[ 78.558642][ T31] audit: type=1800 audit(1574602816.614:25): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 78.582630][ T31] audit: type=1800 audit(1574602816.644:26): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 78.623618][ T31] audit: type=1800 audit(1574602816.664:27): pid=11560 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 79.647969][T11627] sshd (11627) used greatest stack depth: 54016 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 81.955221][T11696] sshd (11696) used greatest stack depth: 53464 bytes left Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. 2019/11/24 13:40:29 fuzzer started 2019/11/24 13:40:33 dialing manager at 10.128.0.26:46451 2019/11/24 13:40:33 syscalls: 2397 2019/11/24 13:40:33 code coverage: enabled 2019/11/24 13:40:33 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/11/24 13:40:33 extra coverage: enabled 2019/11/24 13:40:33 setuid sandbox: enabled 2019/11/24 13:40:33 namespace sandbox: enabled 2019/11/24 13:40:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/24 13:40:33 fault injection: enabled 2019/11/24 13:40:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/24 13:40:33 net packet injection: enabled 2019/11/24 13:40:33 net device setup: enabled 2019/11/24 13:40:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/24 13:40:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 13:44:01 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="f5253dd312e7f1d30f723839090812fd7d8914107b84bfac3c67ccc38294d54e42634f828712f2ecb3c097d094cf8452ec12911feb64a941ed139809ae8ea31f0430a16df8955c9b7d5612c1d59cedb28030383190de2e986d62709b7677a1469e5b9384f2586f7fd93f97bc2535679aa2eeecb21064844344ef557c6be6dea39365c5ba9636", 0x86, 0x0) r2 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='mime_type$ppp1{/trusted!(eth1\'\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000002c0)={0x8, 0xc00000, "285346cd0bfd869fa135b7816670d2bfca149edeb0e13458", {0xfff, 0x10000}, 0x100}) r4 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000300)={0x8, 0xffff, 0xfff, 0x101, 0x1, 0x3}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000003c0)={0x3, 0x6a4, 0xfffffe00, 0x7f, 0x7a9, 0x200}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/108, 0x6c}], 0x3, &(0x7f0000000680)=""/198, 0xc6}, 0x40000040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000007c0)={0x0, 0xd9, "d548b9c3c0143f614e85607f7f3706939bc0374dd9e6294c3bf93354b30ff812ad8fac256443673fbbdf5f63a62335295f16e52cc32b76c4f35b223beb790c04c4c06e819af431738b816a2e90a4717c2445a6fb537a3c7839744d745d0f8c44e515e17a5584061cd3a74f9fbb8eac82e02e5969013cd0a98877d07c02ceaf082e57457553199c7f10afcb47e647a02b6577d8b9a53a5e21919a52645effbab9b12d4822ba44032095ec3b1d72395668a341fe95bde45c8147085d1e65f01b6f1290763b484b96db5061501398be4805e148339a41ae44cef3"}, &(0x7f00000008c0)=0xe1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000900)={r7, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x7, 0x8, 0x9, 0x40}, 0x98) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) sendto$inet6(r8, &(0x7f0000000a00)="645a7f369b2d08f1", 0x8, 0x4000000, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000a40)='/dev/rtc#\x00', 0x5, 0x400000) r9 = open(&(0x7f0000000a80)='./file0\x00', 0x20200, 0x191) ioctl$USBDEVFS_RELEASEINTERFACE(r9, 0x80045510, &(0x7f0000000ac0)=0x6) r10 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r10, 0xc0745645, &(0x7f0000000b40)={0x0, [0xfff, 0x1, 0x29c7, 0x75, 0x4, 0x6, 0x6, 0x1, 0x9, 0x9, 0xffff, 0x9, 0x9, 0x8000, 0x8000, 0x380, 0xd19, 0x8000, 0x20, 0x9, 0x4, 0x5, 0x2, 0x200, 0x5, 0x40, 0x8, 0x1, 0x7f, 0x4, 0x9, 0x6, 0x1, 0x7f, 0x5151, 0x3, 0xffff, 0x9, 0xe39f, 0x2, 0x401, 0x1, 0x0, 0x101, 0x1f, 0x8, 0x28e, 0x2], 0xb}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000bc0)) ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000000c00)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000c40)={0xffff, 0x2, 0x5, 0x10000, 0x8, 0x2, 0x8}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000c80)={0x0, 0x3}) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dlm_plock\x00', 0x80640, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000d00)={'hsr0\x00', 0x400}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vsock\x00', 0x80, 0x0) ioctl$KDSIGACCEPT(r12, 0x4b4e, 0x23) lgetxattr(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)=@known='system.posix_acl_default\x00', &(0x7f0000000e00)=""/153, 0x99) socket$kcm(0x29, 0x7, 0x0) [ 303.942739][T11724] IPVS: ftp: loaded support on port[0] = 21 [ 304.081405][T11724] chnl_net:caif_netlink_parms(): no params data found [ 304.135845][T11724] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.143115][T11724] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.151780][T11724] device bridge_slave_0 entered promiscuous mode [ 304.161468][T11724] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.168820][T11724] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.177482][T11724] device bridge_slave_1 entered promiscuous mode [ 304.210389][T11724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.223233][T11724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.255213][T11724] team0: Port device team_slave_0 added [ 304.264781][T11724] team0: Port device team_slave_1 added [ 304.566642][T11724] device hsr_slave_0 entered promiscuous mode [ 304.732378][T11724] device hsr_slave_1 entered promiscuous mode [ 305.309500][T11724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.346206][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.355060][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.387294][T11724] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.423389][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.432875][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.442700][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.449867][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.461094][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.470597][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.479823][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.487034][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.563971][T11724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.577242][T11724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.674381][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.683255][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.693282][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.703584][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.713368][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.722838][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.732543][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.742042][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.751329][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.760828][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.769901][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.778987][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.787082][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.803960][T11724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.102998][T11754] Unknown ioctl 19278 [ 306.137113][T11754] Unknown ioctl 19278 [ 306.152259][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.161204][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:44:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getneightbl={0x14, 0x42, 0x200, 0x74bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000600)={@dev, @loopback, 0x0}, &(0x7f0000000640)=0xc) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000040), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@newneigh={0x38, 0x1c, 0xa08, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, r3, 0xc529dfc479ececcb, 0x4, 0x9}, [@NDA_SRC_VNI={0x8, 0xb, 0x1000}, @NDA_LINK_NETNSID={0x8, 0xa, 0x3}, @NDA_DST_MAC={0xc, 0x1, @random="98f80473544d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000001c0)=""/167) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e20, 0x6, @ipv4={[], [], @multicast2}}}}, 0x84) 13:44:05 executing program 1: sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000bc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c40)=0x80, 0x800) bind$can_raw(r0, &(0x7f0000000c80)={0x1d, r2}, 0x10) readlink(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=""/232, 0xe8) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000e00)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x400) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000e40)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000e80), 0x106, 0xa}}, 0x20) r4 = socket$vsock_dgram(0x28, 0x2, 0x0) signalfd4(r4, &(0x7f0000000f00)={0x1f}, 0x8, 0x80000) r5 = syz_open_dev$media(&(0x7f0000000f40)='/dev/media#\x00', 0x6, 0x20000) ioctl$RTC_VL_CLR(r5, 0x7014) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000001780)={0x0, 0x8}, &(0x7f00000017c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001880)={r7, 0x78, &(0x7f0000001800)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0xfffff03e}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f00000018c0)=0x10) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000001900), 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001940)='/dev/full\x00', 0x80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000001980)=0xffffffffffffffff, 0x4) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000019c0)=0x1, 0x4) r9 = syz_open_dev$vcsa(&(0x7f0000003080)='/dev/vcsa#\x00', 0x4, 0x4000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003200)={&(0x7f0000003140)={0x98, r10, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5e61b47e70bbfda3, 0x64}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x234}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10000}, 0x40040c0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000032c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0xa5b71df3d05e5d7c}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, r11, 0x404, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6a5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x14000}, 0x8000050) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f00000033c0)='/dev/cuse\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r12, &(0x7f0000003400)='trusted.overlay.upper\x00', &(0x7f0000003440)={0x0, 0xfb, 0x96, 0x4, 0x40, "12c3a88ccc27f1465d2d3c01975c7719", "d9f49d8b14e36d872480ecab572c71430cf1a705e1dea5a6db219500c2c76623c31f85e9a34bdb41f9b2a02ea318ea101dda757ae967d51f2c5474281dd7fdf22de316998f53febcc0c8fa7a7c969b125553ddbce2b59b203c648629fb56bb71edabad34c1bb075350afcbc87a326296110bd0e615d22011ef9d9c44302cdbcc59"}, 0x96, 0x2) getsockname$packet(r1, &(0x7f0000003500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003540)=0x14) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003580)='/dev/sequencer\x00', 0x381080, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f00000035c0)={0x0, 0x2, 0x4, 0x1}) 13:44:05 executing program 0: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = socket(0x13, 0xaf1df0cdf63f3b71, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x27074d39def00b4d, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000080)={0x6, 0x6, @value=0x3}) r5 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r6, 0x0, 0x80000002) 13:44:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000380)=0x4) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r1, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000540)={&(0x7f0000000580)={'crc32c-generic\x00'}, &(0x7f0000000340)="4857fd219ec56005a883c4a0121e927ed80800000000000000327b2d1d7589eb69e11a1356ef1bb278b40287", 0x2c}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x18) keyctl$invalidate(0x15, r3) listen(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 307.527650][T11774] IPVS: ftp: loaded support on port[0] = 21 13:44:05 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[]}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x20, @remote, 0x8001}, @in={0x2, 0x4e23, @broadcast}], 0x2c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000100)={{0x4, 0x2}, {0x5a, 0x3}, 0xe9, 0x2, 0x7f}) [ 307.754686][T11774] chnl_net:caif_netlink_parms(): no params data found [ 307.811082][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.818348][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.827014][T11774] device bridge_slave_0 entered promiscuous mode [ 307.838248][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.845542][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.854251][T11774] device bridge_slave_1 entered promiscuous mode [ 307.889890][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.903236][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 13:44:06 executing program 0: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000005dc0)='(', 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r4 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/dsp#\x00', 0x0) keyctl$negate(0xd, r4, 0x15, 0xffffffffffffffff) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)) write$vnet(r1, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000001300)=0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000014c0)=ANY=[@ANYBLOB="1071006800000000000200000000000000030000000900000006000000000000003f00000000000000080000000000000006000000000000000000000000000000000000000000000002000000000000000000000000000000cb50000000000000000000000000000000000000010000000000000000000000000000000000000084000000000000000000000000000000010001000000000001000000000000000400000000000000000000000000000000000000000000000004000000000000000000000000000003000000000000000e0e0000000000000900000000000000000000000000000000000000000000005274733900000000000000000000000001000000010000000400000000000000932c275800000000000000000000000000000000000000008a02000000000000000000000000000001000000000000002000000000000000040000000000000000000000000000000000000000000000882800"/368]) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000001340)={0x9, 0x522, 0x7}) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000003540)='/proc/capi/capi20ncci\x00', 0x501800, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0x40085112, 0x0) unlinkat(r7, &(0x7f0000000180)='./file0\x00', 0x200) io_submit(0x0, 0x3, &(0x7f00000037c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7a647d367a88259e, 0x401, 0xffffffffffffffff, &(0x7f00000001c0)="2f30d89b563112ee8a71aa5a63037a82903fde4998cdd540a1b9220d817e0385884a041f71decbe9f1c7775564cf9a0eeff9c9d08b59bc9fa71e69917ba6d03af53979abf2e53426688afcb9cc42a611dd57ad47ab1265b7d5b18095c852e3222f68560a2496a38378ccb26288952cc5b3fe4b9f5f324abe7852dbf31c54287bb3fc9c75cfa03188f8f08e2c90de9cbc32bf658aa4", 0x95, 0x1, 0x0, 0x0, r1}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f0000003580)="a9d651c48bb669815fd64c65ab8c32a09499d3567c99b8b90e36ab583263a6292b4949398f505c34552989c9adfdc58621f8d20ba502496bd5ddef0eaaa645274f47f48b51ab3e25c44048f86bfc7325844a28de37a21af3b90e6bb6382557fa1aba7b78dcc57d6037bdb19b3685e7943c5922e18648db78d621c872", 0x7c, 0x25, 0x0, 0x1}, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000003640), 0x0, 0x9}]) [ 307.955968][T11774] team0: Port device team_slave_0 added [ 308.000672][T11774] team0: Port device team_slave_1 added [ 308.176378][T11774] device hsr_slave_0 entered promiscuous mode [ 308.303142][ C1] hrtimer: interrupt took 31987 ns [ 308.323233][T11774] device hsr_slave_1 entered promiscuous mode [ 308.583471][T11774] debugfs: Directory 'hsr0' with parent '/' already present! [ 309.017672][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 13:44:07 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000a40)={{0x6, 0x1, 0x9, 0xad75, 'syz1\x00', 0xfffffff9}, 0x1, [0x401, 0x8, 0xa173, 0x10000, 0x0, 0x81, 0x202f, 0x4703f07, 0xfffffffffffffffc, 0xf4a, 0x3ff, 0xb1, 0x7, 0x7, 0x6, 0x8, 0x80000001, 0x6, 0x7, 0x6, 0x40, 0x0, 0x1, 0x0, 0x5, 0xffffffffffffc8a6, 0x80000000, 0x3, 0x3, 0x1, 0x32, 0x3, 0x0, 0x1, 0x7, 0xb7b, 0x8, 0x100000001, 0x5, 0x6, 0x4bbb9c38, 0x473, 0xdfe, 0x0, 0xffffffff, 0x6, 0xff, 0x0, 0x8, 0x101, 0x7, 0x5, 0x3, 0x3, 0x6, 0x8, 0x3, 0x7fff, 0x2000000000, 0x3, 0x7237, 0x57, 0x80, 0x5, 0xfffffffffffffff9, 0x3e831a20, 0x1, 0x6, 0x200, 0x80a, 0x6, 0x3, 0x3, 0x9, 0x9, 0x1, 0xe145, 0x20, 0x1e6e, 0x2, 0x1, 0x100, 0x400, 0x6, 0x8, 0x3, 0x6, 0x8000, 0x2e, 0x7, 0xd5, 0x6, 0xc45, 0x5, 0x100, 0x3ff, 0x0, 0x3ff, 0x9, 0x1, 0xffffffff, 0x7c1b, 0x5, 0x375, 0xffffffff, 0x2, 0x1f, 0x7ab9, 0xff, 0x1000, 0x1, 0x2138, 0x100000000, 0x5366, 0x9, 0xfff, 0x5, 0x40, 0x20, 0x0, 0x19d, 0x4, 0x6, 0xfff, 0x6, 0xd241, 0x8, 0x8], {0x77359400}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000300ffffffff00000000080001007069650004000200120fd1d1e487cc5c604daef67e7be9e8e3c8750fae1c61f3ede26c88174da61336482772ae843dd14e5e41823937590271ba84c407d84fcebe5e487744616a0a3269c5935dfd700e9cb70fc8530a86faa882fc2a56ceec315a2912"], 0x30}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000040), 0x6, &(0x7f0000000100)}], 0x125c2f739a2bf92, 0x0) [ 309.117258][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.126077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.167567][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.206052][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.216484][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.226685][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.233887][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.344691][T11774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.355202][T11774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.387999][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.397302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.406610][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.415566][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.422772][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.431175][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.441080][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.450937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.460744][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.470130][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.479870][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.489321][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.498239][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.507706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.516800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.650266][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.920978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.930388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.938939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.946793][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 