[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 22.081195] random: sshd: uninitialized urandom read (32 bytes read, 33 bits of entropy available) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 25.528728] random: sshd: uninitialized urandom read (32 bytes read, 39 bits of entropy available) [ 26.009811] random: sshd: uninitialized urandom read (32 bytes read, 41 bits of entropy available) [ 27.010725] random: sshd: uninitialized urandom read (32 bytes read, 89 bits of entropy available) Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. [ 32.548089] random: sshd: uninitialized urandom read (32 bytes read, 96 bits of entropy available) 2018/08/17 16:47:52 fuzzer started [ 33.844501] random: cc1: uninitialized urandom read (8 bytes read, 98 bits of entropy available) 2018/08/17 16:47:54 dialing manager at 10.128.0.26:41593 2018/08/17 16:47:56 syscalls: 1 2018/08/17 16:47:56 code coverage: enabled 2018/08/17 16:47:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/08/17 16:47:56 setuid sandbox: enabled 2018/08/17 16:47:56 namespace sandbox: enabled 2018/08/17 16:47:56 fault injection: CONFIG_FAULT_INJECTION is not enabled 2018/08/17 16:47:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/17 16:47:56 net packed injection: enabled 2018/08/17 16:47:56 net device setup: enabled [ 37.077679] random: nonblocking pool is initialized 16:48:27 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ptrace(0x4207, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)) 16:48:27 executing program 2: madvise(&(0x7f000024d000/0x4000)=nil, 0x4000, 0x11) 16:48:27 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000000280), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00003e3000/0x2000)=nil, &(0x7f00003e3000/0x4000)=nil, 0x2000}) 16:48:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="4098c80700315f85715070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0), 0x4) 16:48:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080), &(0x7f00000000c0)={0x2}, &(0x7f0000000100)) 16:48:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f00000001c0)=[{r0, 0x8000}, {r1, 0x1}, {0xffffffffffffffff, 0x8004}], 0x3, 0x3) 16:48:27 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="24000000250007041dfffd946fa2830020200a0009000000001d8568ff0f000000000000", 0x24}], 0x1}, 0x0) 16:48:27 executing program 6: r0 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20000011}) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) [ 67.870317] IPVS: Creating netns size=2552 id=1 [ 67.976567] IPVS: Creating netns size=2552 id=2 [ 68.052605] IPVS: Creating netns size=2552 id=3 [ 68.143014] IPVS: Creating netns size=2552 id=4 [ 68.282345] IPVS: Creating netns size=2552 id=5 [ 68.441641] IPVS: Creating netns size=2552 id=6 [ 68.698931] IPVS: Creating netns size=2552 id=7 [ 68.884597] IPVS: Creating netns size=2552 id=8 [ 68.928574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.040214] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.269429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.408284] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.506809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.560158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 69.582024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 69.619842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 69.645692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 69.707060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.065791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.076733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.100615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 70.118925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.149250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.174654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.200866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 70.278744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.332600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.538461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.548287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.597000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.660215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.668728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.757881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 70.766226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.774392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.783755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.865555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 70.877519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 70.905792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.925431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.956152] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 70.956235] ip (4295) used greatest stack depth: 24000 bytes left [ 71.018549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.028563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.050609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.070976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.135951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.145748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 71.190389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.199283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 71.298882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.374296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.454748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.552974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.640377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.729590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 71.801126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 71.813564] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 71.894930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 