00') r10 = eventfd(0x27) fcntl$getown(r10, 0x9) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d18, &(0x7f00000004c0)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='veth0_to_team\x00', 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) listen(r11, 0x10001) 07:37:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x280, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) 07:37:44 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() gettid() [ 243.647765][T12989] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x280, 0x0) [ 243.942623][T13000] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 07:37:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:45 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) gettid() [ 244.182621][T13007] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.207298][T13008] IPVS: ftp: loaded support on port[0] = 21 07:37:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x6a, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2, 0x300}, [@typed={0x4}]}, 0x18}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040a0}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700100001400200027bd7000fbdbdf25987ef7f7d047b8f8ffffff4e6135842540277d1dec14141a00000000008247f8050000001062c47c64ba124e46231aa1e414e212405833b45f0c2478c7fb4487f1fb67951cbb2cf49280e0df63dc9b3ad7613b6c900c8fa34625f53f554c3f278757b39ef8902308a1eab0536ea45ba2baa460be9b6935f0118ebb37ee6c58e82083382a1eda59fb25209e2a6b8b8ec699d6a264deb171305c67cec8c2163b89abec0139a62611f61155d12a95b7918eff36a5c25220f2038a8af0d1afa6fbf3ed8d2dee7471bdfde6e5db129e916049d0c1c2f4ae11c63306932734ee71", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="c06b6e000000000018010200637472286361737435290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008006000020f4024f09895c8176cf31e3fabeafe51ac2120c717a1757c9a9a9c182d24da209f6cd4251838ad88d575fa341dbb66c423ecee254e2504a87c4f59b9697e2187788cd6a59f16908e90b86b36f4d9553f81e97737af0bfe73d629b8069ed1b109561f3ec135500e53eab4c16ca9f51a063f8978af7abc4369b67bbfaa8bc83272aa3a74b5b989187cde92abb3f3a6901805a830c33b5f4ec53254420737cc8f90efb9fbada5f5cac1cfb3b1065015ad3d23dbf26012c6e3bb90ced04eecb3332f9e46bb28adb74af122a215ecc135b3608000b0003000000"], 0x170}, 0x1, 0x0, 0x0, 0x10001}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r6}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004048}, 0x28800) 07:37:45 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) [ 244.386726][T13011] team0: Device gre1 is of different type 07:37:45 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:45 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) r6 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) sched_getscheduler(r6) [ 244.641028][T13018] team0: Device gre1 is of different type 07:37:45 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:45 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000200)) [ 244.998854][T13008] chnl_net:caif_netlink_parms(): no params data found [ 245.060624][T13008] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.068369][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.077746][T13008] device bridge_slave_0 entered promiscuous mode [ 245.108946][T13008] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.116320][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.125466][T13008] device bridge_slave_1 entered promiscuous mode [ 245.162227][T13008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.176203][T13008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.210959][T13008] team0: Port device team_slave_0 added [ 245.226418][T13008] team0: Port device team_slave_1 added [ 245.347599][T13008] device hsr_slave_0 entered promiscuous mode [ 245.442815][T13008] device hsr_slave_1 entered promiscuous mode [ 245.482013][T13008] debugfs: Directory 'hsr0' with parent '/' already present! [ 245.540776][T13008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.639246][T13008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.720199][T13008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.848144][T13008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.009529][T13008] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.016853][T13008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.024883][T13008] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.032165][T13008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.049839][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.061467][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.166110][T13008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.192790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.201508][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.218426][T13008] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.235629][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.245495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.255600][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.263046][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.296914][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.306495][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.315456][T13002] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.322977][T13002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.383422][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.393665][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.403858][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.414261][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.423965][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.433935][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.443822][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.453373][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.462944][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.472329][T13002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.485293][T13008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.494142][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.530803][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.542004][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.565086][T13008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.654787][ T21] tipc: TX() has been purged, node left! [ 246.718691][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 246.718734][ T32] audit: type=1326 audit(1576049867.766:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13036 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d68a code=0x0 [ 247.514528][ T32] audit: type=1326 audit(1576049868.566:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13036 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d68a code=0x0 07:37:48 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000010003b0e27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000a127446fed7fde5544a72008087e911f4efb1066dd7a9dc45aa26acf767ee503d86013e34c7825fd60ec53a567d8fa7a238ba9fab4198064b46f3c27d89a2d3c597a85eb3685572a915d7bf3f82e5391cc2da046bae9d2cc64842c45f889b3072aaa5bb989a1923fa7c4aff71525baf5df2633e", @ANYRES32=0x6, @ANYBLOB="08001c00", @ANYRES32=r1], 0x30}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000040)={0x2, 0x1, 0x81}) 07:37:48 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) gettid() 07:37:48 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000000)=""/82, &(0x7f00000001c0)=0x52) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 247.702662][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 07:37:48 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) [ 247.754201][T13049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 07:37:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) close(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r8, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000000000d004129d0a1692bd2ab15c8d25ce70003000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) r10 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r9, r10) ioprio_get$uid(0x3, r9) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e23, 0x100, 0x4e23, 0xa2e, 0x2, 0x0, 0x20, 0x72, r8, r9}, {0xffffffffffffff8d, 0x7fff, 0x2, 0x6, 0x2a, 0x1, 0x5, 0x1f}, {0xa0, 0x4, 0x2, 0x1}, 0x33, 0x6e6bb9, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x8, 0x4d5, 0x33}, 0x2, @in, 0x3507, 0x0, 0x0, 0x5, 0x7fff, 0x8, 0x2}}, 0xe8) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) close(r11) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6}}, 0xe8) close(r12) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000d07000000001a0000000000000030b9234c66c92f3021356d493cf2c8fc3565698aeb203398ba8039dac2fdd5b0c2f2ef2f0c2dfd3fda509d8760af27c8f3aae5285c193f58d8", @ANYRES32, @ANYBLOB="0000000500280012000095010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) 07:37:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x3c0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x1, 0x1ff, 0x9], 0x1}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xeb62, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x0, r3}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r2, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000b0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syncfs(r5) 07:37:49 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:49 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024) [ 248.051282][T13058] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 248.143593][T13064] device bond_slave_1 entered promiscuous mode [ 248.255630][T13064] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:37:49 executing program 1: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:49 executing program 2: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@mcast1, r5}, 0x14) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 07:37:49 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r5, 0xc0345642, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 07:37:49 executing program 1: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x3c0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x1, 0x1ff, 0x9], 0x1}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xeb62, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x0, r3}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r2, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000b0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syncfs(r5) 07:37:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x3c0) syz_open_dev$admmidi(0x0, 0x1fc000000, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000500)={0x9, 0xd7, [0x1091, 0x1, 0x1ff, 0x9], 0x1}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xeb62, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x0, r3}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r2, 0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000b0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syncfs(r5) 07:37:49 executing program 1: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004ff", 0x2e}], 0x1}, 0x0) 07:37:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r4, 0x0, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x37e) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, 0x0) 07:37:50 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000006740)=[{{&(0x7f0000000040)={0x2, 0x0, @rand_addr=0x4}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000140)="0048006799fa7c4c32951b475dfe401b4c5318fb74d8d16868fbf12cb07ee07caf808a352a838ca00a112057305a3d555693691e98e0994c024d2435bc21d54b750000000000000000000000000000d404e9a56b4fd24c94f3e2b17e9fb91a52bd0c2d9514119d91db264d0c14f9f3ae629fc59093ca604cdf99e7919e5c44f559aa9ddc5f8bb600c1cc8081cd050d012e8a68c6c20ea58390191bff3f49aa4c3a05c68c3f6f9ec62789f69e0dbc83197daa5fd90d0f8b544ef60555bd0815d4467a8fea57bcc75379ada39253d509a594c7c89383431edcf9df27d907", 