13:44:08 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x181000) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000180)=@gcm_256={{}, "2f1f4a5e53eec537", "c2eaf54a911a1c99a98d409cbf06890a8204826d4ba9b9c0a2932133221afa19", "f8f8a240", "1e93e61d637ad3f4"}, 0x38) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x40000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0xfff, 0x4) sendmmsg$inet(r0, &(0x7f0000000540), 0x196, 0x24040000) 13:44:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="66ba430066b8090066ef0fc04700c74424000d000000c7ca442402b30b00000044240600000000011c240f233748b807000000000000803e653e0f6fc00f21f835800000d00f23f826d8ba3e000000670fdaa8f27f0000b8010000000f01c1c4e1aa5fe30f20c035000000800f22c0", 0x6f}], 0x39, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 310.391331][T11831] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:44:08 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) init_module(&(0x7f00000003c0)=',user^security}\x00', 0x10, &(0x7f0000000400)='eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x102}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc000, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000440)=0x1) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff98, 0x40002006, 0x0) listen(0xffffffffffffffff, 0x0) r5 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r5, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x1, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x40, 0x0) connect$caif(r7, &(0x7f0000000340)=@rfm={0x25, 0x3ff, "5e383d78c361100a6f7c0c5502646c4d"}, 0x18) ppoll(0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}, &(0x7f00000002c0), 0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x289, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x9, 0x6, 0x400}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = getpid() tkill(r11, 0x1000000000015) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_IFALIAS={0x14, 0x14, 'bridge0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_hsr\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'gre0\x00'}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "c8e3e6c79cb61fcdeef8ab41666b6e7720"}, @IFLA_NET_NS_PID={0x8, 0x13, r11}]}, 0x8c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r14}]]}}}]}, 0x38}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r17}]]}}}]}, 0x38}}, 0x0) poll(&(0x7f00000000c0)=[{r0}, {r9, 0x1000}, {r12, 0x6001}, {r1, 0xbbabfe25f54ac8ce}, {r15}], 0x5, 0x3) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 13:44:10 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40a8090) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0xbfdbad221d25d2f8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000d001}, 0x80) r3 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x9, 0x800) ioctl$KVM_SMI(r3, 0xaeb7) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x103020, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x9a, "35f38ce253643144cfb4d810b1aa6367ddd1718abf2de529988c3afbb7525642a17d36635328d53156774f4ae96870d57f05e2d810cb2e13f65049099d6e6d4e89658268ad2cf5e127e097073e2f6ede44f16274bcc88208b0c4ddf70ab5a4aef79c5537e2e995565240cead4e16643acd8883f2b90d30fcbbfbc4818599f3a39746c619bb522ad7355f3b7c7263ba4d907c991fab98db8355c6"}, &(0x7f0000000500)=0xa2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000540)={0x74, 0x800c, 0x1, 0x1f, r5}, 0x10) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x1501, 0x0) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80200300}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa2de83ea63cc8d97}, 0x4) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000006c0)=0x9, 0x4) r7 = creat(&(0x7f0000000700)='./file0\x00', 0x11) ftruncate(0xffffffffffffffff, 0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={0x1, &(0x7f0000000740), &(0x7f0000000780)="4e3ef40c066e1b5c4965eea9cdcd547de894adc818164fdcfa969c1561cfbc74"}, 0x20) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x1000, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = semget$private(0x0, 0x3, 0x0) semtimedop(r8, &(0x7f0000000940)=[{0x0, 0x5bd, 0x1000}], 0x1, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000009c0)=@assoc_id=r5, &(0x7f0000000a00)=0x4) r9 = syz_open_dev$sndseq(&(0x7f0000000a40)='/dev/snd/seq\x00', 0x0, 0x101000) write(r9, &(0x7f0000000a80)="dd2d7d203be8f42634e16c2024fa846adbdccfaaed5a5a278d231e958d567fc4ef6157669beb92f6e0a8737153f32e613258ff90f6d078744a959ef88acebfdc17ea4f144e3a90990a387aba1ffcf8c29f47fe0ba331305f", 0x58) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c40)={r7, &(0x7f0000000b00)="31b5ce81050fc029331b55009cba2f5754c64f4dff728b30a26ae28c93738c25088c68dac36a82086b48b54e0a2d680e528e39b780dc76745f7885345b167cd9615e2b4e72cde33f8f05d00a7d5ecedf05b79b0e6e998c2a9ecdac35b76bfa845882d17da2c4b1c73bb608cc39b34eb5d6450b1793423f3e7d6834053ba9f9dd11af21d0c05c53412c2b4598d61c46c923fc35562ba597b8e0fa57379ee4532d537abef4fe6697da2d6e211a52812e77a3afaa9e84c0ad4235c7b80fda21beb1fde4e583cb268eb617", &(0x7f0000000c00)=""/46, 0xc}, 0x20) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/cachefiles\x00', 0x8a02, 0x0) write$uinput_user_dev(r10, &(0x7f0000000cc0)={'syz0\x00', {0x4, 0x101, 0xfffa, 0x3}, 0x2, [0x1a, 0x7fffffff, 0x3, 0xfffff801, 0x8, 0x0, 0x5, 0xa50, 0x4, 0x80, 0x8, 0x81, 0xfffffbff, 0x4, 0x2, 0x95, 0x9, 0x1, 0x7, 0x200, 0x4, 0x20, 0xffffffff, 0x6, 0x7, 0x6965, 0x1f, 0x0, 0x20000000, 0x80000000, 0x1, 0xfffffffb, 0x101, 0x3, 0x4, 0x6, 0x6, 0x5d4f, 0x43, 0x9, 0xc, 0x10000, 0x3, 0xffffff9e, 0x4, 0x4, 0x6, 0x8, 0x0, 0xca11, 0x3ff, 0x0, 0x0, 0x3, 0x4, 0x80, 0x40, 0x4, 0x5, 0x4, 0x1ef, 0x20, 0x6, 0x2], [0x20, 0x5, 0x5, 0x5d4000, 0x9, 0x8, 0x7fffffff, 0x7, 0x6, 0xff, 0x1, 0x5, 0x1, 0x401, 0x9e8c, 0x4, 0x57d5, 0x3, 0x7fffffff, 0x3200, 0x5, 0x20, 0x0, 0xffff, 0x9a, 0x100, 0x1ff, 0xbe7, 0x2000200, 0x0, 0x71, 0x5, 0x2, 0x9, 0x8, 0x2, 0xb16, 0x1f, 0x3ff, 0x8, 0x10000, 0x0, 0x4, 0x1, 0x0, 0xfffffffd, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x6, 0x5, 0x144, 0x9, 0x1c, 0x4, 0x50, 0x0, 0x9, 0x7, 0x1, 0x7, 0x7], [0xffff, 0x2, 0xfb61, 0x1, 0x9, 0x10000, 0x7, 0x0, 0xff, 0x9, 0xfff, 0x2, 0x7f, 0x9, 0x3, 0x6, 0xffff, 0x2, 0xff, 0x5, 0x1f, 0x20000000, 0x81, 0x6, 0x9, 0xff, 0x4, 0xd4, 0xf0f, 0x401, 0xcb, 0x1, 0xfffffffe, 0x7fffffff, 0x4, 0x3ff, 0xffff, 0xb0d, 0x9f14, 0x8, 0x6, 0x80, 0x81, 0x1, 0x96b2, 0xb6, 0xfff, 0x186, 0x1f, 0x3, 0x1000, 0x8, 0x3, 0x10000, 0x9, 0x20000, 0x43, 0x4, 0x8, 0x474, 0x3, 0xfffffff9, 0x80000000, 0xb678], [0x4, 0x38, 0x0, 0x5e, 0x7, 0x4, 0x70bb, 0x5, 0xfff, 0x1, 0x2757, 0x80, 0x0, 0x8, 0x81, 0x0, 0x7b86cd25, 0x6, 0x1ba, 0x6, 0x6, 0x80000000, 0x401, 0x4, 0x1, 0x8b, 0x1000, 0x2, 0x3ff, 0x0, 0xb, 0x6a5d, 0xb92b, 0x80000001, 0x10001, 0x578000, 0x8, 0x4, 0x1, 0x1, 0x4, 0x100, 0xff, 0x6, 0x4841c1d5, 0xffffffff, 0x2e0, 0xfffffff9, 0x1ff, 0x200, 0x10000, 0x100400, 0x58e8, 0x45b, 0x1, 0x9, 0x3ff, 0x1, 0x9, 0x1, 0x40, 0x7f, 0x6, 0x3f0]}, 0x45c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000001140)={0x2, 0x4}, 0x2) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001200)={0x2, &(0x7f00000011c0)=[{0xff, 0x8, 0x2, 0x8}, {0x93a, 0x9, 0x1, 0x8}]}) splice(r10, &(0x7f0000001180)=0x5, r11, &(0x7f0000001240), 0x100000000, 0xa) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001280)='/dev/snapshot\x00', 0x345000, 0x0) [ 313.055711][T11839] IPVS: ftp: loaded support on port[0] = 21 [ 313.331815][T11839] chnl_net:caif_netlink_parms(): no params data found [ 313.432735][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.439940][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.448877][T11839] device bridge_slave_0 entered promiscuous mode [ 313.482809][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.490008][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.498852][T11839] device bridge_slave_1 entered promiscuous mode [ 313.594711][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.625528][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.685221][T11839] team0: Port device team_slave_0 added [ 313.695174][T11839] team0: Port device team_slave_1 added [ 313.757141][T11839] device hsr_slave_0 entered promiscuous mode [ 313.812470][T11839] device hsr_slave_1 entered promiscuous mode [ 313.851998][T11839] debugfs: Directory 'hsr0' with parent '/' already present! [ 314.147144][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.154409][T11839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.162195][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.169377][T11839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.332929][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.353104][ T17] bridge0: port 2(bridge_slave_1) entered disabled state 13:44:12 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0xf9, &(0x7f0000000440)="5a6786306fe331b6b8c2c90eee7546e0ebccc9cfd81688d36de970f21786ce7ad96042d52f1d63ec233d6e15edb754eab8f9a190fb9bef0eaed1c85c6b30c9465dac7f5b2c7e05e5053f8dba8993d6595c28a7932fcc820d201e4bc489626908aaefad61c86117765fa4733517693620d10796f64b7a68eaaee4c839d0e486e53ec842fa4c8221a698b4bc64df6e500cf1a4a97ce82d2baf6795574b08cf72ede0cc545a385c95e6b0c6c3675774836b88d251012ec470a468ebdb45c5a37b613d080e63e3b78f7a4fe7b8ff137db904ba8579b1b04060f0dc65b7013b65aa94de54790077ca879b973efdf1186475f9221729e2093bf49537"}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000380)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 314.608066][T11839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.695187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.703841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.719459][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.781895][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.791340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.801207][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.808405][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.816843][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.826219][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.835208][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.842394][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state 13:44:12 executing program 1: semget(0x2, 0x3, 0x400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x54}}, 0x0) [ 314.958427][T11839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.969018][T11839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.478695][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.488644][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.498567][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.510866][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.520328][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.530024][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.539599][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.548789][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.558348][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.567549][T11728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 13:44:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/tcp6\x00\xcfM\x84\x81\xdb\x1f\x03\xa2\xdb\xcc\x139\x86R\xaa\x96|Y\x8e\x00\xcd#\x1c]\x97<@\n\x04\x1f\x8b00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507eb1634239193b27400000000b0a3131e413f714f47ee62ba69b86cc17c7b7ba2af9b8b00423c48092c7564943be17b8ba8fe466e0437b2a3490156f54cbdcf8547644fd782264c339fd4961e346a065e234c026634bba626de7d0793", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) r4 = dup2(r0, r1) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000000)=0x400) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80068848", 0xe}], 0x1}, 0x0) [ 316.202444][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.312581][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 13:44:14 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x30ff}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x4020190}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r7, 0x0, 0x80000002) 13:44:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) connect$vsock_dgram(r1, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff}, 0x10) ptrace$setregset(0x4205, r3, 0x4, &(0x7f0000000200)={&(0x7f0000000140)="6ddb5c83457f0c3d18eb1080c461e6a828b8d7d51876ae043ce5e164898b28b335493b829bb4abb9632c53d5636a164adb62e2b2fc55b736cb9c1fc379cd28e612cee17c1ac7f3bc1c3f80bd0fa08bbe6f616a2a8c930056fda1dda631ed5289f33b2b1e4d97a811ac1554a249bf51ce8c501e3a478f53201c0dc4a7b0e5b7e845bb16ffe1d805118a61e1ddd2b84165e517968f6225ae45ec3cb3558ecf812e7ca53b2824a6b3cae3698e84906c", 0xae}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r6}]]}}}]}, 0x38}}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000280)=0x4, 0x4) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0012000a00280014000000190005407fffffff0022de1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d400", 0x55}], 0x1}, 0x0) 13:44:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @remote, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x0, 0x0, [{[@local]}, {[@loopback]}]}, @ssrr={0x89, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x0, 0x0, 0x34325241}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r3, 0xc0485630, &(0x7f0000000000)={0x1, "3ecad59a90dd759bd24c6f45e66cfcdc11a68191d1d103f6420a645061cdb84b", 0x2, 0x1400, 0x4, 0x200, 0x9}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000009, 0x12, r4, 0x0) [ 316.708074][T11905] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 316.716858][T11905] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 13:44:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffce7, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRES32=r1], 0x3}}, 0x0) 13:44:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='\x00Y\xd4/\x800\'\x8b\x01i\xe9\xe8y', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e53d8416f1a}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) bind$packet(r1, &(0x7f0000000280)={0x11, 0x0, r2}, 0x14) socket$packet(0x11, 0x2, 0x300) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r2) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0xff) close(r0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x1, 0x81, 0xc3, 0x3, 0x7e7d60bd}) utimensat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) 13:44:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x8001}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r3, 0x3, "9674a1", "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"}}, 0x110) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f00000000c0)=0x20000000000002, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="24000000000000002100000032000000ff030000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) [ 317.184286][T11924] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:44:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x420040, 0x94) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="74fa6a00000000020012000c0001fbffffffffffffff000c000200080800"/50], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0xd3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000040)={'hsr0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}) 13:44:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x400, @ipv4={[], [], @loopback}, 0x5}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db982000000000fab53b08d403ffff633b27e50a5d0da20a9683768c99f9768993c394780d445e9aa144175dd106736d17c3f2c876d69925143f0dc7ec6e2656578000000d000000"], 0x61) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x3, 0x5}}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x253}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) getsockname$unix(r5, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x800) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/123, 0x7b) keyctl$link(0x8, 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000340)=""/214, 0xd6) [ 317.507663][ C1] sd 0:0:1:0: [sg0] tag#433 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 317.517205][ C1] sd 0:0:1:0: [sg0] tag#433 CDB: Test Unit Ready [ 317.523787][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.533414][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.543136][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.552842][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.562482][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.572145][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.581788][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.591739][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.601348][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.611049][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.620712][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.630417][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.640180][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.649900][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 317.659579][ C1] sd 0:0:1:0: [sg0] tag#433 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 13:44:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "cacaf6fe4d3502d9", "e5ea0210f5f685661fe063af1b0ad281", "77800f00", "87be8898c3b68e99"}, 0x28) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0xfffffe6a, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007041dfffd946f610500020000e8fe0200000001080008000e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 13:44:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x400, @ipv4={[], [], @loopback}, 0x5}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db982000000000fab53b08d403ffff633b27e50a5d0da20a9683768c99f9768993c394780d445e9aa144175dd106736d17c3f2c876d69925143f0dc7ec6e2656578000000d000000"], 0x61) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x3, 0x5}}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x253}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_open_procfs(0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x0, 0x2) getsockname$unix(r5, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x800) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/123, 0x7b) keyctl$link(0x8, 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000340)=""/214, 0xd6) [ 317.841404][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.009767][ C0] sd 0:0:1:0: [sg0] tag#437 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 318.019342][ C0] sd 0:0:1:0: [sg0] tag#437 CDB: Test Unit Ready [ 