71.959282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.021623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.046504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.100674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.151828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.194559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.226614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.249406] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 72.281479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.328356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 72.413439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.441300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.473242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.553586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.485308] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.626773] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.697936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.796548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.848934] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.976348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.050818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.139608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.783870] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.816247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.855370] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.024360] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.118950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.128338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.174299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.378269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:48:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001600)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x69, &(0x7f00000011c0)=""/105}, &(0x7f0000001540), &(0x7f0000001340)=""/61, 0x0, 0x25, 0x0, &(0x7f00000015c0)}) 16:48:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) 16:48:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @dev}}, 0x5c) 16:48:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 16:48:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1}, 0x28) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/84, 0x54) 16:48:38 executing program 2: r0 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000001140)) 16:48:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) 16:48:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00001a3000)='./file1\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f000000a000)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000500)) poll(&(0x7f0000000400), 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 16:48:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @local}, {0x0, @link_local}, 0xc, {0x2, 0x0, @remote}}) 16:48:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:48:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x7, 0x0, 0x0, {0x1}, [@generic="7b6c6e6606"]}, 0x1c}}, 0x0) 16:48:38 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000080)=[{}, {{0x2}}], 0x30) 16:48:39 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x200000000000141, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000080), 0x64f5747d) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r0, 0x1000000000016) 16:48:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8f}, 0x1c) 16:48:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 16:48:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cd10700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) getsockname$inet(r1, &(0x7f0000001580)={0x2, 0x0, @multicast2}, &(0x7f00000015c0)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{}, {0x304, @dev}, 0x0, {0x2, 0x0, @rand_addr}, "00000080000001000000007000"}) 16:48:40 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000080)=[{{0x2}}], 0x18) 16:48:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="4098c80700315f85715070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0), 0x4) 16:48:40 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') 16:48:40 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r1, r0, 0x0) 16:48:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000000)) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(r0) 16:48:40 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) 16:48:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:48:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x33, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001280)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75b888289f53fb527c8176cc2cb9c7c001d77e", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:40 executing program 5: r0 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x800) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 80.696194] sd 0:0:1:0: [sg0] tag#213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 80.705141] sd 0:0:1:0: [sg0] tag#213 CDB: Verify(10) [ 80.710343] sd 0:0:1:0: [sg0] tag#213 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 80.719542] sd 0:0:1:0: [sg0] tag#213 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 80.728786] sd 0:0:1:0: [sg0] tag#213 CDB[20]: 75 b8 88 28 9f 53 fb 52 7c 81 76 cc 2c b9 c7 c0 [ 80.737926] sd 0:0:1:0: [sg0] tag#213 CDB[30]: 01 d7 7e [ 80.966217] IPVS: Creating netns size=2552 id=9 [ 81.283325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 81.299731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 81.385120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 81.402449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 81.485717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 81.502303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 81.521263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.539805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.165701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 82.211852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:48:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0xc0c0583b, &(0x7f0000000140)) 16:48:42 executing program 3: 16:48:42 executing program 2: 16:48:42 executing program 7: 16:48:42 executing program 6: 16:48:42 executing program 5: 16:48:42 executing program 1: 16:48:42 executing program 4: 16:48:42 executing program 4: 16:48:42 executing program 7: 16:48:42 executing