0xdd}], 0x1, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x84, 0x8, {0x0, @multicast2, @loopback}}}], 0x20}}], 0x2, 0x40940) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x80080) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x3, 0x4) 07:37:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 07:37:50 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x58, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x9, @loopback}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x101, @local, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0xff81, 0x0, 0x15b, 0x0, 0x5}, &(0x7f0000000200)=0x14) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x40000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r1, 0x7, 0x20}, &(0x7f00000002c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x3, 0x8e, [], 0x7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)=""/142}, &(0x7f0000000500)=0x78) connect$unix(r5, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(r5, &(0x7f00000005c0)='./file0\x00', 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000900)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000980)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000600)=[{0x20, 0x0, [0x0, 0xffff, 0x9, 0x6, 0xb7a, 0xf9f, 0x3, 0x8b, 0x8001, 0x7, 0x4, 0x7fffffff, 0x20, 0x8, 0x0, 0x401]}, {0x8, 0x0, [0xfffffffb, 0x7f, 0x3f, 0x1, 0x200, 0x1, 0x0, 0x0, 0x1, 0x5628, 0x6, 0x3f, 0x9, 0x7fff, 0x7, 0x7f]}, {0x2, 0x0, [0x9b13593, 0x80, 0x0, 0x9982, 0x8001, 0x0, 0x2, 0x1f, 0x200, 0xff, 0x9, 0x9c, 0x80000000, 0x800, 0x8, 0x5]}, {0x3a, 0x0, [0x800, 0x6, 0x4, 0x1, 0x5, 0x8000, 0x3, 0x6, 0x7fffffff, 0x0, 0x9, 0x1f, 0x1, 0x9, 0x6, 0x6]}, {0x1, 0x0, [0x7d00, 0x3, 0x7, 0x9f, 0x0, 0x80, 0x9, 0xec5, 0xfffffffd, 0x101, 0xa0, 0x45f, 0x1f, 0x2, 0x5, 0xd5f]}, {0x21, 0x0, [0xffffffff, 0x80000001, 0x4, 0x9, 0x7, 0x4, 0x81, 0x6, 0x3f, 0x8000, 0xaa, 0x6, 0x1ff, 0xa1, 0x10001, 0x7f]}, {0x18, 0x0, [0x0, 0x80, 0x8, 0x10000, 0x1, 0xbe8e8078, 0x3, 0x5, 0x5, 0x2, 0x8, 0x8, 0x7, 0x25, 0x0, 0x20]}, {0x0, 0x0, [0xffff0000, 0x8000, 0x7fff, 0x2, 0xff, 0x8, 0x9d6, 0x8, 0x7, 0x1, 0x9, 0x6, 0x0, 0x0, 0x1f]}, {0x4, 0x0, [0x1, 0xfff, 0x1, 0x7d94, 0x10001, 0x1, 0x6398ba3d, 0x40, 0x6, 0x24, 0x8000, 0x5, 0x5, 0x7, 0x6, 0x1]}, {0x7, 0x0, [0x80000001, 0x4, 0x1de9, 0x400, 0x80000001, 0x5, 0x2, 0xc7, 0x1ff, 0x7fff, 0x5, 0x80000000, 0xe8, 0x0, 0x733f32d5, 0x3ff]}], r6, 0x1, 0x1, 0x2d0}}, 0x20) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r7 = syz_open_dev$sndpcmp(&(0x7f00000009c0)='/dev/snd/pcmC#D#p\x00', 0x401, 0x10500) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000a00)=0x8) r8 = dup3(r5, r5, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000a40)={0x4, 0x8, 0xfa00, {r6, 0xb2}}, 0x10) r9 = socket(0xa77756dddf620353, 0x5, 0x4) getsockopt$inet_tcp_int(r9, 0x6, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) openat$vhci(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhci\x00', 0x40402) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/nvram\x00', 0x4, 0x0) ioctl$KVM_GET_IRQCHIP(r10, 0xc208ae62, &(0x7f0000000b80)={0x0, 0x0, @ioapic}) r11 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r11, 0xd, &(0x7f0000000c80)=""/150) r12 = socket(0xa, 0x1, 0x74) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000d40)={r4, 0xaa, "6436fe34ed3b06a657b6418eed405f78a495db7f30ef156e2197b116d8ecd8e356069efec24f5e7776b5ef0f613f6ea90d27942f22358f3cd682a4fcc6352b9a57b42086e6cd3041ec44c92eb7004464abcc8838793b61b776b2b69e0bdfbc9e5d9cd14285440f93bc8c106e643f388c2e8e543d623b5ffac9c0260ffb9bda32c4d50d084febf476033e86b9f70c940084090f9d77ad6a5dc4ae4a69d9f508304c05c00b2fff325f566d"}, &(0x7f0000000e00)=0xb2) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/autofs\x00', 0x2, 0x0) write$capi20_data(r13, &(0x7f0000000e80)={{0x10, 0x7, 0x83, 0x81, 0x52}, 0x3a, "a1f9956d21f604d3fc5d083117fb2500f9051d278e5ea7d6d669165114401f12b9a23028aa7d350c3792086f04b42f553238db6fea2e9eff3f2d"}, 0x4c) getpeername(r8, &(0x7f0000000f00)=@nfc, &(0x7f0000000f80)=0x80) 07:37:50 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc2bbf05c307856b1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 07:37:50 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000380)="88e28536539e76a3bc42a145cf700dc5cbff66a238cedaaa75d3273d0275333ce2a7aaff90a28da2156f12ac50fadfa60d", 0x0}, 0x20) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x6a, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2, 0x300}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x40) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) io_submit(r1, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 07:37:50 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r4, 0x0, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, 0x0, 0x37e) [ 249.440829][T13111] IPVS: ftp: loaded support on port[0] = 21 07:37:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 07:37:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 249.792775][T13119] IPVS: ftp: loaded support on port[0] = 21 07:37:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 07:37:51 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x321d80, 0x0) unshare(0x4000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = fcntl$dupfd(r1, 0xc0a, r0) r3 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x1ff, 0xcf5f6616a41ad25b) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000000c0)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r4, 0xc0a, r2) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000100)={0x3, [0xd5d7, 0xf927, 0x5]}, 0xa) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x18) [ 249.933281][T13130] IPVS: ftp: loaded support