318.025893][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.035552][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.045205][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.054894][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.064537][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.074292][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.083958][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.093632][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.103289][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.112953][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.122627][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.132306][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.142016][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.151619][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 318.161317][ C0] sd 0:0:1:0: [sg0] tag#437 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 13:44:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 13:44:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x2025dfdbfb}, 0xc) dup2(r1, r2) 13:44:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x101, 0x4, 0x8, 0xc0000000, 0x7fffffff}) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendto$inet6(r4, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 13:44:16 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x9) 13:44:16 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/packet\x00') socket(0x8, 0x3, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0xfffffffd, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/127, &(0x7f0000000240)=0x7f) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) unshare(0x40000000) [ 318.932557][T11971] IPVS: ftp: loaded support on port[0] = 21 13:44:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x576, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @remote}, 0x80) io_uring_setup(0x649, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x104}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xd0880, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000380)={r6, 0x2, 0x6e55}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r7, 0x7}, &(0x7f00000000c0)=0x8) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r8, 0x6}, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 13:44:17 executing program 2: syz_emit_ethernet(0x7c, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x46, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x4303, {{0x0, 0x4, 0xf}}}, {}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) [ 319.208122][T11978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:44:17 executing program 2: r0 = syz_open_dev$adsp(0x0, 0x9, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20100, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xd932d9fad529dc75, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x5, 0x638, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, &(0x7f00000001c0), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xe338a92ce3c72f53, 0x2, [{0x3, 0x8, 0x8848, '\x00', '\x00', 'teql0\x00', 'erspan0\x00', @empty, [0xff, 0x181, 0x0, 0x0, 0xff, 0x62c6806f8e113a54], @link_local, [0x80, 0xff, 0x1fe, 0xff, 0x7f, 0x7f], 0x10e, 0x146, 0x18e, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@local, [0x0, 0xff, 0x0, 0xff], 0x4e24, 0x32, 0x7, 0x4e21, 0x2, 0x8}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0xef31}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xff, 0x9, 0x6}}}}, {0x0, 0x0, 0xdada, 'bpq0\x00', '\x00', 'dummy0\x00', 'vlan0\x00', @broadcast, [0x0, 0x7f, 0x7f, 0xff, 0x7f, 0xff], @dev, [0x0, 0x0, 0x0, 0xff], 0xa6, 0x126, 0x19e, [@realm={'realm\x00', 0x10, {{0xee37, 0x1000, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz1\x00', 0xff}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x1, 0x100, 0x1, 0x0, "474a5eda1f3e70475306ed044e9b66568c7418cbf9a525d37483155237f40902b8c3243691b00fb0eb8652d63f71b11e9ea104ac2e8aa7f0b9b67a65d01fc0f6"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x58, 0x200, 'veth1\x00', 'hsr0\x00', 'syzkaller1\x00', 'sit0\x00', @random="e8eeadf5a613", [0x1fe, 0xff, 0x0, 0x7f, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x3, 0x16, 0x9, 'bond_slave_1\x00', 'syz_tun\x00', 'team_slave_0\x00', 'syzkaller1\x00', @random="19243fbd9ba4", [0xff, 0x0, 0x1854d6a3505f251a], @random="7423b07a04a7", [0x0, 0x0, 0x0, 0x1fe, 0x0, 0x7f], 0x11e, 0x196, 0x1de, [@helper={'helper\x00', 0x28, {{0x0, 'tftp-20000\x00'}}}, @arp={'arp\x00', 0x38, {{0x8, 0x0, 0x0, @loopback, 0xffffffff, @loopback, 0xffffff00, @empty, [0x0, 0x0, 0x0, 0x0, 0x530baa1de6e984d6], @remote, [0x80, 0x0, 0x69d55ed0c592d296, 0xff, 0x0, 0xff], 0x0, 0x84}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x8000, 0x2, 0x1, 0x0, "cc7b299aca3fd9431ed2a796dd95dbdc08ec9ebf177ac2c439999f805a1b38b9a6d8a6d429679e828d8808c7918e0feffc2ca84bf5a453059492ecb473490b45"}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x83, 0x4, 0x1}}}}]}]}, 0x6b0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x74, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) splice(r3, 0x0, r4, &(0x7f00000000c0), 0x74, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) unshare(0x40000000) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) [ 319.467867][T11982] IPVS: ftp: loaded support on port[0] = 21 [ 320.091997][T11978] syz-executor.1 (11978) used greatest stack depth: 53120 bytes left [ 320.172391][T11983] IPVS: ftp: loaded support on port[0] = 21 13:44:18 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91dd7106ca8f533b, 0xdb3fedb3c3734f95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000000, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/\x00~WMz\x0f0\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xe8\xd3\x83dx-c\xb6a(T\xb2\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e\t\x00\x00\x00\x88\xa4H\xce\x98]\x92\agm0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\n\xd8\x1e\xd8\xda2NDcq\xef\x1eu\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xeb\x8e\x14\x03w\xaao\xb3\x17\x00\xf18\xdcM~\b\xd5|(*g\xdeZu\xc5G\x1f\x81\x00\x00\x00\x00\x00\x00\x00\x9bS\x98\x17\xdb\xa7\x7fK\x93\xcf\xe7-\x19\\I\x1f\xb6\'d\xfce\x92\xe0m\xd0\xa7\xf6:\xbb\xd4\xc6\xe3/_\xa1\x9fnM\xc0t\xd8$\xfc|i\x80@\xc7\xe8\xb2q6\xfa\xd5~b\x89B\xb4i\xeeGh\\\x94\"\xbf\xc1\x99*Lv\xa4\xa3\x91&\xd2\x14\x02\xb9g-*\xa0\xf8\x9b\x04,\xa8\x98%-\x1e%\xf8L\x01\xbe\x87\xd4\x8c\x9d\x9c\r9\xfb#\x1d\xd7\xc0\xe6E\x81\x16c\xeaN\xb8\xfb\x06\xd2\x01\a\xc7\x9e\xb1\x85Xu\xc9v\xe5X\xe6\xe3\xf3\x16\xc4\x88\x03%M3\xec=c\x84\xeb\xc2\xb0\x87\xfdb\xa9\xa4\xe6\xd8\xe5\xeaq/\x1e\xbcW\xec+\xa3f\x9a\x91Tr\xe0N\\\xc5\xb8\x91\xbb\xa5a\xc7OzWcr\xdd\xeb2\xa8\xd2=7}\'B\xcb\xcb\x97\xb7\x99\x03\x85z\xb1\xb4\x84\xd8,\xb4{\x80\xec7\x96\f\x03~\x9b\xfa_0\x82\xc4\xaaD\xa2\x8cU\x96\xa66\xa5\xf4\xeb\xc2\xe3=P\xee\xee\xe2o\xa6\xa2\xbf\x9b\xa2\v\xb9\x9ewi\x94\x1a\xf2\x98\x19\x18\xfdR\xed:\x10-\xaeJ\x92{KA\xda|\xabl|\xfe\xaaKK\xb2:', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400012) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x15, 0x1, 0x4, 0x0, 0xfffffffffffffeb2}, 0x35e4ed281d171825) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r9 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r9, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r9, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1b00000013001707ed12806cd20010e52ffb0d61e18fbd2fe6a5dd", 0x1b}], 0x1, 0x0, 0x0, 0x2}, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1b00000013001707ed12806cd20010e52ffb0d61e18fbd2fe6a5dd", 0x1b}], 0x1, 0x0, 0x0, 0x2}, 0x0) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1b00000013001707ed12806cd20010e52ffb0d61e18fbd2fe6a5dd", 0x1b}], 0x1, 0x0, 0x0, 0x2}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r16}]]}}}]}, 0x38}}, 0x0) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x9, &(0x7f0000000a80)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYPTR=&(0x7f0000000800)=ANY=[@ANYRES32=r10, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="07e97bef70b7f6c0a6369dea560fb51d0f518231b02088610a0113d54911c14b9c40af696e10be75", @ANYRES32=r16], @ANYRES16, @ANYRESHEX=r6, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000940)=ANY=[@ANYRESHEX=r11, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYBLOB="aa790bcddc6ae733c9574117d789c6aeef97ea3d40b01884846fc53469066ea3a243aa43e7e149785e0e2ee1c0e453a9cc037d039384841144894ac66f180d0c96c0883be6c1c895cc3dfa876b650a2dd7687df9ab8d0c089027194ef3976ab987b207937074d11e7a615e368ba77ecb53a2e5afc2e8"], @ANYRESHEX=r12], @ANYPTR64=&(0x7f0000000980)=ANY=[@ANYBLOB="641552b5a5c814600fe26ed5d311c7846a4f119f7e0875be469040db32fe414ca0e3a7241a3926d6d3af3d406a800a81651eb40efeddf28647fc194b6c3137c3c728951534157bb991ce08000000000000009c54829d59b1bb1523c5d88c91f4b17223d34c3d3c176aaad5bdf09fb11778ab36df4852e251328f8e62cb3d6c4364f7b78cd63b59bf41a9dac0492601f6ad9c1539a2babb6e5f65a6460c6c8f2337d0f7d6316540e379dadaf8ef140e1099820758814d504b4e37d399ad64d7d097dfbee19864ad060cd1edb9e463ec17271c5b6c505e9f2ea9dc20618e209593b01351c895e7ed", @ANYRES64, @ANYRES64]], &(0x7f0000000740)='syzka\x9b\xe7\xbf?\x14\xac\xff\x93\xb0\xa39\x91\xa2\xc3G\xb4\xa6\xab\x111xMu\x99\x8a\xablq\xaeF\n].\xa9\xfa-$6 \xab.\xb6h^y\x8f\xcf\xa9%}\x198Lv+\xf5G\xe7B\\@\x825\a\x15\x9f\x8a\xd5\x8d\x88%\x16\xc9Ry\xc8ey\x00'/96, 0xa8f, 0x0, 0x0, 0x41100, 0x8, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xffffffff, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x4008, 0x80, 0x4}, 0x10}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000500)={r5, r17}) socketpair(0x0, 0x0, 0x0, 0x0) 13:44:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000140)='fd\x00') lstat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)) r2 = getgid() setgid(r2) getgroups(0x2, &(0x7f0000000040)=[0xee00, 0xffffffffffffffff]) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"}) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000140)='fd\x00') getpgid(r4) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) fstat(r5, 0x0) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000100)={0x9, @raw_data="da58615df8952de5570652bec3d29d54cb8231693f72a0d16e0555e83be1bc7a3b1e26f7236ad6c363a5f49efbf9367620b6b13c9d0f05b465887f0e380b2057e2a187a347a3e63e8c028b98aaca408d5bb002a76d66667683673f1277762aa918370e5066a981cb596051c6eefb5ed84619e56af9b41fa6c2e428867c597c9963ad344e1aaf088967a25fa8608676e1530cef180f0b1bf4d93b627028edf9ae8a241ef63475c09c88e5e73ce8dae624cb5be6a78e73a8f79f60d63980c47a05d96412093251021a"}) openat(0xffffffffffffffff, 0x0, 0x2, 0x1) pipe2(&(0x7f00000007c0), 0x44000) r8 = gettid() syz_open_procfs(r8, &(0x7f0000000140)='fd\x00') r9 = getgid() setgid(r9) getgroups(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010de040700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e640000000014000200080010009c00000008000e0000000000"], 0x44}}, 0x0) 13:44:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) write$UHID_CREATE(r0, &(0x7f00000014c0)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000013c0)=""/211, 0xd3, 0x3, 0x9, 0x3ff, 0x20, 0x8}, 0x120) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000002c0)) pipe2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/84, 0x54}, {&(0x7f00000011c0)=""/19, 0x13}, {&(0x7f0000001200)=""/152, 0x98}, {&(0x7f00000012c0)=""/43, 0x2b}], 0x5}, 0x8102) 13:44:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x2400) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r2, 0x2}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000400)={0xa, 0x4, 0xfa00, {r3}}, 0xc) write$FUSE_WRITE(r0, &(0x7f0000000440)={0x18, 0x0, 0x3, {0x3}}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x103540, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f00000004c0)={0x2c, 0x3, 0x0, {0x0, 0xb, 0x0, '/dev/vcsa#\x00'}}, 0x2c) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x100000001) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000500)={0x1, 0x8000}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0xfefcf60331864c43, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r6) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000005c0)=""/214) r7 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0x6, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000780)={0x9, 0x108, 0xfa00, {r8, 0x5, "94b782", "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"}}, 0x110) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r4, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=0x3ff, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000940)={0x0, 0xf, 0x8}, &(0x7f0000000980)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=0x7}}, 0x10) fchmod(r5, 0x20) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/qat_adf_ctl\x00', 0x208800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vcs\x00', 0x454800, 0x0) sendmsg$nl_crypto(r10, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)=@del={0x100, 0x11, 0x10, 0x70bd25, 0x25dfdbfe, {{'drbg_nopr_sha512\x00'}, [], [], 0x62b5f4cd2acad88, 0x400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x7289}, {0x8, 0x1, 0xce83}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000) r11 = syz_open_dev$cec(&(0x7f0000000d40)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000e00)={0x9b0000, 0x1, 0x4ebb, [], &(0x7f0000000dc0)={0x990967, 0x80, [], @p_u32=&(0x7f0000000d80)=0x13}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='/dev/vcsa#\x00', r5}, 0x10) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/capi/capi20ncci\x00', 0x30000, 0x0) ioctl$TUNSETNOCSUM(r12, 0x400454c8, 0x3) 13:44:19 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100408}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x68, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x40) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x604040, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x300000}}, [0x4, 0x1, 0x9, 0x6, 0x3, 0x4a, 0x3f, 0x5, 0x8, 0x10001, 0x6, 0x7, 0xe102, 0x5, 0x10001]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000580)={0xfff9, 0x9, 0x8000, 0x2, 0x4, 0x3, 0x0, 0x1, r3}, &(0x7f00000005c0)=0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000003c0)={0x0, 0x0, {0x9, 0x7, 0x402e, 0x8, 0x8, 0x7, 0x0, 0x5}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f00000000c0)={0xffff, &(0x7f0000000080)="8c1b4842a4362221"}) socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000640)={r6}) 13:44:19 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000000)={"f03df277c22bcae0caa85d8f8e40042d2a5db150b19db8ab11702662f519a375bf0f675786dfde725e80d928a834c8689c3960e34186ce5ebb45b6dbe1ca5c9ae51ec1a33f3514b3cc982ae1f2eb5d0cb6776361138b5620365d3691d179b1c3a4a097322804d8e08f3a313562f1ad22f49c0894e4e5b6fab276a120b7579e3701985438cee0b82369d47624f6dd7ff9b5ad353a514281429c6d2e4975636dcee74ebcaf1f512a8c4340e32a7cdcc9e85cf7db1c0d5193533c77187a7e8f8596642ae3168ce3fba2253dd6c36d5bcb440f470735eaa61cf85d93f6fbe932a80dc9e4484b20ecd898cd78acf47e5ef6ee2ab0ffeaf7b9a216c26b792544c27922c4b222cb8c59f3428d7e6c387447a0c2a2295d20cb432fa301f3ac6165b22e35b649ba63337175dc2e723b62d5721c21d0f8cba3bca31bd434d70c32db4c6c799e9f1a050f1f66db12d1111135fc5a0e2aa0c018dadb42ad1ca89cdd61dbb0ff4068ff517c259f8c291d2a854b8d63ad98801c6b316ff65ae81553dadc0114bd7eaf1d6ccc7d2f37c1ff9524783d0345539337806febf077c4671b9fe1389949fa163115863b024e40f933a59f887c8de2ce371c32596059217cf748931aa8008b5b52d25ec291ce23eb5880bfaebc920e9cbeff40b4baf6ad2e8f092fcaed7d7b7a27233748b2798fdde8b5bafed9c917e0fc4b1ca6c473655e98d4775389130db49d4cb8f56df02deb5a13e715733bd5ef8e12cfe081b40fbf0bf0d392b17b1c88fdc9fdba178b82dc57bb844bd4a8bf607f982d01b3e9420ac687c8e61453c50827e829ae89d38afbad561197fe0d1307e862df03b137a2e110c97c38404b4b1d188243a5bb0d557a372b1d6509da5cf1b9b1ee35d0b1fc4f7f1f9eee0322bdffd8a24a0fe255dbc23dfc0fa46ab0f7de925ff39adceb7d77db77eed4d7e963143677b6849ebd0fef490e8a3e444fc15d7745a0dd5b38ab778a051e504b212e790060210a3af09353b1593a413c9c9c93f036b714bc4444c50c10d85de5be2b62d48de0f9d723ca245285e7afc3a32ab1b47866b88a4ee6be265d1928cdc117d38f1b9d473307b4488814b0403be50be9d1aa9d4b48aa684665d9a26cabd865b9051af6cb82a7f2e583784b9ed7c0c224bee87019b2741e78d741ed2d589e8d07ab9f8506998062eefe44e6bed43f03c4f31fa1ccc54b3f0321f2188abac2bf36d274bcd3463fb50f1a85111dfbe274a83de3c57248bd0101dc9ddd4c9bc0241755ed236311ff2338b15592bb10d41b89a2944566e4162ce7f419487b1d085012e4a27f5976efbc8e89117349e20289232d1153f831ba66acccaae93b3e84b8c1aef46b3f6a8556d6fdd69382fee3a24ae432d018642305e72e8e5b4ffeba4bba00bcb4e74c7e44daea844edba2385262e24478d1709c8ae6c334be80f9bd"}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r4}]]}}}]}, 0x38}}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000037c0)={0x14, r7, 0x1}, 0x14}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001ac0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r12, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\a\x00'/20, @ANYRES32=r12, @ANYBLOB="ecff120000000000000000de"], 0x24}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r16, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\a\x00'/20, @ANYRES32=r16, @ANYBLOB="ecff120000000000000000de"], 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001bc0)={@mcast2, 0x0}, &(0x7f0000001c00)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000002e80)={0x2ac, r7, 0x2, 0x70bd28, 0x0, {}, [{{0x8}, {0x158, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x7, 0xdf, 0x9, 0x4}, {0x0, 0x3, 0x7, 0x81}, {0x67, 0x14, 0x8, 0x7}, {0xfff8, 0x3, 0x7, 0x1000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r16}, {0x130, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4801}, 0x4000) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r20}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r24}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe8) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r26, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r28}]]}}}]}, 0x38}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x200, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r20}, {0x1e4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x20080844}, 0x4004009) read(r1, 0x0, 0x664a7364) 13:44:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="d80000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0xd8}}, 0x0) 13:44:19 executing program 0: socket$inet6(0xa, 0x80003, 0xff) ioctl(0xffffffffffffffff, 0x1000008915, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4ef27f454c460000003a006c00000000000416004414050300000000f1449c08c3bce5990000000001000000004ebeed284c4529d864fad5"], 0x38) 13:44:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x88) r1 = socket$inet6(0xa, 0x3, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x20010, r1, 