program 3: 16:48:42 executing program 5: 16:48:42 executing program 1: 16:48:42 executing program 2: 16:48:42 executing program 6: 16:48:42 executing program 7: 16:48:42 executing program 0: 16:48:42 executing program 5: 16:48:42 executing program 6: 16:48:42 executing program 2: 16:48:42 executing program 3: 16:48:42 executing program 1: 16:48:42 executing program 4: 16:48:42 executing program 7: 16:48:42 executing program 4: 16:48:42 executing program 5: 16:48:42 executing program 2: 16:48:42 executing program 6: 16:48:42 executing program 3: 16:48:42 executing program 7: 16:48:42 executing program 1: 16:48:42 executing program 2: 16:48:42 executing program 0: 16:48:42 executing program 3: 16:48:42 executing program 7: 16:48:42 executing program 1: 16:48:42 executing program 6: 16:48:42 executing program 4: 16:48:42 executing program 5: 16:48:42 executing program 3: 16:48:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) 16:48:42 executing program 6: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) getpgid(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8983, &(0x7f0000000040)={"060000003000", @random="01003a1e2410"}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240), 0xffffffffffffffa1) 16:48:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0\x00') mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 16:48:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) ftruncate(r0, 0x0) 16:48:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x200, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="c5", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000040), 0x6) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:48:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f00001a3000)='./file1\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000040)) mount(&(0x7f000000a000)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000500)) poll(&(0x7f0000000400), 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 16:48:43 executing program 1: 16:48:43 executing program 4: 16:48:43 executing program 5: 16:48:43 executing program 3: 16:48:43 executing program 1: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x140) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 83.458717] blk_update_request: I/O error, dev loop2, sector 0 [ 83.465433] Buffer I/O error on dev loop2, logical block 0, lost async page write 16:48:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x6, 0xf0ffffff}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 16:48:43 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 16:48:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') 16:48:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1ffe000000}, 0x1c) 16:48:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x2000000000000031, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) [ 83.584695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.595362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.604733] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex [ 83.611732] PF_BRIDGE: RTM_NEWNEIGH with invalid ifindex [ 83.621518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.659147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.708832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.722001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.743036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.759582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.773018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 83.783517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 16:48:43 executing program 5: 16:48:43 executing program 3: 16:48:43 executing program 1: 16:48:43 executing program 6: 16:48:43 executing program 0: 16:48:43 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1}, 0x28) 16:48:43 executing program 2: 16:48:43 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 16:48:43 executing program 6: 16:48:43 executing program 0: 16:48:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000dbb000), &(0x7f0000329000)=0x4) 16:48:43 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) 16:48:44 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 16:48:44 executing program 0: 16:48:44 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 16:48:44 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @remote}, {}, 0x8}) 16:48:44 executing program 2: 16:48:44 executing program 5: 16:48:44 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000080), 0x1000002ad) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000001c0)) 16:48:44 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd27}, 0x14}}, 0x0) ptrace(0x4207, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:48:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 16:48:44 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/2) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1}, 0x28) 16:48:44 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80045400) 16:48:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5451, 0x0) 16:48:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x61, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="096310404b752dfcbecfe649d47d8b2aa2b70d0ef3925352957cd7b715d902605fbd113a7ddc18454a76fc77edae6e5900d66148b29f81037f8fab24aac62d9fa3d9b45e7715b082eec7cae9e425cade5e4b406d18a45a089cbb34f81cb2363c5c"], 0x0, 0x0, &(0x7f0000000580)}) 16:48:44 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x118, &(0x7f0000000240), 0x0, 0x0, 0x26085d6cce6967cc}}], 0x4000056, 0x3a, &(0x7f0000000200)={0x77359400}) 16:48:44 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000180), 0x9) [ 84.527009] ALSA: seq fatal error: cannot create timer (-22) 16:48:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 16:48:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x85, 0x7ff, @scatter={0x3, 0x0, &(0x7f0000001240)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/4096, 0x1000}]}, &(0x7f0000001280)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75b888289f53fb527c8176cc2cb9c7c001d77e10d3bae76311a0505cd11e7b9f5de192ed284cdb2d6ed5d687bfca936059ebae095392b21ed37727df0c5947c3209ee5a6b0e54f98295902c41ec25de2ecf7bdd588d6efc604678256729364f8448984055e", &(0x7f0000001380)=""/203, 