on port[0] = 21 07:37:51 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc2bbf05c307856b1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 07:37:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) ioctl$int_out(r4, 0x0, 0x0) [ 250.250462][T13143] IPVS: ftp: loaded support on port[0] = 21 [ 250.332260][T13130] chnl_net:caif_netlink_parms(): no params data found [ 250.417718][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.425091][T13130] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.434083][T13130] device bridge_slave_0 entered promiscuous mode [ 250.479287][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.487095][T13130] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.525650][T13130] device bridge_slave_1 entered promiscuous mode [ 250.594174][T13130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.629829][T13130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.685770][T13130] team0: Port device team_slave_0 added [ 250.717128][T13130] team0: Port device team_slave_1 added [ 250.897308][T13130] device hsr_slave_0 entered promiscuous mode [ 250.992829][T13130] device hsr_slave_1 entered promiscuous mode [ 251.153074][T13130] debugfs: Directory 'hsr0' with parent '/' already present! [ 251.218289][T13130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.331468][T13130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.477811][T13130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.688092][T13130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.062933][T13130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.087252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.097593][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.117326][T13130] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.139432][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.149373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.159683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.167039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.184507][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.194123][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.203887][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.213103][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.220444][ T4131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.242432][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.272701][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.283571][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.293663][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.324151][T13130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.335436][T13130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.349319][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.358555][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.368237][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.378578][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.388607][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.397990][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.407976][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.459777][T13130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.487017][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.495919][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.504567][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 07:37:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 07:37:53 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc2bbf05c307856b1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:53 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) writev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) clock_adjtime(0x1, &(0x7f0000000200)={0x6, 0x71fd, 0xbb, 0x4, 0x2, 0xfffffffeffffffff, 0xfff, 0xff, 0xe708, 0x7, 0x4, 0x2, 0x81, 0x7ff, 0x6, 0x6, 0x5, 0x4, 0x2, 0x401, 0x7, 0x7, 0xfc2, 0xe7, 0x1, 0x4995}) recvfrom(r0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x1ba) socket$bt_bnep(0x1f, 0x3, 0x4) 07:37:53 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000006100)='/dev/audio#\x00', 0x191, 0x0) 07:37:53 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc2bbf05c307856b1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) [ 252.932371][T13173] IPVS: ftp: loaded support on port[0] = 21 [ 252.936614][T13172] IPVS: ftp: loaded support on port[0] = 21 07:37:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 07:37:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 07:37:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$netlink(0x10, 0x3, 0x0) 07:37:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000280)={0xbe, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @local}}}, 0x108) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2b7, 0x0, [], [{}, {0x4000ffffffff}], [[]]}) 07:37:54 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc2bbf05c307856b1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 07:37:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) [ 253.531738][T13199] IPVS: ftp: loaded support on port[0] = 21 07:37:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 07:37:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0xfffffffffffffdd8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r0) 07:37:54 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000000)={0x80000000}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r3, 0x10001) close(r0) 07:37:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 07:37:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x80000000}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpriority(0x0, r2, 0x10001) 07:37:55 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc2bbf05c307856b1, 0x12, r1, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r3, 