0xc85cf000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x8, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f6, @dev={0xfe, 0x80, [], 0xb}, 0x401}, 0xfffffffffffffff8) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc) socket$inet(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000040)) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) socket(0x10, 0x3, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) keyctl$get_persistent(0x16, 0x0, r4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000180)={0x2, 0x1}) 13:44:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$getown(r3, 0x9) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000000), 0x4) [ 322.286260][ C1] sd 0:0:1:0: [sg0] tag#438 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 322.295883][ C1] sd 0:0:1:0: [sg0] tag#438 CDB: Test Unit Ready [ 322.302453][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.312086][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.321769][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.331513][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.341216][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.350848][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.360492][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.370108][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.379708][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.389323][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.398949][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.408552][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.418211][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:44:20 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffff800, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r2 = dup2(r1, r1) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x10020}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r4 = dup2(r3, r3) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000100)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x10020}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r5, 0x1ff, 0xfff}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r5, 0x8299}, 0x8) dup(0xffffffffffffffff) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) clone(0x4413cd00, 0x0, 0x0, 0x0, 0x0) [ 322.427841][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.437458][ C1] sd 0:0:1:0: [sg0] tag#438 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.579635][T12027] IPVS: ftp: loaded support on port[0] = 21 [ 322.597644][ C0] sd 0:0:1:0: [sg0] tag#439 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 322.607135][ C0] sd 0:0:1:0: [sg0] tag#439 CDB: Test Unit Ready [ 322.607218][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.623249][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.632927][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.642693][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.652339][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.661976][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.662063][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.681103][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.690723][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.700353][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.710033][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.719688][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.729372][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.739014][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 322.748676][ C0] sd 0:0:1:0: [sg0] tag#439 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 13:44:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') sendfile(r1, r2, 0x0, 0x802) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x6, @empty, 0x4}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={r4, 0x4f, "36a3419cf23935485fa41200b1558d673cf403b99d1b6a6e4fa6bd85ae86e4d7084e8702784e4f216e6fd924074034992c47674e2a0c63f0fe1e9b9ca1c772dba5e5cac17e63016d5705404b2d82a0"}, &(0x7f00000000c0)=0x57) 13:44:21 executing program 0: socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x401) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4044800) [ 322.988967][T12035] IPVS: ftp: loaded support on port[0] = 21 13:44:21 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xffe9) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x0, "e4b80b549026321cd9e8af965a413c51a8f281ab19f01dea1af56603ae52bb5d8981a539b56de71d901630e949f38ae55a7249cd4b425419bce9beba0778fb94c809ee5f1273a9a82dc736c48bb798a9"}, 0xd8) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shutdown(r2, 0x1) [ 323.107882][T12037] IPVS: ftp: loaded support on port[0] = 21 13:44:21 executing program 0: r0 = epoll_create1(0x0) close(0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) io_setup(0x3f, &(0x7f0000000240)=0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000000c0)=0xffffffe1) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507e6ffffff00000000000000003bc2ddb76282a64ef10e16df6edfbac91bcce8221518b9adcaa7dbf0a5f7a8f286943c14e757be2c9dc88abf1311578a2b4991", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) connect$packet(r3, &(0x7f0000000000)={0x11, 0x16, r7, 0x1, 0x9, 0x6, @broadcast}, 0x14) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x80) write$binfmt_script(r8, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/dsp\x00'}, {}, {0x20, 'mime_typeeth0$+}selfposix_acl_accessmd5sumself'}, {0x20, 'em0\xe1cpusetbdevwlan1!nodev'}, {0x20, '/dev/dsp\x00'}, {0x20, 'trusted{/ppp0}ppp1*.keyringwlan1vmnet0'}, {0x20, '/dev/dsp\x00'}, {0x20, '/dev/dsp\x00'}, {0x20, 'selfsystemPproc'}], 0xa, "c76e3bbac768e350fb558879b71a5110558f50e8655f9fd95ffa5b625c1e4aa16f59d3e5b129fa9f740ba25da9d6ef9766b77f0a6a5fd181af3da68132a2f1ea84a5fd0b5bc6c67f7bf41f266015feb4f5f8091e47236bf2bc5f3e56c34b78f81f46b40206a884ce7a1ecabdddf539fd10f0ae4b47d9e5ebf9a7480029ac2c87e80e87fd170f6a065be2b6995fd99a1cc9080c207fc3febcdebc83e7f62e332085c113b545a9c8bb742259edbd93245ec97fa46f1a81d474c55ad73efe80532f4a3df75674015d31b83402b5928274e4c0e43eb2fc1d37b4feedbfda43a32e4d84e18bae2415e72c6c8934eac4c0fb7130d92d72b37d1f8d0ba6fed5cca30024362b88332ae68408334c21635e1a358cef3efd5d2c28dbccf19134b1145dff9874a8c2bf4438c07d1d6435c96774ca8ddd47154ccaaff6c94ebe33fc1b4210f0393a18b8680f56e1a3449d4236b68309270dac0337e333732318588b93265ffd3b33920dbd38dc7a8e655229b93a47a0b14e262b6c68ea691f843ed101b902d2f5dce21453f42f103f102d2cf22f46501fcf9e8598b6536c01a106066c7be4b9369cb51c360c9872a0a7ceecbc24641e2b6b8adea3eb085d943b0a44bb0385465aa13dcb0833c56694bd217ee808465b550098d4f51e5c75d518eecf21fb8d1e93fb6d56c6046fb1606d3f3d2f0c1fbb4ab82ab7a7360dfa51660a3302726001702710214ada294ceda9b1dfc64fb9d299ced3d799c7d9eeef2723deefeeb59ab9431f2043714590ec47869d5f584aac380ded6024ad566fba6fff2ed7cdcab6fa4fd37dde7c510a9145a66eab5f6b7cc2cb1e3064446fa6cbfd78904685a34b7763c7736c1b342ec9ac910fa6e436b58c8b1bf86d5d123c75e9c7af4804dcb7fa8533d75566075f75c2e2e7a8f050688a75e74c732575de4de69260cee419caf61cdaf94c5f35ce6120c7671b6a2fd9b23fbafc40a2fe55d1dffd9237341d8464df6e918728b9827c5ff9e839f501963709ed85a4ed1fbf0edcbd4a2a158f2f69ddfdafe36024b8578bb14ea9bc175627a01bec1ac5c04d6ee455366c622ca47d5d6d6f616ff2811caa53c8c626d12a8115962ba31e4eeea7c5e7b060197e0410912448d8f7f99122f1dcb66164d2757ef8f61c3d7b25447dac21c9408ea5cf8dc3bc12750cdac3f9ef59c3efd33efa8f28c187fbfe095cb18f1a7211ab84a1a74aff4916e94da2f2ec61d7ab7b11938975c0f39c48e726bffd5da66da67cab5d4f4a60302dda30a0aab22e241391bafe0fd1fe864b30561da9bffd29b8e18aa3a22d4f5bc9061822ea29c81652ed41d7a22012dd7fd259e6b9ac5a8d7b676a0d444c78351d1d8cba2408b7cd7fd5ced38a0bdaf97192d906ba30faa23cc7f772191d4179d3fe5fd03c09b0797065affe0862966636cc25595e911dc98d764ef2ddbd51f8b33861f53dd0115ad1815710083b115a69cd87bd27ef0fcc4b6d2bccbfe09f5e6885e3acc843d0b8a775d304a8651966356ccea911c0feb1ee826571ec4ebd20ad2d86b2bdea50d65f4af087b77b634883072c2904225c364fd5af22a0490c61244af706626fe1c1cb7e1e707b229811efd73cca16cb51c56116cbd7a9950465e1d8d46d469bbcfeb852b4b84baf6f0e879d95a09fd98afceeca8c09d28cb07ad756c19bc4176b5d9534a356c2d29294cb70d2169b7b6f4eb99d65a49f168d2e12ad9b0578c9523fc430f4f6283db9d54859927682d451bbaa36cf530662604101d1079be9a1d8ebf2a4516c59669166eeb24c45639cd794923b5bccd901aef59c052d4521c5ad87f866288daddafdf4f7090a40f2d008467755e5377e99c23914ec49e6b7102904cde1a434b945858c7e2894c069126ee548d6dfb10258497a8aedc45a5a5f69bbc945a9068cd96982e0fb9b6a07f356b30204c74df426ddd33b0524d77ccce982077a56c4b9cbed2ab013f1bced12d0fb40cf8eaf94c3fa8f0a80f92da7cd2db597d694c3cdc5d2808a2656818f10db4ba487df78755d247ce84a9785f963c95d3be95ab4cb5a87ae84340751b6362816e137dbee550be97be16e63bf787226eb5f4d27da6593b3d516386d99621e36f9bb6f8e4441896ee7b078fa3d28b0f8644d6435de2505e9ac7157eeb05be7cb91cc7d48f399a9c25a6d07d5376f2cb22982d412feecebdf2dc8f5ece7f27c5328ef63736dda250f1b1183c42f49aa9d871b46287043589334ccedf30316b1b265ccc454be52fabe598bddf9d0c91a8cdf4bf7d4e71398be8046af4622ec7828f631173886c3ded21cbb41f0d93b194d27345a15cf89068147a0c2c24bc68c9835f0334616a5592a55b093bfba00becb787014d43615ae2a2ffcd92a0aeea57f1c37fd4881128ae580ad10d8146be0e63b95940f96f3d8a6a78315739ba755991832ea0cfafed7bcacf87b3a69c197f8f495ffa75610ee1dd8521e387a8bca3887022a24d16f69f895aeeaa5b3341f1def4b7028d9f3b098f58546189917b3ade72eda6d086bd580c10233f3b3c8c64460c56fd30ac62b3e8ecb3f1e70b2de7a6cc7e778b1147a19f1db63fa64b045bb1858e3599caa94fa5875a3fa46039a6647beea992fd2a3999405d489dca5ef9da50a1d31ae24e361ad0bd7235c6ca0ae1f1aa7c3aee8c18e5a8674f567e899ff215d59a5e560c1d2c925c582e3a94360c57d1a9293694c409633eaa8795bf09166179567ff5b2ae6a87e445429cc6fa3134e4fc5d68f5f28b41cc034846957604862e104d45a7b0dc67b497be007c293e8405ce204bdd1abe1aca7ecf06791d8a09289afc6c5eb026cbfea38287c929239c323af3b1a0a7e28594c4be047b87fd05e97eef19642e982bb046c35c4106ac1772be89d36182d813f1ccb12fce010e8d0888e3963f38404f50984a9eaf1dd2697a15d2916afa620fc2eff97e3d9cad9b9efc2dd44c84f302948fd5d83e73e7687e6279a26197cabd16fe122f7fcfeb4acf4c9bf35bb500becf485e4c3718169225211ca58e73eceb5e00e92891fca31f32da5b099c7ef564f725be8e33bc1ef84d1c77f0b70dce34de9f4cb8e47cb7c0ba58ad5ecfd810c8326eebf2b0d565d2b6b53bafa1a83718577151d44594eee0b2336d86f4de06f6463e320fc924e925f9a68c7b32c97c8086b23b6f955e9c843552c6c0a3f184ca36ff3b27cffc6c9d3d99f551fef41b2007fa439e6470a024d985ac5e9443a7a0283563985c6d5b7cea618007c7cc297939319d715aa4bff5686c2dc76dcc0b096b3b7736896f942d3dd828d101f9f7d8030734540e2e572263ff86d173388f93e35a88a611b60cc04ddc032473c5dfd1bcffc327ca0d789e7b0c01b4bbe0e01f1ea09f8d6a4e32d8e19fd3595b57d523edfa74dab08d246d9f55cd8f59775090ed351c171038b91186cdeba2ab3b9caba4ad60c2d9e5319d3de6e721406c95287472ff865f48e8a67a5d55d79859287e00d0293aec8b3607b5c1a789d5bc78f49a9d482bdf3786995cfd11f9afda866e35acacbb9fcb3acec0480c88886f5bd8e8a4eccfa5a1a66e3d5e895b84ad54b364be94ea30d66dd5e3bd8fb800597bff754a971a88a5b5952136ee92412f9573b3608c091e60e3799d27b727c89433ee00e73209aa9938b5c388a80ad22be6d5882a41f0441368ccc83a34878128c5f67b859efd7d31ba995d57a1378965ce2458a15f043e1ebbf63f2cf577531bf18028704c042e6614eb5cf4ef63478404e1dbcfc06d8e68db3b61d53602819ba735cc288913e882e69e8371e73879cb771380e6b349a3cdd4580db4a23827ae3e213b7a75af46b15db00fb79958b90b19ac2686a26f464a83a7f30650a19c9917e7b65f2c6052f32d5b38d26725fdc2a7d70573c5da188246c973b806be78a53f8d83f42ae077beb377db3848b39656a42a68255dd13c5d6260c6eaad4923a565971250a155cf96b9149b1f5d31504761d370c72edcaf778677d89ecde3704815dba1f570552e0796ed201992f9f14524ba903c56d768371d6e089a494bfc66e61dd4b35201eca0a0a656cd9c238bac58ddf0cf14037e2d66941f09b6457b2115e669bc39bb61998b9657cf34bd338c853ab1b5f196b8de6b7d477acc4d3f429d601d52f659cd129619039aa6380c8963aa3d008c97424fa54a8e1a536a61095f5a7e098cc4ffb09e222410d9160df77ffb20fea24facbf5fc8bc016c4549a91a284cb6140cbd79237547c65fabf961ccf5d23b29dced7760ccb10651c09d4e53950c119ad612c193dd875f6ab1fa0540e42af4b704d5a94be16ec25989102b7f289d67abbd1a2503dcce1cb235a24c1376774b8b9dd105ae6ed6329932fdc93bfc70c8e2fe043610e364fa887dbdf6b65b885eb1101058c657352c922b594d1e0d5f8d0bfc790ea55abc91e5ddf9511a5adc69ad82e84a768453d6759c7d079bce2887e9aca923b287cb0d9bf7651094c956e5c5582c550318be1ee6fd51676a9621f3cf9c2fe1943f05ef75ae692618158a5f433a6d35df5e5338123760c28fef3fdbfe09d90cd902923f51dcc02f2da7fbdd1dcad3aba6dd4f19882c21ff87a86b6d02c0b5c19aaccd9b74a3d94e8af5f81d23926588b4855a7dc8e1379097892e6b5f125fc415f43ea83edb8c1461d47bbf6b3ea3f719a1822997825038367c5ea0940db623695ba8f81b128439c795bf3fc6f1f7addcf6e31ece5edeba33d9c593bbee910e50d7314d6896f59590317036930b704aff84ab7ba8f112fd743a4fb33f28ced3d0a18f7dd03871fd777622ad5e3859db7f7c3569eb19736ee83cab8dbf7d29a16f1193b117c5d3dedb1c95475499143f9b8b1698e10c4f8afc46cec73ae35fb33223224118d8327611fac278cb27d34d5f9cc94f3b62055f33ecc8dc613feb0dec361bef6b9dd3c9a070be53df6c373f90f80c4884dd0de615976435887f546f420e9c83d6cba8a72a496e5d03bbaf113ed21799e8b3f666aea848ee66f0b4fb91c81ff0b5c56aab4ad489bb029152051ea41e82029fd4db7eefedf8845aef32194dc25b4f9589d023577af0e030bd15fc255d054d54bbae62145bc33c846b1b2314bd42bab7b09bb01604ff70a95601cb11ed830e05d5592aac530b1cb5dd141886d4062da30653d19f3f06b804d21ac53f63e8f6f053f11614edde5a786d5db83d98e79f8d6596d55f88371b9072c80045443cf4059f1fdb5bd5884558cf25230085af06aef2f5d674957fd75b3c160a774fc47c622550737187de65443678981c3ebf2d24b32fba1056666f598a6182301c917bd8a57f97c8f897f0889fe9c76bf5a84ff9eda2af6c7d299db4d45787f01d83812823034d4c3d2de933ad335044b18d4841da0e7c29079c28c4269459e50032381697ea8a7aa087b4dbae2b07a0d3606ed2cf02836abcfbc36806960f68674a87719511788ec47dc1a60247b2c9b0d1b9169336945a217f65a20d1fa07d928623f2585814de816401d07d6c05f9ba1c6e8a1a472d966bbe49b0acf6c59ab07b988deb3cd0304fc3047e383b666e277f0b8b3a2b96c554b4c052163a44ab4c57366e47a960aaf33415bcaec3af4182bcc3f99b3f414b827893c593cea9ce7c3ea0199c77302627c498962f1cb799e52ffcee6facd6a62ed616bf2fa5f4cd7619d8a093ab5c559e15d388fae97325f124675fb7808c2d104d3104c82b74ee04e6a49f74d9e97e23b81ced68168aba41265bc39e450e0fc50845cc70fcd01993fcff4d911dfb450578cc03c202ca75d46bd"}, 0x10b4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) [ 323.416538][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.532750][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.576172][T12037] chnl_net:caif_netlink_parms(): no params data found [ 323.651937][T12037] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.659115][T12037] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.668605][T12037] device bridge_slave_0 entered promiscuous mode [ 323.684243][T12037] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.691403][T12037] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.700296][T12037] device bridge_slave_1 entered promiscuous mode [ 323.732179][T12037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.745542][T12037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.826542][T12037] team0: Port device team_slave_0 added [ 323.855775][T12037] team0: Port device team_slave_1 added [ 323.966593][T12037] device hsr_slave_0 entered promiscuous mode [ 324.023581][T12037] device hsr_slave_1 entered promiscuous mode [ 324.082983][T12037] debugfs: Directory 'hsr0' with parent '/' already present! [ 324.419888][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.485799][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.494727][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.511248][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.557147][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.566638][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.576486][T11945] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.583715][T11945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.684622][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.693410][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.702770][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.712113][T11945] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.719335][T11945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.727937][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.737866][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.747848][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.757621][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.767097][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.776815][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.786295][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.795355][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.804426][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.813527][T11945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.103970][T12037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.117812][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.205442][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.213824][ T2825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.247932][T12037] 8021q: adding VLAN 0 to HW filter on device batadv0 13:44:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x100007ff}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) write(r1, &(0x7f000018efdc)="1c0000005e001f0014f9f4ff08000000060003400000000000000000", 0x1c) 13:44:23 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3aa, &(0x7f0000000640)=[{&(0x7f00000000c0)="59e6d1a90d12f52e254778d977e3e9545e068a32e492b35d26878bb97697575485a9c1a2478f6e52cb9ddc05bdd5f90b58c56226db184843084156ac9dea006e67fcdc0692de3a2641ccfff054c09da7cd48e02725f8fc7c7ca29adbe1778fffb33a1e7e876449f99577243901837ed4a8f436585599f14a318d9873860216592c5bc3adcb21f4540dc9ab50c2573c718ad0c4ea83303b3d3a34a4d8a3037cadc585715b42dee9cf05424dd053908f38788264281f14cb6cf92da3ae72218c1dc6267f951a61200dfe9f98908903a4d67bf79e0e637f6667c7aa5ee16fd7538af60ef6b3f280d4f80b0512236c794e3a29fa2010c5c2e5"}, {&(0x7f00000001c0)="18d5f183d8ac11a0b22fcf9a4f8b8062d49cab6bce6ca800d66f05c2dd13c4684bba4f6e24b7d85548a746f2147862f827e7cb608e11d0164fa8c89baaa9f96817f6efa041a9b043112982e65c2c5cde17ea086c381ee12e90316c6c753763a1bb87503b8c11925a2fe3a636ab01048b2d57e7fc2fcfeb693bbca8cd8a022ca9f27041d71dc7456ff8d5e2514b7d04b3bfa2f67a9a7ef85d441425c0981143a35e4f9cf3430a3dfb498cfbebd4c019170f7743d9fbcd817df4e3f22c5c0fc43dad380dff82e276719a276ecafc50c0c3396ef37ca74f7da925c03639c57f8311f53275f959d0f25485baa274fb1110"}, {&(0x7f00000002c0)="b515b798baa1e77e8a587056f64a4ac6cae38b1f3178cf491047fbb344742bdab3a9e65b536092c145af092f454a7da084ce81e62556cb7d4bf568d4bbb7efdff6"}, {&(0x7f0000000340)="7605f31132060525cfec237178b775d71022549ee69a13912b9a0fd4ed60ceb1274da3373172e7302b1aa29011a0639205b2d79e43619b9b7edb7a326a3a8feb181c8d13765a94d1888f45a3ef3e51b579ac0c804b172055a009afaf453be3758da795d3ed2b9454be5b605d8df6e8017bd564d7f35fe6d9dd4293b3"}, {&(0x7f00000003c0)="11521e226f85f8685163b4f2f1efd3d9ae08ff519cd82884b1a8b587dfc6a67308e48dcac6823277c872b41847389ecc6aa6ba1baf90fb2449afbf4f306719d1fcd36f024b3f14cf3deffa9aba8303e60a294ada6000ee808f6ac2b744f36d92fd41be95956f8fdd161564822a7a4b396f5ff7360db8e4be6daeacb2454be3aff0bd79e0c28c41a85a5590affbe50887b6f5c43f1c0b5216cbe7"}, {&(0x7f0000000040)="9d8ce67c9f46d118ada751f081436f0158c60ce052d97c72d181fe6792ffb64dfbdf0d0c92db22dc6121746003c996caa18ff2684060c4"}, {&(0x7f0000000480)="d2f6c9b07710047e4f22cbc855d41cf6c019beb7ff9e5087e593b99fd118ba4a57f132d54568c9c515ca2f0c06d0446997497b99c9e4ef9b4b2c6c8101c9a530fa6cdc910cdaed1ea3c51843bcfa6a632bb15b9a26c9b7e36db877dc63ad18ceaf7c7c31570ec1d31dc5c8ebcf416f280c67ec0e0eec23aa230ff81dfbfd3614d4e954ff71de947ed167"}, {&(0x7f0000000540)="cc8c5cfe45cc18fbc543754f086fdbe5035f6ce09dda4ed376a6229bb71984b76c477e63417ea4de273ea4b3a144", 