0x336, 0x0, 0xffffffffffffffff, &(0x7f0000001480)}) 16:48:44 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) [ 84.594017] binder: 6518:6522 BC_ACQUIRE_DONE u49e6cfbefc2d754b no match [ 84.595835] ALSA: seq fatal error: cannot create timer (-22) 16:48:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x88000000010) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x24, 0x30, 0xaff, 0x0, 0x0, {0x3}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @u64}]}]}, 0x24}}, 0x0) [ 84.643876] binder: 6518:6522 unknown command 1381208819 16:48:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) dup3(r0, r2, 0x0) [ 84.684509] binder: 6518:6522 ioctl c0306201 20000640 returned -22 [ 84.685431] sd 0:0:1:0: [sg0] tag#124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 84.685446] sd 0:0:1:0: [sg0] tag#124 CDB: Verify(10) [ 84.685489] sd 0:0:1:0: [sg0] tag#124 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 84.685504] sd 0:0:1:0: [sg0] tag#124 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 84.685516] sd 0:0:1:0: [sg0] tag#124 CDB[20]: 75 b8 88 28 9f 53 fb 52 7c 81 76 cc 2c b9 c7 c0 16:48:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000001c0)='k', 0x1}], 0x1, &(0x7f00000024c0)=[{0x80, 0x118, 0x100, "5056254099a814f67e35369ee72f15162a1e487972974643f821a0c9242c6864095e06033fa942b4415a607d1a5c6ce56b768b8f00e00360f9e492fc66270edd03e379c9982230db57ddc3e4f1dc3bad9938a5703351bd41b483a864610445358f941dcaeed5d77045"}], 0x80, 0x8000}, 0x0) 16:48:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0xb5c7, 0x0) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) r1 = socket$inet6(0xa, 0x3, 0xcc) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c03, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 16:48:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000000000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 84.685528] sd 0:0:1:0: [sg0] tag#124 CDB[30]: 01 d7 7e 10 d3 ba e7 63 11 a0 50 5c d1 1e 7b 9f [ 84.685540] sd 0:0:1:0: [sg0] tag#124 CDB[40]: 5d e1 92 ed 28 4c db 2d 6e d5 d6 87 bf ca 93 60 [ 84.685551] sd 0:0:1:0: [sg0] tag#124 CDB[50]: 59 eb ae 09 53 92 b2 1e d3 77 27 df 0c 59 47 c3 [ 84.685561] sd 0:0:1:0: [sg0] tag#124 CDB[60]: 20 9e e5 a6 b0 e5 4f 98 29 59 02 c4 1e c2 5d e2 [ 84.685572] sd 0:0:1:0: [sg0] tag#124 CDB[70]: ec f7 bd d5 88 d6 ef c6 04 67 82 56 72 93 64 f8 [ 84.685581] sd 0:0:1:0: [sg0] tag#124 CDB[80]: 44 89 84 05 5e [ 84.932111] binder_alloc: binder_alloc_mmap_handler: 6518 20ffb000-20fff000 already mapped failed -16 [ 84.941740] binder: BINDER_SET_CONTEXT_MGR already set [ 84.949372] binder: 6518:6522 ioctl 40046207 0 returned -16 [ 84.955840] binder_alloc: 6518: binder_alloc_buf, no vma [ 84.961447] binder: 6518:6577 transaction failed 29189/-3, size 24-8 line 3137 [ 84.970941] binder: send failed reply for transaction 2 to 6518:6522 [ 84.978614] binder: undelivered TRANSACTION_ERROR: 29189 16:48:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) 16:48:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28021) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) 16:48:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:45 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000004c0)={@multicast1, @loopback}, 0xc) 16:48:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10000000000065) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfff}) 16:48:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) 16:48:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400) 16:48:45 executing program 6: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) mlock2(&(0x7f0000a44000/0x3000)=nil, 0x3000, 0x0) 16:48:45 executing program 5: r0 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 16:48:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) 16:48:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@loopback}, &(0x7f00000000c0)=0x14) 16:48:45 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) 16:48:45 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 16:48:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x21, 0x7ff, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001280)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 16:48:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x200007fc, &(0x7f00000002c0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 85.572096] sd 0:0:1:0: [sg0] tag#124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 85.581446] sd 0:0:1:0: [sg0] tag#124 CDB: Verify(10) [ 85.587430] sd 0:0:1:0: [sg0] tag#124 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 85.596610] sd 0:0:1:0: [sg0] tag#124 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 85.605663] sd 0:0:1:0: [sg0] tag#124 CDB[20]: 75 16:48:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x200007fc, &(0x7f00000002c0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 16:48:45 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000280)) 16:48:45 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:45 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') 16:48:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:48:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)}) 16:48:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 87.262447] IPVS: Creating netns size=2552 id=10 [ 87.553535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 87.570950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 87.658639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 87.676074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 87.760603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 87.778086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 87.796498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.816056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.455094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 88.504164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:48:48 executing program 6: 16:48:48 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) 16:48:48 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008) 16:48:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@ipv4}, 0x14) 16:48:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)) 