0x40047452, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) 07:37:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)}], 0x1}, 0x0) [ 254.143556][T13226] IPVS: ftp: loaded support on port[0] = 21 07:37:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x80000000}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) 07:37:55 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x800, 0x0) read(r0, &(0x7f0000000040)=""/20, 0x14) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trust\x00gi\x00\x01\x00', &(0x7f0000000100)='y\x00', 0xfffffffffffffdf0, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fremovexattr(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="73650002110074792e7900"]) 07:37:55 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)}], 0x1}, 0x0) 07:37:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x80000000}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 254.604209][T13243] IPVS: ftp: loaded support on port[0] = 21 07:37:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)}], 0x1}, 0x0) 07:37:55 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:37:55 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0\x05\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\vK$\xd7\x86,5f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) r12 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x4000) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x7, 0x4, 0x0, 0x7fff}]}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000180)=0x8, 0x4) 07:37:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a0000", 0x17}], 0x1}, 0x0) 07:37:56 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x80000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) [ 255.194579][T13274] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 255.203558][T13274] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 255.212658][T13274] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 255.221262][T13274] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 255.229524][T13274] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 255.231155][T13275] IPVS: ftp: loaded support on port[0] = 21 07:37:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a0000", 0x17}], 0x1}, 0x0) 07:37:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 255.237725][T13274] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 255.237743][T13274] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 255.237766][T13274] netlink: 'syz-executor.3': attribute type 15 has an invalid length. 07:37:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:37:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0", 0x23}], 0x1}, 0x0) [ 255.495742][T13276] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 255.504128][T13276] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 07:37:56 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0", 0x23}], 0x1}, 0x0) 07:37:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) r12 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x4000) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x7, 0x4, 0x0, 0x7fff}]}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000180)=0x8, 0x4) 07:37:56 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 255.876451][T13299] IPVS: ftp: loaded support on port[0] = 21 07:37:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0", 0x23}], 0x1}, 0x0) 07:37:57 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:37:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) r12 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x4000) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x7, 0x4, 0x0, 0x7fff}]}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000180)=0x8, 0x4) 07:37:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006", 0x29}], 0x1}, 0x0) 07:37:57 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:37:57 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:57 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, 0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10500, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x7b00, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000100)=""/180) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000200)={0x0, 0x1000, 0x3, &(0x7f00000001c0)=0xee8}) r2 = dup3(r0, r0, 0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x18, 0x18, {0xffffffff, @bearer=@l2={'ib', 0x3a, 'bond_slave_1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@buf={0xac, &(0x7f0000000380)="cdc8a1b40e76bd0bd305ddb780be503a41a8766bf70dff3ecd8a6beaba8c4acee5c00016a76d43a47930cfc1727b4d1e05a10734d989d54dff4afa72f5219f7df264aa7ff3f73bcb06f2fd80aa6241d4978cb8ab65ba1a8407c3683edb5be9bc4ca3beaec42e203a1dc5f8fdbe5e0827bafb167685d1a11cd1cf1d3831ad102b8b7c9ab548248533f166a0fa11f1b1b864cd3b67170564b9967d3bb6fdc5487ca3eb45f40959ef0d3e47ed7d"}) syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0xff, 0x664040) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x400000, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000500)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'tunl0\x00', 0x200}) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002680)={r6, 0x0, 0x25, 0x1000, &(0x7f0000000600)="0c15691a991d889cd97431a9b1b6d3b49f05133dfe8633617bf219ee8fc159bb98f4f16ae0", &(0x7f0000000640)=""/4096, 0x81, 0x0, 0x1000, 0x18, &(0x7f0000001640)="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", &(0x7f0000002640)="0cba95be7870725d3fe747faea1e368b29a2bb99f491e8eb"}, 0x40) r7 = creat(&(0x7f00000026c0)='./file0\x00', 0xa2) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002740)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000002900)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40000440}, 