0x1f0}, {&(0x7f0000000580)="368852b9250ad165119ca14257dd42c9747ba90d16327a571a28ac17f46e8fe160a85a9565ac1e22aa3e226040e49ac222dab043b210a03b1c7dc633625d596dd1c9f53018f3a98c2fea0c686d3371f6da0bb0a2e3ed22f0c87a55604420673b6f2f87ebb3ce8cedff1e380de15cd6028ba17a820bd56657092d571a7d07aa4931e004"}]}, 0x0) 13:44:23 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x30}, 0xc) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x58, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300), 0xc, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000042008000"/20], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) accept4(r1, &(0x7f0000000280)=@caif=@dgm, &(0x7f0000000100)=0x80, 0x81800) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfd94, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 13:44:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000001c0)={{0x7}, 0x2, 0x1, 0x79, 0x400, &(0x7f0000000380)="52a0daaefca1687a12609bcc146da8c6d6d69d02cae7c79de3aa5528c46ad3dd1b5002895c72a7bc55467032ea8b809c755a0cc86bb924147078bfa8880d4634b1e4e9e0c2a63917e130aed5606b4c110d701f37e32706ce58fab8efe390c70b4503d30486d08fae4f1d7eea3ea134de52b39b761887297ddf"}) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x80, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x81, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x1331045151d1a20f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x1ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 13:44:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x233, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001a008100a00f80ecdb4cb9040a4865160b000000d4126efb120003000200000040d819a9ffe200000000", 0x2e}], 0x1}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x9, 0x4, 0x5, 0xfffffff7, 0x1, 0x40, 0x5, 0x3f, 0x4, 0x72d4, 0x8, 0x5}) 13:44:23 executing program 3: unshare(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) setns(r0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="a3e92e7771878a70627ed3a30dd1ad77"}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r5, 0x8001}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x40, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0x7, {"43ea2acc411bfee195783c8606cb3c6a"}, 0x400, 0x7}, @in={0x2, 0x4e21, @local}}}, 0x118) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 325.704626][T12109] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 325.757094][T12109] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 13:44:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x2, @rand_addr="5314df710882732548030fc95b3654bc", 0x2}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="5faef4e7a4829e64460a9fd6f6571f2608ce71a0fa16b654e0a83fb356b261e1b91c9857bddee9ad7e50078dea02059cd1e819077d08a26a3e264891ea2faa648c91dc7ec726aa65a75cf513bae726a1e3428faefdbcab9106c55a06da58814cba70af72f7957ce179fe43cbed4137", 0x6f}], 0x1, 0x0, 0x0, 0x4000000}, {&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="c9bc15c2e40c826adb5232", 0xb}, {&(0x7f00000002c0)="6da9289feccfe71f4b27dddffb0d3835a2e492986ca26cafb10e09a48cf6ba361c19cc494456390e72023a96edca4d3fd39f38444b080251dc6ab7a21cb9aa79b3d29f1c686019e26c213553d7381231a18531de5cd31b79e56a3086b842138675f4f265c798c9e21f63b72b6ae8bafcea048b9b127f37bc98ce283f6a3ca9b181530acd78dd0596eceffe2207469cf8dc78d21e2c42d0e57fe04457369b3ca89fef94b7ab5ba03ee81d092070b204e299c5cef9a75a9a5bb31df0691a61e6d05b43abf314cf8b6ebeff5d4d70120e2ca9320e1574e2043d8d68bf4bbb5f796ec37c6a107cf1f7521b89fd2ca530", 0xee}], 0x2, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1d}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x5, 0x401, 0x6, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0x70, 0x6010005}], 0x2, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, @in6=@mcast1}}}, 0xb8}}, 0x0) 13:44:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000071103f00000000009500ea4f85fae07e973128a8317ab98c29174d72218d3418206e71ab5fdc7551c8dc690bbc9a4f0136d15d55997b5603ef99420663956565869870bf5bacfb5de433d170de5cf6f7010dc590c2c1653d45bc1b558c16e5101d9946c61b95a895aa617778d8317046a4b831182d567725cf2a7bdc669784847710969da466a055753b78d5190eddba992979b49de37a86c8ad85ed2a7dea270b35bfd90af41c17eec5c32be7a471d2d2c296a475bbb29f043dd911076241bf997363c096"], &(0x7f0000000300)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86\"f\x97\x00'/248, 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x70) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x202000, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)) 13:44:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3298a76d699010000001379000025da3f0dc7ec6e26565780000000000000000000765c7e5293f81a76e5cb8b77c2277b09c1453b21ba1cbb4547ef5faa8d1db9445dc8b767238e5d934b812ab4"], 0x82) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x40002, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f0000000580)=0x1e) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_netfilter(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5304122}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2f4, 0xe, 0x6, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}, [@generic="48be6d819a18903417ccfbdcf2f36a4739167dedd3f95ff70d928894079351bd4a16a894fe411ae67f299c78910966c38c75cb017347933aec80ba3e2dd956404ad142aea9171e5d077980e2d844b2b58e9cdd89e4112b4726eebcc29b0573f85f4de109199b63416a097cf7ded8a063d32c73563864e7f6da22eb405fe56207b8b81aaca1f168969606829e61ba8c668c2adf6ac4f5f490d36fa8f768b500b2658b466f3b253b8648d18d5f28f8c6b3b6b08472a5d8d5ce97", @nested={0x21c, 0x61, [@typed={0x14, 0x48, @ipv6=@mcast2}, @typed={0x14, 0x29, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="a22be8f7e13083ac17c380879185b134dc8201637e9754139812b428ef487bf7d98409027b9c220f5cbe8e55aeb561899911e4ef0745ffb44cfa1341f5b618a457eaec1905705c31ea5167212c5a06a154453f02091446c73510123363a330f0e29569ab92", @typed={0x4, 0x6e}, @generic="75b7d5a620c2c0b32b71a51742c2ead7a38af2bd269e58e68d8040ebec827a85ea76e3a5d2a538008eeae0b6f6c1927934cb8cc154495e5b2ce30c306caeaf4dc16b364dd687a93abb234cef42b728e1ce9fabaf63437fa6f839e89ddd43be30ec87f9526acf4d5edf4b9ff0d19969e1f3744253be079102b98af2898626e88dd93a149405dfc69da8fa329ce29bf1df1cbcf224febc4c68a4f1a83a1595693712d74b8f4909c28b8dceacf91a6cb18ce37cd6f695c79e00dc44aff438d7e8ef5b45a21b5fbb2ca50a53a471437a7cec430d9aa687da0bd1564ab809b73b8debf0e0d85fb8fdf3ad041db5085196", @generic="12384d85bc5e3315cd933221b7fc2cb1896e272c887d514452e20bc7bba73ce2dffe0fbd9eaf93ac8b68b3a9ca56f16af4473cd4ce335728a767c01588fa0b8e503a6f1b9da6ab472225cd37b100c0528b0bd69297f707724b4014a9ed9188927420c5eab3118e4be66b73ddff79c3e741970bfd444c98425b7a52a6593a9c098cebcd7edd2585c2c6427912bddac8c6557cfa0bd9b333f4"]}, @typed={0x8, 0x55, @u32=0x9a10}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0000000000beb9e3be00", {}, 0xe3}) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r3, &(0x7f0000000040)=""/123, 0x7b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x802, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000100)=""/63, 0x3f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000240)=0xc) r8 = socket(0xa, 0x802, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="0bc6915150e826b1da0a6f4ff097ce73"}, 0x1c) fcntl$getflags(r8, 0xb) [ 326.002568][T12114] IPVS: ftp: loaded support on port[0] = 21 [ 326.091680][ C1] sd 0:0:1:0: [sg0] tag#440 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 326.101209][ C1] sd 0:0:1:0: [sg0] tag#440 CDB: Test Unit Ready [ 326.107822][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.117460][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.127136][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:44:24 executing program 1: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x100000) fanotify_mark(r1, 0x60, 0x0, r2, &(0x7f0000000080)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x202000) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x70, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_OPERSTATE={0x8, 0xa, 0xdb2e}, @IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x1}], @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x70}}, 0x0) [ 326.136786][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.146411][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.156057][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.165694][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.175368][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.185008][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.194692][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.204324][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.214018][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.223666][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.233339][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 326.243131][ C1] sd 0:0:1:0: [sg0] tag#440 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 13:44:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x240001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000380)={0x3f, {{0xa, 0x4e20, 0x0, @local, 0x7fff}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000e70700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001a000400020008001b0000000000"], 0x30}, 0x1, 0x400000000000000}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa8001, 0x0) statfs(&(0x7f0000000040)='./file0\x00', 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) 13:44:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xfc00, 0x7, 0xec, 0x8000}, {0xd75b, 0x4, 0x5, 0x70}, {0x5, 0xae, 0x1, 0xbb}, {0x3, 0x6, 0x0, 0x4}]}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c4a6269f26058f10600174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4138ae84, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 326.778074][T12126] IPVS: ftp: loaded support on port[0] = 21 13:44:25 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0xd0a, 0x23) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xb) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9ce, 0x4) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012161, 0x0) 13:44:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1134, 0x1d, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x1120, 0x8b, [@generic="0f15ffdd96cdad6a365153962a7a046cb5cbf08b5b5304426cee1467abe83edd93bd5b635bb7ffda87c91664506e4bb213ad", @generic="c5f12fee0e27749f3cae06b2eb267548213360a2464cc8a0fe1bc2", @generic="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", @generic="caeadf8024b97969b29bf51a1a28d26bd7a035cb56251f7b4fb3f9589911296abfb57d24c481805d9de4948c99b5ed8528804eb2d6a9eb0b62b14000a9470ff280de0eed159cdca29c68fc64983c532c4556ecae16e0fd5bd48d39521df3712a1829d1276216e1d393b8c033aae473d98d6603e1d8b3e0984606e1d197fbd4aa644eac55e190ad6349da1498ca85d34ad82bfe2090571d694b92a9e169b437bee468a5f5db54294ac454c63196d8", @typed={0x14, 0x25, @ipv6=@mcast1}, @typed={0x4, 0x41}, @typed={0x8, 0x95, @binary="bec4"}]}]}, 0x1134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x2b4) 13:44:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) r3 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000000000, 0x8000) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3}, {0x3}}], 0x20) syz_emit_ethernet(0x32, &(0x7f0000000040)={@dev, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ec9c56", 0x0, "edde92"}}}}}}, 0x0) 13:44:25 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000033000200000000000000000082000100ff000000"], 0x18}}, 0x0) ftruncate(r1, 0x66e3) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x208e, 0x200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xf4, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48df}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast1}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x400c002}, 0x10000) write$P9_RREADLINK(r2, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 13:44:25 executing program 1: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r1) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f00003b6ff8)='./file0\x00', 0x10000000080040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file1\x00', &(0x7f00000000c0)='./file0\x00') 13:44:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="86408e1bcc07ca6716204ac075d9a4b94a6d5c9848ca6b3a3206e07310b5945b15672c27a823b3483f540f35158a5879ffb1"], 0x1}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x7c, 0x0, 0x800}, 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffe4, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'idz'}, 0x0) keyctl$set_timeout(0xf, r3, 0x7) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000000)=0x400, &(0x7f0000000240)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:44:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c289030086dd6010000000303a00c9d92ff47ced30583c92a7db335da1b6ff020000000000000000000000000001820090780007000060c5961e000000001901020000000000fbea56eec4f0181903000005000001ff050000000000000000000000000001"], 0x0) 13:44:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, [], &(0x7f0000000100)=0x1f}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000100)) 13:44:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r0) inotify_init() syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4afcba4e9faa8a5e) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r6, 0x1}}, 0x18) 13:44:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8001, 0x30, 0x7c0000000, 0x9}, &(0x7f0000000040)=0x18) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r3, 0x4, 0x1, 0x8, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000079efe0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x320}, 0xfffffffffffffef5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x2465a, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x3) sendfile(r4, r2, &(0x7f0000000140)=0x10000, 0x100) 13:44:25 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1, 0x2180) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x9612057c9890d3b5, 0x1000000}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8242, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) unshare(0x60020000) 13:44:25 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604059b800142f00fe880000000000000000000000000001ff020000000000000000000000000001358088be", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50de2371ace76660307102acf5bdf4720a00110090780000ff8ba9c1c7bf3e5bf468ee31dd317d367fa53cff70fb56"], 0x0) [ 327.818312][T12192] IPVS: ftp: loaded support on port[0] = 21 13:44:26 executing program 0: socketpair(0x5, 0x6, 0x3f, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/se\x01\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000003c0)={r1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) mkdir(&(0x7f00000002c0)='\x00', 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x3) write$binfmt_script(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="00e5c50a1ec1a2ba9cf60be92cd2ac38c53435e4815f594263f0020f2c9321954a9ec7c33f7934a2e0d3f3498b41a72643a6fdbdd8d75b2689feb8e142b485ddc7841ab57b91604adf28a5dd7f03a2861324fbf834db938b5459661ba4e08b928b2f97e2d8614dc9219da363380a945592b232969e399b5eef7044458cf11568809025c32b67a334ae974ff3a4bb76c386c6b4841c0d7390a3450f604823e87f5736ec603db3ea1d9dd9440600e399e44b365219e5e98c0ff91f457f992943dafaff6e3aa2cba618b51b7fe7cee75c2d33761d319a3ee64433f190c7f141aa36935ac96c784e7cb35751640676af349b2400"/252], 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x100, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="dcebb9315f250791605254a96507d07c53de65d3b9001f604f200b617f3d622865bfa6f1272394c3"], 0x10) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xa7) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000440)={{0x4, 0x81}, {0x9, 0x20}, 0x3f, 0xd8ecf97a06507046, 0x80}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0x40085112, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0xffffdffb}, {0xa, 0x0, 0x0, @initdev}, r9, 0xfff}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r9}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r9, 0x8001}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000040)={0x2, 0x22, 0xfa00, {0x0, {0xa, 0x4e27, 0x7, @dev={0xfe, 0x80, [], 0xb}}, r9}}, 0x30) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0x40085112, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r12, 0x40085112, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r13, 0x40085112, 0x0) r14 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r14, 0x40085112, 0x0) write$cgroup_subtree(r10, &(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYPTR64, @ANYRESOCT=r9, @ANYRES16=r11, @ANYRES16=r12, @ANYPTR64, @ANYPTR, @ANYPTR, @ANYRESOCT=r5, @ANYPTR], @ANYRES16, @ANYRES64=r13, @ANYRESOCT=0x0, @ANYRESOCT=r14]], 0x8) 13:44:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000040)=0xe8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "2f180b7723599347a4eb8fd35a8322c8d1cc1098c07797a229bafbde2a317604", 0x7fff, 0x200, 0x3, 0xc67, 0x10}) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ptrace$cont(0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f00000000c0)=0x6b) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000000)='./file0\x00', r2, r6, 0x1000) unshare(0x40000000) 13:44:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x149c00, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2b6370752000696f202b696d2010637075202d6d656d6f727920e572646d61202d6d656d6f7279202d6370752050635f7520"], 0x32) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x440000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000000c0)={{0x0, 0x0, @descriptor="4252d17b72e9088f"}}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x41, 0x0, 0xb1c55acb4f52ccda) [ 328.385546][T12204] device nr0 entered promiscuous mode [ 328.573056][T12219] IPVS: ftp: loaded support on port[0] = 21 13:44:26 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvfrom$unix(r0, &(0x7f0000000180), 0x832f1f7d, 0x0, &(0x7f0000000140)=@abs, 0x20e94f86) 13:44:26 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r1, &(0x7f0000000100)="ef", 0xfffffe46, 0x20000003, &(0x7f000031e000)={0xa, 0x4e32, 0x0, @ipv4={[], [], @remote}}, 0xfffffd7a) 13:44:26 executing program 1: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x1, @vbi={0x248, 0x0, 0x31384142}}) 13:44:27 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x208, 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x0, 0x4, @ipv4={[], [], @loopback}, 0xfffffffe}}, 0x0, 0x8, 0x0, "9fc72b543b28dd4728c3988b7adea76fa59f716c731782304d2a8b2baf8c1724fb01b86d7c1d88f3c7322926d8f0fcdb51b5df3ba8b696320eb85ae1bd8e6af048c54f27e0dad819d7cb50aaa2bc300f"}, 0xd8) semget$private(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xad, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x4, 0x1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) sendto$inet6(r0, 0x0, 0xfffffffffffffe1a, 0x59de2057440fad25, &(0x7f0000000040)={0xa, 0x4a20, 0x0, @loopback}, 0x9) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sync_file_range(0xffffffffffffffff, 0x5, 0x968, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, 0x0, 0x8000ffffbffe) 13:44:27 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0xfffffc27) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) sendto$inet(r2, &(0x7f00000000c0)="6f3dc760a1c732e797fc3206d06bf8eab4db3a78e112fd8928ed54cec8868def742580ff8ef714f8bac163a76532f65c45", 0x231, 0x91, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) [ 329.066071][T12207] IPVS: ftp: loaded support on port[0] = 21 [ 329.082023][T12201] device nr0 entered promiscuous mode 13:44:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000002c0)={r3}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0xffff, 0x8, 0x9, 0x7fff}, {0xc0, 0x8, 0xff}, {0xc264, 0x5, 0x5, 0x6}, {0x0, 0xf7, 0x81, 0x6128}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup3(r0, r3, 0x0) 13:44:27 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f00000000c0)="12000000a900e7ef007b1a3fcd000040e860", 0x12, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x23}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x10) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./bus\x00', 0x0, 0x8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f0000000400)="6a322aade2002468315514bb4615f85e84b2408c49e655179500636a5eeb9f3aeaedf2267b9671285db5fc9aba2eb773d007c48b4b951dd53d28cddf1717d027fb239dc7377e6dbe2aabe877b31434a5ff23ee03f5ba5f00994b541263b368e0c5d61542134cb368f129637cb6e42b9a326714324ef0ed423c5954237399062b9afd4afe33b276cfb6c89dcf4b2f29a7cc44b70e15c27c70f813a43fd8d9aeca541a490c8e8c8cafb2ab82a3dd3494c342a955d16bc1531b6f03fc555a387dcbdd89e497207186510b7c437e", &(0x7f0000000300)=""/120}, 0x20) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x803, 0x3) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) r8 = dup2(r5, r1) bind$alg(r8, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 13:44:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfe72, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) accept$packet(r2, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001680)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000016c0)={r3, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0017460014d5e769ee8368ae34230000000000000008001b000000000008000d0006000000"], 0x30}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigpending(0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x1000, 0x0, 0x1016, 0x1, 0x19, {0x3ff, 0x4}}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 13:44:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="020000000100eb00000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0d8140", @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="08000500", @ANYBLOB], 0x8, 0x1) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0xa, 0x2, 0x0) dup3(r5, r6, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000000), 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket(0xa, 0x2, 0x0) dup3(r7, r8, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="dfc93e7a40bf", @ANYRESDEC, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRESHEX=r3], @ANYPTR, @ANYRES32=r6], @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES64=r5], @ANYRES64=r7], 0x2a}}, 0x0) r9 = gettid() waitid(0x83b895581628fca4, r9, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64], 0x8}}, 0x20004850) r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0xcf4b3ee0a1fe067e) r11 = dup2(0xffffffffffffffff, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) timer_create(0x0, &(0x7f0000000380), 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r3, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/268, 0x10c}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r12 = syz_open_pts(r0, 0x2002) dup3(r12, r0, 0x0) r13 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write(r0, &(0x7f0000c34fff), 0xffffff0b) 13:44:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r11}]]}}}]}, 0x38}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r14}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7001004c620007050000f6cf89ecfd0a000000000000000000007891810babf537e32d489d3344bd18cf318bc7a8cf66f75b2f95d6909a8c3128a91020f6cda2a6083850be01eedd55782f033ba1722a4a018319ecc6d9cd2ff57ee72d3923969d825ea616797c860e260cd82ab0e97a03f592d1e99dec97a7a0b1355d569314a136e3980f55a0045e994c37b02c8abdae3c1dde8c69acdf124edb7d80ef5e0fbfe88f86aa12209734e76eb8f630e999d4bc381c5b4b782d915b5dccabb510986d906f127b2b35dc9b8ab3584595260a71bed148edf652c01528fd625656cc567b54e866b8cb", @ANYRES32=r4, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES64=r8, @ANYRESDEC=r9, @ANYRESOCT, @ANYRESOCT=r14, @ANYRESOCT=0x0, @ANYRES64=0x0]], 0x3}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x8001002, 0x5, 0x2}) [ 329.736076][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.782958][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.806837][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.915748][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.926760][T12261] bridge0: port 3(gretap0) entered blocking state [ 329.936288][T12261] bridge0: port 3(gretap0) entered disabled state [ 329.972761][T12261] device gretap0 entered promiscuous mode [ 329.980837][T12261] bridge0: port 3(gretap0) entered blocking state [ 329.988258][T12261] bridge0: port 3(gretap0) entered forwarding state [ 330.134512][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.146503][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.154221][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.343064][T12260] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 13:44:28 executing program 3: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\x00', 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="530000005da6aeabec1000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000c7ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a"], 0x68) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup2(0xffffffffffffffff, r1) 13:44:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x4, &(0x7f0000000000), 0x20a154cc) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@rand_addr="6b9d03cb73c11883dd187c9e1db32650", @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x0, 0x8, 0x0, 0xef, 0x40000, r3}) 13:44:28 executing program 4: setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@local, @empty, 0x1, 0x1, [@broadcast]}, 0x14) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x21a400, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x80, 0x2, 0x5}}, 0x14) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000200)=""/238, &(0x7f0000000300)=0xee) modify_ldt$read(0x0, &(0x7f0000000340)=""/165, 0xa5) r3 = open(&(0x7f0000000400)='./file0\x00', 0x440, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2840ac84}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x184, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3c63}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x16e2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000580)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000880)={&(0x7f00000005c0), 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1c4, r6, 0x401, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcae}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x68cac25e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x35b2679f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8d9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @loopback, 0x7fff}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x994}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x8810) r7 = syz_open_dev$mouse(&(0x7f00000008c0)='/dev/input/mouse#\x00', 0x1, 0x2) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000900)='/dev/amidi#\x00', 0x966, 0x2fab01) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0xb979, 0x500}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000009c0)={r9, @in6={{0xa, 0x4e21, 0xe765, @local, 0x7fff}}}, 0x84) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_void(r10, 0x1, 0x36, 0x0, 0x0) r11 = accept$inet6(0xffffffffffffffff, &(0x7f0000000a80)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000ac0)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r11, 0x29, 0xd3, &(0x7f0000000b00)={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x7}, {0xa, 0x4e22, 0x4, @mcast2, 0x6}, 0x100, [0x6, 0x8, 0x9, 0x9, 0x7ac, 0x3ff, 0x9, 0x80]}, 0x5c) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r12 = syz_open_dev$amidi(&(0x7f0000000b80)='/dev/amidi#\x00', 0x5, 0x40000) write$P9_RREADLINK(r12, &(0x7f0000000bc0)={0x16, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) munlockall() r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGSKNS(r13, 0x894c, &(0x7f0000000c00)=0x7) 13:44:28 executing program 0: socket$inet6(0xa, 0x6, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1d00000007020010002f6465762f73657175656e636572320071e900002973fbd4438a0487702a8b9405e6e38fdcd6bcd709e0305c3928a2882096480132d0b2ee217f934c0c489e24a4c359209d397200b3c445717e112dc114bfa8c2553a04f989694dbaae774ef959530b4fdd1cf81e289934c98136ed10fa7891b1c8d78093b560705d12c33168cf8794ddf321205884a2b16e86dd802f580670bc91d74976c591ba5fd4736e90d84effc5102ac7bd08899410a0b63aa4d9a9bb1543bdbdfec1f335006db8444b931b195bf6ff5cb61e3ec421658b86a48f8fe7368b089510a472e6a7d606d8fe0051230d0f38701d6f58a741c0066bbb080765dec5bdb7330914f3a861480ca5ce2338a7c61629184d767499ceec32069a25c4f5cb85d3b67e004ad687a5b7fba8bbe23bb5bc308188c7c9e330a98f18ec8b270aead6aae3c929570733d8b689d2c661c911fc2b628968afea7a949feab9f8742fcf2bd0c123832927dc73e5da1db39483a52a000cc2686d8fc2cc7b4da5e0ad3d24451d1f0d28470bf72f648c016416be0123671b297609df98a26d723939fb34a58a85f298ab073ed4d935290d97bcb0017ac4a6e595564c671a0614f5caa5c6c60a66d5"], 0x1d) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x3f, 0x1, 0x80000000, 0x120, r2, 0x7, [], 0x0, r0, 0x5, 0x2}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000000c0)="1a0f6ee9a2f2d63c506969e901b222163622df34bce1fb6a203e"}, 0x20) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) write$9p(r5, &(0x7f0000000240)="4ee7818fb2bbb818f71b663a9deba45c081284320150e63c806053aadc239cda2bd8b704ff152a3681d8f98a2dc5f504959bff4d5e4b93e20d0de0990b23de10986273a832adf80fbc752fbab09006af595c1c18a649b55cca60a5cdc956292343f3a18c683d4f349f1266b36bb5e0d5111fac892b7e49987f2afa7cfbb952d682174b065af351b083aab0672605a638aba12432931816e6bcd4fe8e4d8160076b90bbd096b5f34947650d68e9f0924f65d6", 0xb2) 13:44:29 executing program 1: unshare(0x20400) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$notify(r1, 0x402, 0x80000000) fcntl$notify(r0, 0x402, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb&9m\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x20) fcntl$notify(r2, 0x402, 0x0) 13:44:29 executing program 2: clone(0x2103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000002ed8e4f9e765ce27b90300060000000000000000b738000000000035f4c38442a3bc82200005000000000200000000000000004000000000000000000000ffff080000000000090000000000000000000003000000000000000d60395a7088d7c27f000000a101000100000000000000a999caabac9d880348d1849ae697139777cc64e81a1ac4bc769e8c916c840d410c05e31dff0eca1ff9fc89d1ffd9f2174407619e3a318378887fa2920241332d623872339d63e84e2d5d14eefab45c2caab9c616bd06ab9cb5f0f55c57ea000000"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13:44:29 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x6e21, @multicast1}, 0x10) getsockopt$inet_dccp_int(r0, 0x21, 0x209e31c171e3fd6c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='bridge_slave_0\x00', 0x10) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) syz_emit_ethernet(0x117, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001c000000000011907800000000e000000100004e2100089078cfc5877a7e2fec2c7158e61059cefc379d0db035db76183eb16b0604e320581ca69ad7f1d93f30663804c1b7b547d4033963074459e4f2"], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x0, @multicast1, 0x4e22, 0x3, 'ovf\x00', 0x24, 0x2, 0x23}, 0x2c) 13:44:29 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nlmon0\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0xd361, &(0x7f0000000000)) 13:44:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff) r6 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x3) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) 13:44:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0xc2eaf35a7c01e209, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) getsockname$unix(r4, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'\x00', @ifru_data=&(0x7f0000000180)="a16ef1dac525b43dcfba4825761ee7d73c739117ee8f6f6070e9563e97b4f8f5"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 13:44:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0xffffffffffffff5d, 0x1a, 0x1, 0x0, 0x800000, {0xa, 0x20}}, 0x14}}, 0x10000000) 13:44:29 executing program 2: r0 = memfd_create(&(0x7f0000000280)='/dev/input/event#\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e00000010000000000000000000400000000000000000000000000000000000001000003800020000000000000003000000"], 0x191) write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0, 0x19, 0x0, {0x60f06e9a0bbce85f, {}, 0x1af}}, 0xa0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r10}]]}}}]}, 0x38}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r13}]]}}}]}, 0x38}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r16}]]}}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r18 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r18, 0x40085112, 0x0) getsockopt$inet_IP_XFRM_POLICY(r18, 0x0, 0x11, &(0x7f0000001600)={{{@in, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001700)=0xe8) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r22}]]}}}]}, 0x38}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r25}]]}}}]}, 0x38}}, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r26, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r28}]]}}}]}, 0x38}}, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r31}]]}}}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001740)={0x0, @loopback, @initdev}, &(0x7f0000001780)=0xc) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r34, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r34, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r33, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r35}]]}}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001fc0)={&(0x7f00000017c0)={0x7c8, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x160, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x4, 0x3c, 0x1, 0x5}]}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r13}, {0xb4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r16}, {0x1d4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4ab3cd07}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x7, 0x3, 0x6, 0x400}, {0x2, 0x2, 0x8, 0x943}, {0x9, 0xe1, 0x9, 0x3ff}, {0x9, 0x6, 0x8, 0x8}, {0x63, 0x3, 0x3f, 0x4}, {0x6, 0x1, 0x5, 0x8001}, {0x8, 0x0, 0x6c, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x73}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x66ceb924}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r22}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r28}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r31}, {0x220, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r32}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8}}}]}}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x20040041}, 0x40800) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) dup(r3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 331.963098][T12312] IPVS: ftp: loaded support on port[0] = 21 13:44:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x2) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000280)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x40000, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000001c0)={r6}) ioctl$KVM_NMI(r2, 0xae9a) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/3) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) openat$cgroup_ro(r7, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfff, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17ffffe, 0x110, r8, 0xffffd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:44:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3}]}, 0x10) close(r0) [ 332.563117][T12312] chnl_net:caif_netlink_parms(): no params data found [ 332.786691][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.794085][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.807553][T12312] device bridge_slave_0 entered promiscuous mode [ 332.822139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 332.828315][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 332.857898][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.866064][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.875530][T12312] device bridge_slave_1 entered promiscuous mode [ 332.998856][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.058567][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.185124][T12312] team0: Port device team_slave_0 added [ 333.206134][T12312] team0: Port device team_slave_1 added [ 333.365977][T12312] device hsr_slave_0 entered promiscuous mode [ 333.402761][T12312] device hsr_slave_1 entered promiscuous mode [ 333.443567][T12312] debugfs: Directory 'hsr0' with parent '/' already present! [ 