16:48:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x10000000000065) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 16:48:48 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:48 executing program 1: 16:48:48 executing program 1: 16:48:48 executing program 3: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() lchown(&(0x7f00000001c0)='./file0\x00', r0, r1) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x21, 0x7ff, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001280)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:48 executing program 4: r0 = socket$inet(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:48 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x5451, 0x0) 16:48:48 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x40345410) 16:48:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002580)=ANY=[@ANYBLOB="0010"]) 16:48:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) 16:48:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x19, 0x0, 0xfd}) [ 88.954139] sd 0:0:1:0: [sg0] tag#124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 88.962778] sd 0:0:1:0: [sg0] tag#124 CDB: Verify(10) [ 88.968560] sd 0:0:1:0: [sg0] tag#124 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 88.977671] sd 0:0:1:0: [sg0] tag#124 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 88.987053] sd 0:0:1:0: [sg0] tag#124 CDB[20]: 75 16:48:48 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:48 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 16:48:48 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80605414) 16:48:48 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x20000000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 16:48:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) dup3(r2, r0, 0x0) [ 89.208488] sd 0:0:1:0: [sg0] tag#124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 89.217478] sd 0:0:1:0: [sg0] tag#124 CDB: Verify(10) [ 89.222695] sd 0:0:1:0: [sg0] tag#124 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 89.231775] sd 0:0:1:0: [sg0] tag#124 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 89.240970] sd 0:0:1:0: [sg0] tag#124 CDB[20]: 75 16:48:49 executing program 7: 16:48:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)) 16:48:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'team0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008d80)={@local, @dev}, &(0x7f0000008dc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008fc0)={{{@in6=@loopback, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000090c0)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f00000127c0)=[{{0x0, 0x0, &(0x7f000000e0c0)=[{&(0x7f000000cdc0)=""/253, 0xfd}], 0x1, &(0x7f000000e140)=""/114, 0x72}}], 0x1, 0x22, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) 16:48:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 16:48:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x4000000000000031, 0xffffffffffffffff, 0x0) fcntl$setpipe(r0, 0x407, 0x1e) ioctl$fiemap(r0, 0x40046604, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4924924924924a3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0xffff, 0x0, 'client0\x00', 0xffffffff80000004, "bcc90553485f1a2a", "7f1895beed79be0546e8d7ab8f45c974987770f57f1972fde17cd2674b7eb86d", 0x3, 0x7}) 16:48:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x83c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x46) readv(r0, &(0x7f0000001280)=[{&(0x7f0000001180)=""/246, 0xf6}], 0x1) 16:48:49 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @loopback}, 0x7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101400, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/245) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) fadvise64(r1, 0x0, 0xff, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @loopback, r2}, 0xc) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x200) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 16:48:49 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001280)="2f7bb2bda1de", &(0x7f0000001380)=""/203, 0x0, 0x12, 0x0, &(0x7f0000001480)}) 16:48:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffe, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001080)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001080)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'team0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008d80)={@local, @dev}, &(0x7f0000008dc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008fc0)={{{@in6=@loopback, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000090c0)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f00000127c0)=[{{0x0, 0x0, &(0x7f000000e0c0)=[{&(0x7f000000cdc0)=""/253, 0xfd}], 0x1, &(0x7f000000e140)=""/114, 0x72}}], 0x1, 0x22, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) [ 89.855331] sd 0:0:1:0: [sg0] tag#213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 89.864078] sd 0:0:1:0: [sg0] tag#213 CDB: Verify(10) [ 89.869289] sd 0:0:1:0: [sg0] tag#213 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 89.878468] sd 0:0:1:0: [sg0] tag#213 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 89.887659] sd 0:0:1:0: [sg0] tag#213 CDB[20]: 75 16:48:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x88000000010) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000000000)={0x24, 0x30, 0xaff, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, [@typed={0xc, 0x1, @u64}]}]}, 0x24}}, 0x0) 16:48:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 16:48:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000001, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 16:48:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000400)={'syz_tun\x00', @ifru_mtu}) 16:48:49 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:49 executing program 7: socket(0x11, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bind$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000100)={"7465616d300000ffffffc000", 0xc201}) [ 89.897769] sd 0:0:1:0: [sg0] tag#213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 89.906413] sd 0:0:1:0: [sg0] tag#213 CDB: Verify(10) [ 89.911625] sd 0:0:1:0: [sg0] tag#213 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 89.920480] sd 0:0:1:0: [sg0] tag#213 