0xc, &(0x7f00000028c0)={&(0x7f0000002780)={0x124, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1e4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc521}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20008000}, 0x58bb2331cf2d75e1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000002940)=[@in6={0xa, 0x4e22, 0x100, @ipv4={[], [], @remote}, 0x5}], 0x1c) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002980)='/dev/dlm-monitor\x00', 0x4880, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f00000029c0)={0x1, "d8"}, 0x2) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a00)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002c40)={r10, 0xc0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=0x5, 0x0, 0x0, 0x0, &(0x7f0000002a80)={0x4, 0x1}, 0x0, 0x0, &(0x7f0000002ac0)={0x2, 0x4, 0x3, 0x4b}, &(0x7f0000002b00)=0x2640, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=0x1}}, 0x10) r11 = syz_open_dev$audion(&(0x7f0000002c80)='/dev/audio#\x00', 0x3, 0x200000) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000002cc0)={0x9, 0x11, 0x3, 0x3, "24fa79eef6ccbe1550dcc8d6cbb10c84aefd776b529a9f02982d8871533c7f0e"}) arch_prctl$ARCH_GET_CPUID(0x1011) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002d40)={&(0x7f0000002d00)='./file0\x00', 0x0, 0x8}, 0x10) preadv(r12, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/113, 0x71}, {&(0x7f0000002e00)=""/35, 0x23}, {&(0x7f0000002e40)=""/185, 0xb9}], 0x3, 0x1) 07:37:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006", 0x29}], 0x1}, 0x0) [ 256.479475][T13331] IPVS: ftp: loaded support on port[0] = 21 07:37:57 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x11}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:37:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) r12 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x4000) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x7, 0x4, 0x0, 0x7fff}]}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000000180)=0x8, 0x4) 07:37:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006", 0x29}], 0x1}, 0x0) 07:37:57 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) socket(0x10, 0x803, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:37:57 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x11}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 256.936339][T13352] IPVS: ftp: loaded support on port[0] = 21 07:37:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc0", 0x2c}], 0x1}, 0x0) 07:37:58 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x11}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:37:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) r12 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x4000) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x7, 0x4, 0x0, 0x7fff}]}) 07:37:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc0", 0x2c}], 0x1}, 0x0) 07:37:58 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 257.617636][T13376] IPVS: ftp: loaded support on port[0] = 21 [ 257.853652][T13376] chnl_net:caif_netlink_parms(): no params data found [ 257.945577][T13376] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.952864][T13376] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.961702][T13376] device bridge_slave_0 entered promiscuous mode [ 257.974011][T13376] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.981201][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.990320][T13376] device bridge_slave_1 entered promiscuous mode [ 258.026845][T13376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.043071][T13376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.081114][T13376] team0: Port device team_slave_0 added [ 258.091108][T13376] team0: Port device team_slave_1 added [ 258.179454][T13376] device hsr_slave_0 entered promiscuous mode [ 258.214625][T13376] device hsr_slave_1 entered promiscuous mode [ 258.253857][T13376] debugfs: Directory 'hsr0' with parent '/' already present! [ 258.311294][T13376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.367462][T13376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.429654][T13376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.470286][T13376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.545737][T13376] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.553210][T13376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.561298][T13376] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.568607][T13376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.704612][T13376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.723846][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.736378][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.745268][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.756053][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 258.774580][T13376] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.789313][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.798484][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.805726][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.820161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.830362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.839498][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.847257][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.862916][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.885092][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.895589][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.905205][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.915827][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.928456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.938674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.958879][T13376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.969795][T13376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.985235][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.994333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.003864][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.013930][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.030700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.050567][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.059192][ T3851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.077612][T13376] 8021q: adding VLAN 0 to HW filter on device batadv0 07:38:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc0", 0x2c}], 0x1}, 0x0) 07:38:00 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x101000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:38:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000800010000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:38:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7fffffff, 0x4000) 07:38:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000010000d07000000005eaae9170200000000000000d379dcc1f855141ce7ff19589083acd02535624995e9dee5a277c19fdbaf8f183d8c5a1d9892101bfc5c3bf91ad2708e749b1a855fcf6fafc537f55c13b42741b8d90897", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc0088d0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000003f80)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000004080)=0x1df) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000040c0)={@ipv4={[], [], @empty}, 0x26, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="3600000010000d070000000000000000000000901b9ac4f8935921781c992733f7ffffffffffffff407ce0e07c34a47dee652804c9a5a324d572d3b4c889c7bc01000229e435ab27ae89400626990b87215020d820a366dbd714267bbaa30044727d152e3a8bc051d04c0645b97e7e2babf866a4171bce8b20469a57e70899065501d9f5cc569a9a9332c805d64d4298d6df99c53fd85508a313c009b4607bcc402c3605ef531a8adb302f933b452e611df361a6fc045e61f3f082", @ANYRES32=r3, @ANYBLOB="fd0002000000"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@bridge_setlink={0x4c, 0x13, 0x2, 0x70bd2d, 0x4, {0x7, 0x0, 0x0, r3, 0x40000, 0x100}, [@IFLA_MTU={0x8, 0xe, 0x6f}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MTU={0x8, 0xe, 0x48000}, @IFLA_PROMISCUITY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1011}, 0x1000) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/vsock\x00', 0x101240, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0x10, &(0x7f00000017c0)={&(0x7f0000001780)=""/60, 0x3c, 0x0}}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0xfb) r12 = fcntl$dupfd(r11, 0x0, r11) getsockopt$inet_tcp_buf(r12, 0x6, 0xd, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x2, &(0x7f00000015c0)=@raw=[@jmp={0x5, 0x0, 0xd, 0x1, 0x3, 0x2, 0x10}, @call={0x85, 0x0, 0x0, 0x50}], &(0x7f0000001600)='GPL\x00', 0x4, 0x43, &(0x7f0000001640)=""/67, 0x40f00, 0x6, [], r3, 0x7a2023c658fa0da5, r9, 0x8, &(0x7f0000001700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x1, 0x3, 0x932, 0x4}, 0x10, r10, r12}, 0x78) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffa5) r14 = accept$alg(r13, 0x0, 0x0) sendmsg(r14, &(0x7f0000000140)={&(0x7f0000000040)=@llc={0x1a, 0xfcea, 0xfa, 0xfb, 0x0, 0x2, @random="982f1afc62e3"}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="c3a8581354b9d56d91f63a00036d8ba82207b46b58c0a034c279438e9418", 0x1e}], 0x1, &(0x7f0000000340)=[{0x10, 0x110, 0xfffffffa}, {0x100, 0x100, 0x2, "ab9f3cc89381a87c2bfd733389ae3630bbb12b12f33f0de725140032821e9da47feba8dd4172c798b411f835329d1ead42e0534c147e2587fec34f440e7545c1e326ac4460214698fb76a859a15f697835798cea819d3acc6d9a6d65f3a9c3f526e6c690e02262029ed50d051ea9835ea30df9b6b55bd71b8889a161d0512ac4759280281464b7c37bf6c848b25778283fe1c2e58a6fc36e2a2b5653bcac2997122646745e8a4c25e12035b71ca8055205ed1a93ebd0c04f32bc916374174a5559c6f2a56d2bcbd9b9b5b35196109e930b1da29c894e0ef676425bf30eb0f0d63f29f10450dce7006f2d48cc"}, {0x1010, 0xff, 0x7f, "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"}], 0x1120}, 0x48000) r15 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r15, 0xc0905664, &(0x7f0000001500)={0x0, 0x0, [], @bt={0x1000, 0x5, 0x3, 0x9, 0xff, 0x6, 0x86da548bc237904b, 0x10}}) [ 259.305803][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.354882][T13393] IPVS: ftp: loaded support on port[0] = 21 07:38:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004", 0x2d}], 0x1}, 0x0) 07:38:00 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1089) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:38:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000800010000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:38:00 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) [ 259.594508][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:38:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r11, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 07:38:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004", 0x2d}], 0x1}, 0x0) [ 259.755342][T13419] IPVS: ftp: loaded support on port[0] = 21 07:38:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="c2"}) 07:38:00 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:38:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x179, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c000200180002000300000800010000ce204b707596906260a7cefc"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:38:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e000000130081c5e4050cecdb4cb90407255e431a00000000fffffff00200000600b0efb07ab30006000cc004", 0x2d}], 0x1}, 0x0) 07:38:01 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000400)) set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6, 0x2, 0x9, 0x7], 0x4, 0x7, 0x1f, 0x0, 0x2, 0x7fff, {0x5, 0x200, 0x80, 0x0, 0x1, 0x81, 0x3, 0x8, 0x0, 0x101, 0x2, 0xfe79, 0xffffffff, 0x7f, "2eaf5be6b6bc522e89dacba283b84ea178050fd0dd690d5a428cacd66535fe72"}}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)={0x8, 