333.975828][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.060831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.070188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.097866][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.138326][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.147768][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.157639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.164842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.312625][T12312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.323216][T12312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.357653][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.366855][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.376163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.385143][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.392328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.400692][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.410488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.420198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.429990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.439486][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.449212][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.458401][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.467501][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.476986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.486021][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.633970][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.883924][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.893325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.901864][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.909524][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 13:44:33 executing program 4: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x0) 13:44:33 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="bf3971e68fde420e7bae03d00279aa5f9e7ec403a31ec721224ca130a5af2ba641bab6e2e1ddb4fb515a", 0x2a) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 13:44:33 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="180000001300fbff0000000000000004000180000000004b"], 0x18}, 0x1, 0x68}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924925b9, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:44:33 executing program 2: socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="f44802c6593eb336cf6b750eff0b2c8f91491ee1ceb0c0205b4f9f489f81fe2b3d3d6ed14b84989b2163df0271f437b4ff0579081e508344f23d4bc7d69ed366ffd3da0a3635df67d4c46b2c6771f3", 0x4f, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r1, 0x9) ioprio_set$pid(0x1, 0x0, 0x200007e35) clone(0x20008579, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 335.391632][T12372] IPVS: ftp: loaded support on port[0] = 21 13:44:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x0, 0x30}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000780)=""/61, 0x3d}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x3e, "10ba75700fd0a79b067b274c7b14a4217aa56f67ff99597edd21bcaa7ac6bf53d507fcc1b499ccc35b39b903f46e04e299cffd0d9c6575ab83a3cee02fd3"}, &(0x7f0000000300)=0x46) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000007c0)={r5, @in6={{0xa, 0x4e24, 0x101, @empty, 0x2}}, 0x7fffffff, 0x7fff, 0x1000, 0x1, 0x4}, 0x98) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) r7 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r6, 0xc1105518, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x3, 'syz1\x00', 0xfffffffa}, 0x6, 0x20000000, 0x3d6, r7, 0x1, 0x80000000, 'syz1\x00', &(0x7f00000006c0)=['/dev/sequencer2\x00'], 0x10, [], [0x81, 0xffff, 0x6, 0x8001]}) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f00000000c0)={0x80, 0x7f, 0x6, 0x9, 0x7f}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000340)=0x3, 0x4) 13:44:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x457c9ae9, 0x2082) r2 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) r3 = socket(0x1, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xa2d, @mcast2}}, {{0xa, 0x2000, 0x0, @ipv4={[], [], @dev}}}}, 0x108) 13:44:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x81, 0x2, 0x200, 0x8, 0x3f}) openat$cgroup_ro(r0, &(0x7f0000000300)='mem\x00\x01y7SwaS.\x06\x95\xe6\xb4\x1d\xfeN\x9b\xee\xc3\x0f\x8e\xd8\x15%\xc7r\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed\xfa.\x1de\xf0\xabd\xadM\xad\xde\xe0_\x83\x9bV9\x9f\x1e\xa1vpl\xc6?\xd5wEw\x83\xe7\xe1\x87pa\xb1X\x06\xd8\xe4\xa8\xf5p\xa2\xb5\xff\xac\x80\xc9SZ7\xab\x8b\x17\x86\x86~\xd5\xb4\xbb\xb0^\x87\xa3\xaai\x95\xf0\x0ek\x04\xb9\xae\xccgM\xa5\xa6}^\x15\xab\xd7\xfd\xf8\x1a\xa1l\x16W\xcf\xe0)\xb4]\xf1L\xfcW\x00T\v\x90\xf9\x96Tw\x02h\xfe\x86xV2#\x91\x96z\xca\x19\xb4\xf6\xa3?S\x19Z\xe7\x8e\xbc\xd5\xcf\xaek\xa2k\xd8\x12tI4\x11\x03\x17\xdc\xc8\x92\x8c\xe5\xdbvUq;\xb3.\x06\xd0\xd8al\x83K\x81\x05=abI', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r2, 0x7ffffffffffffffc, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xfffffffffffffe5e}, 0x2000008f) [ 335.945859][T12385] IPVS: ftp: loaded support on port[0] = 21 13:44:34 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001540)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x20, 0x200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0xa9, 0x7f, 0xb9}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001600)={0xfffffff, 0x3ff, 0x0, [], &(0x7f00000015c0)={0x0, 0x0, [], @string=0x0}}) 13:44:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "f4afd4b5f08f5e8a", "77053fe6cd5f1f179a329edc54060000000000000000000000000000008400", '\x00', "ac3a78d20519d65a"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) dup3(r3, r0, 0x0) 13:44:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffeb5) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_flags=0x4000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000000)={'bridge0\x00', @ifru_hwaddr=@local}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="9d6ffbddc2b8dbc3ffd50415c1940e07335d8c6264dddb8277ea7e796ba0c360702476"], &(0x7f0000000240)=""/182, 0xb6) 13:44:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x422180, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000c001e4001040200000000000000000000000881af3dbad3cb000000000000000000"], 0x24}}, 0x0) 13:44:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x37f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) poll(&(0x7f0000000100)=[{r0, 0x8044}, {r1, 0x181}], 0x2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=@fragment, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xa808) 13:44:34 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 13:44:34 executing program 4: unshare(0x600) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x1002) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r4 = getgid() setgid(r4) setfsgid(r4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x80, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x66, 0x39, 0x65, 0x38, 0x50, 0x62], 0x2d, [0xe, 0x66, 0x65, 0x64], 0x2d, [0x31, 0x35, 0x64, 0x38], 0x2d, [0x35, 0x30, 0x69, 0x64], 0x2d, [0x0, 0x37, 0x0, 0x66, 0x36, 0x34, 0xe7, 0x31]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0xb}}]}}) [ 336.865556][T12420] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:44:35 executing program 2: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r6}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @ppp={{0x0, 0x1, 'ppp\x00'}, {0x0, 0x2, {0x0, 0x1, r4}}}}]}, 0x38}}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0xfe) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000000000000000000000000c463f55b42575d9d8b1ded86fd43656e6a123cc97b68a90595c7745a6d3262f50665e490339de0b0e180e5c767624671", @ANYRES32=0x0, @ANYBLOB="03000000000000001800120008000100736974000c00020008000300", @ANYRES32=r10], 0x38}}, 0x0) dup3(r8, r0, 0x0) 13:44:35 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4}}, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8) ioctl(r2, 0xc2604110, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr="d265d07bd171fc1b0049708ad3e6d465"}, 0x1c) listen(r1, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x800, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 13:44:35 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x10, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004000}, 0x10) write(r0, &(0x7f0000000000)="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", 0xfc) r2 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7, 0x400000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000280)={0x3, 0x0, 0x100a, 0x3800000, 0x7, 0x0, 0x2}) [ 337.095019][T12426] input: syz0 as /devices/virtual/input/input5 [ 337.143920][T12430] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'. 13:44:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = getpid() tkill(r2, 0x1000000000015) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200)="9fc1bf5bf1559d76bf119157f51575f6a6a6f06f49e092030079dfcf0705536a2c043d961ce767cf37b1d1d2679d7061ec4549d430cb134c1b08c9587af9f9e8f8486b34a5df99ea5ea8f7d682cb732d4656abcad7423fc07eba7eb937", &(0x7f0000000280)="39a668c590e8b4f2c45b3b26171543b3d7da4a627e50645d481083e98042b59dc62452b001876cb60b960171036b5a8e5f45b48c9dfa24dd8e34336e11808396ecdaecb6e0675c2b4539b1c31c7474c1481af8c25833"}}, &(0x7f0000044000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0xfcc0f1b54827625b, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x200) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa0e, {0x0}}, 0x9918) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) sync_file_range(r5, 0x6, 0xcb55, 0x1) dup3(r0, r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x1) tkill(r1, 0x1002000000016) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 337.233846][T12430] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.369267][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.424292][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:44:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x1b8, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003300050ad25a80648c6356c10424fc00400000000a000200053582c1b0acea8b0900098004021700d1bd", 0x2e}]}, 0x0) [ 337.620719][T12426] input: syz0 as /devices/virtual/input/input6 [ 337.734968][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.777060][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:44:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000016c0)=[0x5, 0x5]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x13) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0x40085112, 0x0) recvmmsg(r7, &(0x7f0000007080), 0x0, 0x40, &(0x7f0000007240)) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000401800120008000100736974000c48c520bd000300", @ANYRES32=r8], 0x38}}, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0x40085112, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f0000002d00)) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/244, 0xf4}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x8, 0x100000001) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r11, 0xc008ae88, &(0x7f0000000040)={0x7a, 0x4, [0x4000007e], [0x3a]}) 13:44:36 executing program 2: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)) r1 = getuid() setreuid(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fstat(r2, &(0x7f00000005c0)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r3) r4 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xecc, 0x410000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000400)={'mangle\x00', 0x2, [{}, {}]}, 0x48) getgroups(0x0, 0x0) getgid() r5 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = request_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='/dev/input/mice\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r7) unshare(0x60020000) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) dup2(r8, r6) [ 337.986053][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:44:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6c}, [@ldst={0x3fd, 0x2, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d0}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40020, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xaf}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r6, 0x5, 0x3, 0x80000000, 0xca9000, 0x3}, &(0x7f0000000300)=0x14) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) [ 338.203169][T12449] IPVS: ftp: loaded support on port[0] = 21 13:44:36 executing program 4: syz_emit_ethernet(0x76, &(0x7f0000000340)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x6c}], "0200000000000000"}}}}}}}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) 13:44:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4e79c5751000700000000000000000000db44069fefb94066b7bd3c9610e1f7a7ce3501b771022000"/59], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x60, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") socket(0x80000009, 0x400000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$caif_stream(0x25, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, 0x0, 0x145) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xbf) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe2a) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x7ff, 0x2400) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) ioctl$VT_RELDISP(r4, 0x5605) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffffd, 0x40000007fff, 0x7ffffffe}, 0x14) shutdown(r2, 0x2) 13:44:36 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x80, &(0x7f00000001c0)}, 0x3d38) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer6\x00', 0x200000, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff00}}, 0x20041044) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x45, "708d4ef702224925fb12ddc4f6a0d197d1d481e7297649cbf2b50d9521d06f750a91a6ca4217be308267799f3224de8f6a927abc48b7e37425e68714e909eced9aa02d5b29"}, &(0x7f0000000080)=0x4d) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40085112, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x8000, 0x1, 0xc303, 0x0, 0x0, 0xffffff92, 0x4, 0x4e94, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={r4, 0xd0a, 0x1, 0x7, 0x0, 0x43bc, 0x60, 0x0, {r6, @in6={{0xa, 0x4e24, 0x6, @remote, 0xffff8001}}, 0x1, 0xfffffffa, 0xfffffffd, 0x25bcefeb, 0x8}}, &(0x7f0000000280)=0xb0) sendmmsg$alg(r2, &(0x7f0000000140), 0xd3, 0x0) 13:44:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x31, 0x0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @rand_addr="31a51e1976d1406c787e63ca6c20350f"}, 0x710000) socket$inet_tcp(0x2, 0x1, 0x0) 13:44:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x3, {0x2}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0xf6}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x59, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) 13:44:37 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8, 0x100) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)=0x1) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000340), 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000c7ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87d1e059855db90a452c600301b9f01c936f71358edec3ff8897ad63aa106dd21ef6e8a753"], 0x58) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0x40085112, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f00000002c0)=0x20, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r6, 0x3c2ab000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000280)=""/38) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800006e159db3002000200029bd7000ffdbdf2502001245859df2ad"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xec586ad5a4d5db69) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r8, 0x3b71, &(0x7f0000000180)={0x20, 0x0, 0x6, 0x8, 0x7f}) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x1) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000040)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/seq\x0e\x0e\x00\x00\b\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000001c0)=""/115) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000240)={0xc393061cdc1d0926, 0x1, [0x0, 0xc825, 0x7fffffff, 0x1f, 0x8001, 0xb36b, 0xaa20, 0x1]}) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88") [ 339.485534][ C0] sd 0:0:1:0: [sg0] tag#398 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 339.495246][ C0] sd 0:0:1:0: [sg0] tag#398 CDB: Test Unit Ready [ 339.501812][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.511398][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.521065][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.530726][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.540433][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.550096][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.559760][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.569401][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.579067][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.588742][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.598401][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.608046][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.617714][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.627359][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.637038][ C0] sd 0:0:1:0: [sg0] tag#398 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 339.654883][T12483] Unknown ioctl 15217 [ 339.673440][T12483] Unknown ioctl 19296 [ 339.840841][T12485] Unknown ioctl 19296 13:44:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000100)={0xd45}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x6, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 13:44:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x7, 0x1, 0xf800}, 0x4) 13:44:38 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) r1 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8, 0x100) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)=0x1) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000340), 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d24c3f2c876d699010000000004000000000000c7ec6e26560000080000ab31c3a45780fa9dcf6af90dbbede53b853b807511e7330a87d1e059855db90a452c600301b9f01c936f71358edec3ff8897ad63aa106dd21ef6e8a753"], 0x58) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0x40085112, 0x0) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f00000002c0)=0x20, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r6, 0x3c2ab000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000280)=""/38) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800006e159db3002000200029bd7000ffdbdf2502001245859df2ad"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xec586ad5a4d5db69) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r8, 