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 89.929285] sd 0:0:1:0: [sg0] tag#213 CDB[20]: 75 16:48:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001280)="a47bb2bda1deca858548772bbdeb277090ab7e3d9c010000000000000061a52b75", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:49 executing program 6: r0 = socket$inet(0x2, 0x80003, 0x2) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x8810, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 89.964532] sd 0:0:1:0: [sg0] tag#213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 89.973568] sd 0:0:1:0: [sg0] tag#213 CDB: Verify(10) [ 89.978870] sd 0:0:1:0: [sg0] tag#213 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 89.987929] sd 0:0:1:0: [sg0] tag#213 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 89.996759] sd 0:0:1:0: [sg0] tag#213 CDB[20]: 75 16:48:49 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) dup2(r1, r0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 16:48:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 16:48:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)) 16:48:49 executing program 7: sched_setattr(0x0, &(0x7f0000000600), 0x0) 16:48:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000018c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000001980)={&(0x7f0000001880), 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r1, 0x9, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x87}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 16:48:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001080)="2f7bb2bda1de", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:50 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) sendmsg$nl_generic(r0, &(0x7f0000001900)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x4011) 16:48:50 executing program 3: r0 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) clone(0x0, &(0x7f0000001f37), &(0x7f0000000280), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) [ 90.278351] sd 0:0:1:0: [sg0] tag#124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 90.287038] sd 0:0:1:0: [sg0] tag#124 CDB: Maintenance out, sa=0x1b [ 90.293487] sd 0:0:1:0: [sg0] tag#124 CDB[00]: a4 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 90.302361] sd 0:0:1:0: [sg0] tag#124 CDB[10]: 90 ab 7e 3d 9c 01 00 00 00 00 00 00 00 61 a5 2b [ 90.311146] sd 0:0:1:0: [sg0] tag#124 CDB[20]: 75 16:48:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000001240)}, &(0x7f0000001080)="2f7bb2bda1deca858548772bbdeb277090ab7e3d9cd1189c37da5cff5d61a52b75", &(0x7f0000001380)=""/203, 0x0, 0x0, 0x0, &(0x7f0000001480)}) 16:48:50 executing program 1: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:50 executing program 0: r0 = socket$inet6(0xa, 0x1003000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000180)) 16:48:50 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 90.450827] sd 0:0:1:0: [sg0] tag#213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 90.459941] sd 0:0:1:0: [sg0] tag#213 CDB: Verify(10) [ 90.465560] sd 0:0:1:0: [sg0] tag#213 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 90.474778] sd 0:0:1:0: [sg0] tag#213 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 90.483886] sd 0:0:1:0: [sg0] tag#213 CDB[20]: 75 [ 90.557770] sd 0:0:1:0: [sg0] tag#128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 90.567110] sd 0:0:1:0: [sg0] tag#128 CDB: Verify(10) [ 90.572885] sd 0:0:1:0: [sg0] tag#128 CDB[00]: 2f 7b b2 bd a1 de ca 85 85 48 77 2b bd eb 27 70 [ 90.582223] sd 0:0:1:0: [sg0] tag#128 CDB[10]: 90 ab 7e 3d 9c d1 18 9c 37 da 5c ff 5d 61 a5 2b [ 90.591334] sd 0:0:1:0: [sg0] tag#128 CDB[20]: 75 16:48:50 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6}]}, 0x8) 16:48:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x900}, 0xc, &(0x7f0000000a80)={&(0x7f00000000c0)=@ipv6_newroute={0x24, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe}, [@RTA_OIF={0x8, 0x4, r1}]}, 0x24}}, 0x0) 16:48:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000040)='[', 0x1, 0x0, &(0x7f0000000140), 0x1c) 16:48:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="4098c80700315f85715070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000000)=@proc, 0xc) 16:48:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) 16:48:50 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 16:48:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x0, @rand_addr, 0x0, 0x0, 'rr\x00'}, 0x2c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 16:48:50 executing program 6: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f00000011c0)='auxv\x00') pread64(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 16:48:50 executing program 7: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr, 0x4e20, 0x0, 'rr\x00', 0x1}, 0x2c) 16:48:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) 16:48:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000040)='[', 0x1, 0x0, &(0x7f0000000140), 0x1c) 16:48:50 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000000)) ptrace$cont(0x9, r1, 0x0, 0x0) 16:48:51 executing program 1: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:51 executing program 7: 16:48:51 executing program 2: 16:48:51 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc4", 0x26}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:51 executing program 5: 16:48:51 executing program 0: 16:48:51 executing program 3: 16:48:51 executing program 7: 16:48:51 executing program 2: 16:48:51 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@routing, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="5e00040000000000fd66a1d91e90a78817f98e6099d8ad25cef68188d7b7b69b8bfa988dcff6919e5ef057a8cd84b02442e070308fbbfe3152612c72ede61716ed0817bd5153377adcd532"], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)}, 0x0) 16:48:51 executing program 7: 16:48:51 executing program 6: 16:48:51 executing program 2: 16:48:51 executing program 0: 16:48:51 executing program 7: 16:48:51 executing program 5: 16:48:51 executing program 1: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:51 executing program 7: 16:48:51 executing program 0: 16:48:52 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c6", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:52 