0x6, 0x0, [{0xffffffffffffffff, 0x400, 0x3, 0xfe, 0x5, 0x2, 0xff}, {0x80000000, 0x7d, 0x3, 0x5, 0x2, 0x57, 0x80}, {0x7fff, 0x0, 0xca3, 0x3f, 0x1, 0x10, 0x4}, {0x1f, 0x6, 0x1, 0x9, 0x80, 0xe5, 0x81}, {0x9, 0x8000000000, 0x3, 0x1, 0x63, 0x7, 0x3f}, {0x9c, 0xa0, 0x59, 0x3, 0x7, 0x1, 0xdb}]}) 07:38:01 executing program 0: r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x11}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 07:38:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="c2"}) 07:38:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x6c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x5c, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x2}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0xfff}], @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fff}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x7}, @IFLA_GRE_TOS={0x8, 0x9, 0x5}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_TTL={0x8, 0x8, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x9}]]}}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$inet_tcp_buf(r7, 0x6, 0xd, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r10, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$sock_int(r9, 0x1, 0x28, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 260.303645][T13450] IPVS: ftp: loaded support on port[0] = 21 [ 260.320497][ T5] ===================================================== [ 260.327517][ T5] BUG: KMSAN: uninit-value in __list_del_entry_valid+0x194/0x410 [ 260.330074][T13454] validate_nla: 54 callbacks suppressed [ 260.330094][T13454] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 260.335335][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.5.0-rc1-syzkaller #0 [ 260.335343][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.335366][ T5] Workqueue: usb_hub_wq hub_event [ 260.335376][ T5] Call Trace: [ 260.335399][ T5] dump_stack+0x1c9/0x220 [ 260.335420][ T5] kmsan_report+0x128/0x220 [ 260.335441][ T5] __msan_warning+0x57/0xa0 [ 260.335461][ T5] __list_del_entry_valid+0x194/0x410 [ 260.335483][ T5] kcov_remote_start+0x13e/0x2e0 [ 260.335520][ T5] hub_event+0x190/0x76a0 [ 260.341166][T13454] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 260.349282][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.349300][ T5] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 260.349316][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.349333][ T5] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 260.349351][ T5] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 260.349450][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.357665][T13454] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 260.367660][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.367676][ T5] ? led_work+0x720/0x720 [ 260.367687][ T5] ? led_work+0x720/0x720 [ 260.367702][ T5] process_one_work+0x1572/0x1ef0 [ 260.367733][ T5] worker_thread+0x111b/0x2460 [ 260.367828][ T5] kthread+0x4b5/0x4f0 [ 260.373078][T13454] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 260.376267][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 260.376292][ T5] ? kthread_blkcg+0xf0/0xf0 [ 260.376310][ T5] ret_from_fork+0x35/0x40 [ 260.376371][ T5] [ 260.380710][T13454] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 260.385176][ T5] Uninit was created at: [ 260.385196][ T5] kmsan_save_stack_with_flags+0x3c/0x90 [ 260.385206][ T5] kmsan_alloc_page+0x133/0x320 [ 260.385218][ T5] __alloc_pages_nodemask+0x1421/0x5fd0 [ 260.385232][ T5] alloc_pages_current+0x68d/0x9a0 [ 260.385246][ T5] __vmalloc_node_range+0x8c9/0x1270 [ 260.385261][ T5] vmalloc+0x106/0x120 [ 260.385275][ T5] kcov_remote_start+0x18e/0x2e0 [ 260.385336][ T5] hub_event+0x190/0x76a0 [ 260.390278][T13454] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 260.395628][ T5] process_one_work+0x1572/0x1ef0 [ 260.395638][ T5] worker_thread+0x111b/0x2460 [ 260.395650][ T5] kthread+0x4b5/0x4f0 [ 260.395661][ T5] ret_from_fork+0x35/0x40 [ 260.395667][ T5] ===================================================== [ 260.395672][ T5] Disabling lock debugging due to kernel taint [ 260.395680][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 260.395739][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 260.400702][T13454] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 260.404999][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.405014][ T5] Workqueue: usb_hub_wq hub_event [ 260.405023][ T5] Call Trace: [ 260.405048][ T5] dump_stack+0x1c9/0x220 [ 260.405080][ T5] panic+0x3c9/0xc1e [ 260.413266][T13454] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 260.419142][ T5] kmsan_report+0x215/0x220 [ 260.665633][ T5] __msan_warning+0x57/0xa0 [ 260.670148][ T5] __list_del_entry_valid+0x194/0x410 [ 260.675515][ T5] kcov_remote_start+0x13e/0x2e0 [ 260.680445][ T5] hub_event+0x190/0x76a0 [ 260.684786][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.690805][ T5] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 260.696882][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.702887][ T5] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 260.708966][ T5] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 260.715051][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.720990][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 260.726871][ T5] ? led_work+0x720/0x720 [ 260.731194][ T5] ? led_work+0x720/0x720 [ 260.735531][ T5] process_one_work+0x1572/0x1ef0 [ 260.740558][ T5] worker_thread+0x111b/0x2460 [ 260.745327][ T5] kthread+0x4b5/0x4f0 [ 260.749556][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 260.754747][ T5] ? kthread_blkcg+0xf0/0xf0 [ 260.759354][ T5] ret_from_fork+0x35/0x40 [ 260.765495][ T5] Kernel Offset: 0x1cc00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 260.777435][ T5] Rebooting in 86400 seconds..