executing program 2: 16:48:52 executing program 5: [ 93.306157] IPVS: Creating netns size=2552 id=11 [ 93.611082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.630698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.716798] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 93.734378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.820210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.837507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 93.855450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.874082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.511516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 94.559303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:48:54 executing program 3: 16:48:54 executing program 6: 16:48:54 executing program 0: 16:48:54 executing program 7: 16:48:54 executing program 2: 16:48:54 executing program 5: 16:48:54 executing program 1: r0 = gettid() unshare(0x8020400) exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:54 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf3", 0x43}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:54 executing program 3: 16:48:54 executing program 7: 16:48:54 executing program 2: 16:48:54 executing program 5: 16:48:54 executing program 7: 16:48:54 executing program 3: 16:48:54 executing program 6: 16:48:54 executing program 0: 16:48:54 executing program 5: 16:48:54 executing program 2: 16:48:54 executing program 6: 16:48:54 executing program 7: 16:48:54 executing program 3: 16:48:54 executing program 0: 16:48:55 executing program 1: gettid() unshare(0x8020400) exit(0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:55 executing program 5: 16:48:55 executing program 2: 16:48:55 executing program 3: 16:48:55 executing program 6: 16:48:55 executing program 7: 16:48:55 executing program 0: 16:48:55 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc88", 0x48}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:55 executing program 6: 16:48:55 executing program 2: 16:48:55 executing program 3: 16:48:55 executing program 0: 16:48:55 executing program 7: 16:48:55 executing program 5: 16:48:55 executing program 6: 16:48:55 executing program 2: 16:48:56 executing program 1: r0 = gettid() unshare(0x8020400) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:56 executing program 0: 16:48:56 executing program 3: 16:48:56 executing program 7: 16:48:56 executing program 5: 16:48:56 executing program 6: 16:48:56 executing program 2: 16:48:56 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b07", 0x4a}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:56 executing program 7: 16:48:56 executing program 6: 16:48:56 executing program 2: 16:48:56 executing program 3: 16:48:56 executing program 0: 16:48:56 executing program 7: 16:48:56 executing program 5: 16:48:56 executing program 1: r0 = gettid() unshare(0x8020400) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:56 executing program 2: 16:48:56 executing program 5: 16:48:56 executing program 6: 16:48:56 executing program 0: 16:48:56 executing program 3: 16:48:56 executing program 2: 16:48:56 executing program 6: 16:48:57 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b0798", 0x4b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:57 executing program 7: 16:48:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x2d, &(0x7f0000000100), 0x10) 16:48:57 executing program 0: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7ff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_emit_ethernet(0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) 16:48:57 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)="73746174008fd4fadb5db5a8e712f393d69e3c6660868c9846e18283b8f1c63c521f2ca8000239") sendfile(r0, r1, &(0x7f0000000040), 0x15) 16:48:57 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000740)='GPLem1self\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet(0x2, 0xb, 0x39) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 16:48:57 executing program 1: r0 = gettid() unshare(0x8020400) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:57 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x2000800e, &(0x7f0000000100)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) write(r0, &(0x7f0000000040)='/', 0x1) recvfrom(r0, &(0x7f0000000140)=""/101, 0xfffffffffffffe4c, 0x15a, 0x0, 0x4f) 16:48:57 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 16:48:57 executing program 7: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) 16:48:57 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000080), 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x16, 0x201}, 0x14}}, 0x0) 16:48:57 executing program 5: r0 = epoll_create1(0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) 16:48:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001100)="0a5cc80700315f85715070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x101}, 0x1c}}, 0x0) 16:48:57 executing program 1: r0 = gettid() exit(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='cpuset\x00') pread64(r1, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000020000004bc333b8595a865187089d4e226be852944199c7efce9bd7"], 0x28}}], 0x1, 0x0) 16:48:57 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000740)='GPLem1self\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket$inet(0x2, 0xb, 0x39) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) [ 98.014119] syz-executor7 (7698) used greatest stack depth: 23664 bytes left 16:48:58 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000fec0)=[{{&(0x7f000000d540)=@generic, 0x80, &(0x7f000000e7c0)=[{&(0x7f000000d5c0)=""/68, 0x44}, {&(0x7f000000d680)=""/4096, 0x1000}, {&(0x7f000000e680)=""/81, 0x51}, {&(0x7f000000e700)=""/163, 0xa3}], 0x4, &(0x7f000000e840)=""/229, 0xe5}}], 0x1, 0x0, &(0x7f000000ff40)) 16:48:58 executing program 3: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) 16:48:58 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000740)='GPLem1self\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 16:48:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000f501ffffffffffff0000000000000000"], 0x14}}, 0x0) 16:48:58 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 16:48:58 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000020000004bc333b8595a865187089d4e226be852944199c7efce9bd7"], 0x28}}], 0x1, 0x0) 16:48:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000020000004bc333b8595a865187089d4e226be852944199c7efce9bd7"], 0x28}}], 0x1, 0x0) 16:48:58 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100040a0}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 16:48:58 executing program 6: socketpair(0x9, 0x0, 0x0, &(0x7f0000000040)) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f00000001c0)={0x281, 0x27, 0x1aff, 0x0, 0x0, {0x3}}, 0x30c}}, 0x0) 16:48:58 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000002f40)={&(0x7f0000000100), 0xc, &(0x7f0000002f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c000200080016009900000092a0a4aebcae820961ef"], 0x1}}, 0x0) [ 98.545570] nla_parse: 28 callbacks suppressed 16:48:58 executing program 7: r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7ff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) syz_emit_ethernet(0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) 16:48:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000940)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x4da}], 0x1, &(0x7f0000000280)}, 0x0) [ 98.585178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 16:48:58 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, &(0x7f0000000000)={0x1, 'veth0_to_bridge\x00'}, 0x18) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) [ 98.643600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 16:48:58 executing program 6: syz_emit_ethernet(0xe, &(0x7f0000000100)={@link_local, @remote, [], {@mpls_uc}}, &(0x7f0000000000)) 16:48:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f00000000c0), 0x4) 16:48:58 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f000000fec0), 0x0, 0x0, &(0x7f000000ff40)) 16:48:58 executing program 1: unshare(0x8020400) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') pread64(r0, &(0x7f0000001100)=""/4096, 0x5a6, 0x0) 16:48:58 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f7570000af4768ea2f63959c67dd2981fb7bb04e1768eed1bf56d68ef51981e32571fda5cc7b02e05535c52f4476ab1747dbf8aea298514faca81fa533d463b3b4870495e75a8a605fa00997204f15bcf493962fb5ff6fbfda1a7d6467957c2401a74fb42938e0570a800ac507c04e03df2a29d27bf2d93ddf47ca4f46d6da51a581fea5d73656475a85cc3cff74ad289df861a2b47a26add859b959092d6df3e493b3c4f9d459052f7a4c256017bc4adb7e5d9fd51202a7a724a9bb32ae50f19eeb9b5df7c05ba23264d490c81830a2d58ba81d68a3100b06717f52f", 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 16:48:58 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000740)='GPLem1self\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) 16:48:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) write$P9_RRENAME(r1, &(0x7f0000001300)={0x7}, 0x7) sendmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)}}], 0x1, 0x0) 16:48:58 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f00000013c0)=""/200, 0xc8}], 0x1, 0x0) 16:48:58 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) [ 98.866121] kasan: CONFIG_KASAN_INLINE enabled [ 98.907614] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP KASAN [ 98.940954] Dumping ftrace buffer: [ 98.944492] (ftrace buffer empty) [ 98.948232] Modules linked in: [ 98.951555] CPU: 1 PID: 7784 Comm: syz-executor2 Not tainted 4.4.148-gf057ff9 #17 [ 98.959169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.968516] task: ffff8801cd0e9800 task.stack: ffff8800a5390000 [ 98.974566] RIP: 0010:[] [] pppol2tp_connect+0x873/0x1910 [ 98.983468] RSP: 0018:ffff8800a5397b50 EFLAGS: 00010202 [ 98.988899] RAX: dffffc0000000000 RBX: ffff8800a4f81980 RCX: ffffc9000106e000 [ 98.996159] RDX: 000000000000003b RSI: ffffffff835ac4fb RDI: 00000000000001d8 [ 99.003414] RBP: ffff8800a5397d00 R08: ffff8801cd0ea128 R09: 0000000000000000 [ 99.010687] R10: 0000000000000001 R11: ffff8801cd0e9800 R12: ffff8801d1bba280 [ 99.017957] R13: ffff8800a4f819b0 R14: 0000000000000000 R15: ffff8801ce9e2c80 [ 99.025215] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f5734b40 [ 99.033427] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.039294] CR2: 00007ffd59399fd8 CR3: 00000001ceb56000 CR4: 00000000001606f0 [ 99.046549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.053818] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.061068] Stack: [ 99.063201] ffffffff835ac49b 0000000200000005 ffff8800a5397c58 ffff880000000000 [ 99.071221] ffff8800a4f81d50 ffff8800a4f81992 1ffff10014a72f73 ffff8801d1bba418 [ 99.079247] ffff8801ce9e2e00 0000000041b58ab3 ffffffff8424e6d8 ffffffff835abca0 [ 99.087285] Call Trace: [ 99.089860] [] ? pppol2tp_connect+0x7fb/0x1910 [ 99.096091] [] ? pppol2tp_recv+0x320/0x320 [ 99.101963] [] ? security_socket_connect+0x8f/0xc0 [ 99.108530] [] SYSC_connect+0x1b8/0x300 [ 99.114141] [] ? SYSC_bind+0x280/0x280 [ 99.119664] [] ? get_unused_fd_flags+0xd0/0xd0 [ 99.125886] [] ? compat_SyS_get_robust_list+0x310/0x310 [ 99.132886] [] ? SyS_socket+0x121/0x1b0 [ 99.138502] [] ? move_addr_to_kernel+0x50/0x50 [ 99.144737] [] SyS_connect+0x24/0x30 [ 99.150086] [] ? SyS_accept+0x30/0x30 16:48:58 executing program 6: perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f00000013c0)=""/200, 0xc8}], 0x1, 0x0) [ 99.155522] [] do_fast_syscall_32+0x324/0x8b0 [ 99.161659] [] sysenter_flags_fixed+0xd/0x1a [ 99.167695] Code: fd 80 3d 00 90 45 01 00 0f 84 44 09 00 00 e8 45 7a da fd 49 8d be d8 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 60 0d 00 00 4d 8b be d8 01 00 00 e8 37 d9 cc [ 99.195093] RIP [] pppol2tp_connect+0x873/0x1910 [ 99.201619] RSP [ 99.217343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.228039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.241076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.249067] ---[ end trace 6d64610222321a2e ]--- [ 99.252957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.254763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 99.254845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 99.278314] Kernel panic - not syncing: Fatal exception [ 99.283709] Dumping ftrace buffer: [ 99.287243] (ftrace buffer empty) [ 99.290929] Kernel Offset: disabled [ 99.294532] Rebooting in 86400 seconds..