0x3b71, &(0x7f0000000180)={0x20, 0x0, 0x6, 0x8, 0x7f}) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)=0x1) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000040)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/seq\x0e\x0e\x00\x00\b\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x10080, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONT(r8, 0x4b60, &(0x7f00000001c0)=""/115) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f0000000240)={0xc393061cdc1d0926, 0x1, [0x0, 0xc825, 0x7fffffff, 0x1f, 0x8001, 0xb36b, 0xaa20, 0x1]}) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88") 13:44:38 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000480)={0x5, @vbi={0x3, 0x0, 0x40, 0x44495658, [], [0x0, 0x7]}}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) ioctl$EVIOCGBITSND(r2, 0x80404532, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x7530}, 0x10) listen(r4, 0x0) r5 = dup(r4) accept4$inet(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4) signalfd4(r3, &(0x7f00000002c0)={0x1}, 0x8, 0x80000) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000040)='loginuid\x00') ptrace$cont(0x3, r6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000140)) r8 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r9 = open(&(0x7f0000000340)='./file0\x00', 0x101000, 0x80) ioctl$BLKBSZSET(r9, 0x40081271, &(0x7f0000000380)=0x4) fsetxattr$security_selinux(r8, &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) flistxattr(r8, &(0x7f0000000000)=""/130, 0x82) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000300), &(0x7f0000000440)=0x4) unshare(0x40000000) [ 340.484756][ C1] sd 0:0:1:0: [sg0] tag#399 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 340.494297][ C1] sd 0:0:1:0: [sg0] tag#399 CDB: Test Unit Ready [ 340.500765][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.510424][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.520064][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13:44:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x80040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000003c0)={0x100000000, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000400)={0x1000, r4, 0x10000, 0xff}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x42080, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000140)={0x80, 0x9, 0x7fff, 0x8}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000380)=0x18) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0)={0xffff}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0x40085112, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240)=0x6, r9, &(0x7f0000000280)=0xfffffffffffffff9, 0x401, 0x5) r10 = dup(r6) syz_kvm_setup_cpu$x86(r10, r5, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x3b6, 0x0, 0x0, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101, 0x0) ioctl$IMGETDEVINFO(r11, 0x80044944, &(0x7f0000000040)={0x9}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$dupfd(r12, 0x406, r13) [ 340.529703][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.539352][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.548988][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.558584][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.568176][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.577779][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.587405][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.597115][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.606771][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.616402][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.626011][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.635628][ C1] sd 0:0:1:0: [sg0] tag#399 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 340.652573][T12500] Unknown ioctl 15217 [ 340.655738][T12505] IPVS: ftp: loaded support on port[0] = 21 [ 340.667886][T12500] Unknown ioctl 19296 13:44:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x3, 0x803, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)={r8, 0x4, 0x1, [0x0]}, 0xa) pwritev(r1, &(0x7f0000000980)=[{&(0x7f00000003c0)="fc985eac9c5df7a679232e4977aeab132b6f313115ae322eb8707a079b847ff78c4ed14834d76dc4b84ad2b7fead3d905137f1d372c600806b99d00eee287a045e9b74cb117a124f91689ca4cdf1ed631ee965d51000674b8cfcf7064971a47f3d588a8d801a9b2b1da2df882ac7732e3d3edff346f5478a21e41796c5cb1c7d6ee2371c10c806e6173454a42577ecc68675fb2053d6ba190aefb9bd400d740a854255f18b8de426d7cceaf90729bf96a865729a7f90231e167d125e8afd0aae734e548fbe65294da7cc09bf57e126ab1b90ac1f5aa48fea9820dc104b4b1c79304541f55ffd846835ffffe7a3eae6c2695c2a8c498418", 0xf7}, {&(0x7f0000000600)="6291a7e192260a60676ed8d7c478298f3080f470bf78acc40ba77ba702f9bb2525e792de11e7ff18a1d29ed3d30895764d621983bb0d4f3a699b1781f59aba2e3f59dee8a622725fce2097afb091ad2e49f338a15a60de029cf60bd48461f9d869d8ddcf176772efef781b8e8a0abb5d83212864e197d5966c36ef16dbfe35248cde98919895c134fa77aeabc079efb102a3d0fbc78a20c2d9e9552ee3c8f5a669a9e1e7647b711e97505f35eb8cf844816e6004b46dc42582cfcd55bf77c80a0617bd85d4722e5427acc8668c9d39cb029f9b41105680aabf77e01e81ee27c751c4862514483c2fe4918886bd55a8c6df0719c41bd7fd639f5dcfa85d0a26", 0xff}, {&(0x7f0000000000)="43f5a64090", 0x5}, {&(0x7f0000000700)="62840a800a", 0x5}], 0x4, 0x0) r9 = syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x2000, 0x40000) close(r9) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) 13:44:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) 13:44:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='sysfk\x18', 0x1001, 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a04, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xee0, @empty, 0x3ff}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0xfffffc00, @mcast1, 0x5}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @empty}], 0x68) 13:44:39 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x20000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8420}, 0x4000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000380)=@hci, 0x80) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb5, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000003f00be33f525814000167c4cef00", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="005f7bfa1dbe0000004000ddff0300"/24], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001800)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00008400000018f59e6fc8f9896ed7b1794b1395e6261c3896ebf86f91ef6031b506bc655fbce2409172fec7bec911d4fe354517840221d61463b72f8f5257bfdad77f25b77d07f171742d824ae68ca362d686db37dc45e679cf6b8c7e596f1e422c16b17d02f50f728cab7bcdfdef7b3b79639a3d4d7185413a482434e6837e21334b2fb24d0cd18b069d3fdcd0a69fadc3c3313d93257921fd52379abe033f4b9fde091bcaa574444a037b4bd3ecd282c8d4d71700e7b1ac382994c6e7c744ec8a072f016919a4212a8eda218a84604ecb23c23b7ee7b7be9526349f51b1d34630ce10bfb2b0bb916dfdb64f3cca7fb95b4939d61485eae13f3fd694fba1881343e4fa76c70ff858fd5f"], 0x48}}, 0x0) clone3(&(0x7f0000000280)={0x4000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), 0x1d, 0x0, &(0x7f00000006c0)=""/4096, 0x1000, &(0x7f00000001c0)=""/163}, 0x40) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x20000) ioctl$KDADDIO(r3, 0x4b34, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video0\x00', 0x2, 0x0) lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'user.', '/dev/vcsa#\x00'}, &(0x7f0000000580)='/dev/vcsa#\x00', 0xb, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x9) 13:44:39 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, 0x0) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000000)={0x5, 0x1}) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000180)=0x401, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r0, r5, 0x0, 0x8000fffffffe) 13:44:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0xb42}], 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090057af6664025a15545935fbabb0e1bda6b361a049b0332e641b2185c2"], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x5af4c977b55a8b9c) io_setup(0x0, &(0x7f0000000040)=0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4002, 0x0) io_cancel(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, r6, &(0x7f0000000080)="ebc5b9fdd1e19afe53a4936eb36dbb578cea3ae9e54fb0e5f17b6d102b7e947f8a4599393db8ed090eb0513a62707ce54b26219b9b1ac5735c592b6918c6ed7ae694784399682ae968fd19f33888a77268f881310a34d0d66b0fa646784e5727ad26c8bed1cb95ce419d228ec1101331a89a4b1fb1a87ed3898f69719b243aab5e82f51fa80ae7299eb4", 0x8a, 0xae, 0x0, 0x0, r9}, &(0x7f0000000240)) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:44:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @descriptor="d9bf76e03a8ba995"}}) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 13:44:40 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x8, 0x101, 0x4, {0x9, 0x0, 0x52, 0xffff}}) ioprio_set$pid(0x1, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x65, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r4 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000080)=""/161, &(0x7f0000000180)=0xa1) r5 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000080)=""/161, &(0x7f0000000180)=0xa1) r6 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000080)=""/161, &(0x7f0000000180)=0xa1) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r7, 0x2007fff) sendfile(r1, r7, 0x0, 0x87ff7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 13:44:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/105, 0x69}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002b001938000058d9f8672a8b041287e44fd82b6f9443a37473964dad11f507331bd0a63954fb1af558c1e7e2ed51b66bda32ae0b0f5ab3979c3f1f318f5f5c4a21a1a6c981cba3d28ede8fa589f927977114ea3c489dc873b129bc493324c9f4c5264e526c4cd3e285fafc4e9ab1fdaf3551d326f154a6d5ddca64a7a847a59663f63aca32de8ed3209a44afa4de383c0f215ae40fc0b89925e0"], 0x14}}, 0x0) 13:44:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x4, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x4, 0x0, [], 0x63}, {0x0, 0x0, 0x0, [], 0x7}, {0x0, 0x0, 0x0, [], 0x6}, {0x0, 0x0, 0x0, [], 0xf7}, {0x0, 0x5, 0x0, [], 0x8}, {0x0, 0x3}, {}, {0x20}, {0x0, 0x0, 0xf7}, {0x8, 0x0, 0x7}, {}, {0x0, 0x0, 0x40}, {0x1a, 0x81, 0x4, [], 0xff}, {0x0, 0x0, 0x0, [], 0x57}, {0x9, 0x3f}, {}, {}, {0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, [], 0x99}, {0x0, 0x0, 0x0, [], 0x81}, {0x4, 0x3, 0x0, [], 0xff}, {}, {}, {0x0, 0x4, 0x4f}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:44:41 executing program 3: syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000440)=""/52) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000100)) dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000010000000008000a00", @ANYRES32=0x6, @ANYBLOB="120012000c0001007665746800000000180002000a00010002000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) fdatasync(r3) inotify_init() ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000300)=""/152, 0x98}], 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0xc0000080) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd720", 0xc6, 0x0, 0x0, 0x0) 13:44:41 executing program 2: r0 = socket$packet(0x11, 0xb3373977322073c3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x4000000000084) socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) fcntl$getown(r3, 0x9) [ 343.654895][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.664877][T12688] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 13:44:41 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xa2a5, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000307ebff000600e7000040040000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1c, 0x1, 0x6) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_buf(r2, 0x29, 0xca, &(0x7f0000000180)="0ecc733cc39b987037185b4d23465cf7cacc37826c0b944ed12e8f8ef923e0ddcbdd55acc142b05ff8c24b7a09e01dff2df823cff3fc4083b916a3d4dfcfe5a030b044898aee60273cad2c504cdd7a410c1a1baeccebd2e4f4eac7a7db82155985c876ec159db5132e68bf6bdc6e0eb0d446596eaeb454174bbbdec1abf6c011b46a6d81312562ef1288f6bb301f9ce4036465c7ef00634015efaaa044707e3707610e0ffe506b7de5ef4221fc97ac2c6061050e6b17cf906afece209c0f5283601b687c8596ce77832154a8e7b0a15f2fd126a80cf560", 0xd7) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x38}}, 0x0) getpeername(r3, &(0x7f00000003c0)=@hci, &(0x7f0000000080)=0x80) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000380)=[{&(0x7f0000000280)="dfe42d64cd19ad1bb81f041958826e0352196ca0ed6416534c97626959a8f191f254bb9c494108d1a4f2aa6aa024f05a8faac852c2eb4b9bd52781140ddc757ac984e2851cfbcf79949333b32ab76338f931b2d53b86ac119ee85e4949c717454a54f7c3f7c7eee745f7a2887a39a318a4cec131cef71e761f0a8e04bb2246c9a19261db286c7f6f529a36e68d35f411d5693a9426ee901b5f573be90a3d870672887754072b245d57335e3cbaac121b12a69cb02198df692573d299f862aa032a4566dbdc0b7f276ad5bb5e41b540"}, {&(0x7f0000000000)="7ce077136102b0b2202f34642f"}, {&(0x7f0000000040)="71735f4ef77bf95a3ec465af49a5f40d21b5a8d99d05bd79f8ccafe2cfd59c", 0xfd}], 0x1, &(0x7f0000000100)}], 0x492492492492919, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0x40085112, 0x0) ioctl$USBDEVFS_DISCARDURB(r6, 0x550b, &(0x7f0000000440)=0x1) 13:44:42 executing program 5: fsopen(&(0x7f0000000000)='hostfs\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0x1, 0x64abeab0, 0x81, 0x3f, 0x10001, 0x27b}) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x22) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xcc, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x4, 0x5, 0x800}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x3, @mcast1, 0xffff}}, 0x5, 0x400}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={r5, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f00000003c0)=0x10) r6 = open(&(0x7f0000000400)='./file1\x00', 0x311000, 0x21) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) connect$can_bcm(r6, &(0x7f0000000540)={0x1d, r7}, 0x10) syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x2c0000) r8 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f0000000600)={0x1f, 0x1, 'client1\x00', 0x0, "e718e86378ee7c67", "51cdb79ac90e70f8f5c55c9d76d380012197e963dfee052b4150c630d8d4d900", 0x8, 0x8}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000006c0)={0x1, 0x168, 0xf6, 0x9, 0x5, 0x6}) r9 = syz_open_dev$mouse(&(0x7f0000000700)='/dev/input/mouse#\x00', 0x8, 0x40000) ioctl$VIDIOC_S_FBUF(r9, 0x4030560b, &(0x7f0000000780)={0x10, 0x54, &(0x7f0000000740)="e926ed2e7773717f386193ff232ce2", {0x9, 0x6, 0x3231564e, 0x3, 0x7fffffff, 0x1000, 0x1, 0x1}}) r10 = dup(0xffffffffffffffff) ioctl$VHOST_GET_VRING_BASE(r10, 0xc008af12, &(0x7f00000007c0)) r11 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x58000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r11, 0x40505331, &(0x7f0000000840)={{0xf7}, {0x9, 0x4}, 0x8, 0x1, 0x9}) rt_sigpending(&(0x7f00000008c0), 0x8) r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) writev(r12, &(0x7f0000000c40)=[{&(0x7f0000000940)="09dd7e08a05f7fb96e9da6c62a9d8fd6e638232fa795b8da1804a360853c22ad656b0d28681fa7649f07a6054ccdbeb8ed86d85c34f42f89b0adf472171b473a953baae4ff6b2a1bf61564d30535eb487a0ede355a675d", 0x57}, {&(0x7f00000009c0)="05145d4ff100cabd32bf082096efe77677a3a4d24898e383b636dbec8adc41f10cc9a30200bac6b064a072666389c7e076e1134e990a8a9835e372050186a061d311bacdd4f01076c842b4edca92cfda0af1e047060b7d272120933190e67582cb5fcaa768372170912e48aba47de734daebbcd39e9f9dd421f6f3b539557b7df871c87ebd8939b722628055778080380ba7face194977609a9a", 0x9a}, {&(0x7f0000000a80)="2610627c9bb014bf2708f353935b51707a333a20a02d0b149b3f22c5e1818fdce6cda7abf794e13859e4573018", 0x2d}, {&(0x7f0000000ac0)="2eae9806c5f76e9f029c6b974f782f507f387908a3b41c7a51015c694084d5fb5bbc9c61dafbe5664e61fa71b644e23343f4", 0x32}, {&(0x7f0000000b00)="b4640170b3dce47dd289401794214f4609e950ce322d5302d04aa2bf003bc40855adff38fc3972b5d2fec9dcd4d3c39aefb5e1fa5c6d4ef95390941277932bb625dc31b9cc063d1d16449a55756fb8428928b2696da5cc88bc5e43f1933e9bd9dd71b0b411575f36041ef807df", 0x6d}, {&(0x7f0000000b80)="51b2dbc8935819a0186f99d3f55ba559231e679ec3c9b7a3904b34bbce31552c378d5c374ce5018ed07041b013aa3a1545a5c92196b98455592dcb7d71011b483ba259a4cb6f81a146", 0x49}, {&(0x7f0000000c00)="c7ef86c88e3bf0ed371c3b3ed0b2d18b9ca4e44912e942ca7b56f4", 0x1b}], 0x7) syz_open_dev$loop(&(0x7f0000000cc0)='/dev/loop#\x00', 0x6, 0xdf80a55404a7dfb5) llistxattr(&(0x7f0000000d00)='./file2\x00', &(0x7f0000000d40)=""/92, 0x5c) r13 = syz_open_dev$sg(&(0x7f0000000dc0)='/dev/sg#\x00', 0x7, 0x230000) ioctl$SCSI_IOCTL_SEND_COMMAND(r13, 0x1, &(0x7f0000000e00)={0x40, 0x5, 0x2, "55bc2278ae42c7a74010d61465edbed596a6aa0287798ac845dab636f0763507514e647eac8b28db6730eb1024abc7ab3c9785741146f07a8315917b297d27a0"}) 13:44:42 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4) write$binfmt_script(r1, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x6}, 0x8) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xfffffffffffffff9, 0x20000) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0xc0045878, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000200), 0xffffffffffffffff) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000003d00)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000003d40)=0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0xb) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000003d80)={r8, @in={{0x2, 0x4e22, @rand_addr=0xffffffff}}, 0x57, 0x7, 0x7fffffff, 0x74000000, 0x1}, 0x98) r9 = request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000800)=[{&(0x7f0000000040)="c5ea075c315ff381cf4ce75a000d67d7250eeb3420036c4a0a716c5111936cd781e2addaf64dd39fa40c623a5c1d62a6a8632e94fe7831e12718d93e3b31a1dc47", 0x41}, {&(0x7f00000003c0)="be3fff1660174d9e543296e05770c47afa3fffde9ba2f37e9136545ab5f548c6080bff9abaa677e8fcd98a268f3da272798cd0dd4d67dccf4b43ac3ffd9c936e8c59c35473f3a1e466c995980e885c4bd9151781171a40ad9111128e20a6686a35d9827962493795f4ac3bf3754b6eacfebd71d8264d1404387f932d1ccbd204511fb41b9eef0f8736b3ce67bec3420e2098a0d2faeaab6e217d1f2262f421c0b9c1ea2d28e1f0f2563ffcdd214c30cc378b19777e4bd82b245f0c8da4d741502c", 0xc1}, {&(0x7f00000000c0)="893eec59ccad26567f9d4a8ce6bc0edbaf838157364ab9f4bed15b3401501e2cbff1f42a31371f3ed85256cc9961422e875bea8a507a32323fcfcbfb4bd3", 0x3e}, {&(0x7f00000001c0)="b0af80e4249c5e65ae7a25d00c4874d224c8eb11e620de024e1392af98b42f561b7898a697705033d9208e751a90a0792c2c1dd81c1a785d9d81fbe17782d547446f57b05958ca7d2a017b3cc0d9548ab310", 0x52}, {&(0x7f00000004c0)="12d4ab68aaef1121a3ec9397851eaedbaed9382312d496802cf42d39e310b86863957bc5af7d481798ecab38339de0ccc821d458bdb84cca8f9ca2dfb8da4f2b2de3ca69410a33c226276f86235ed6ba92f965b88568f5543f4a2a7887db42185a9d8354ba3b587da335506e6d6ba89cd5c5cea743298b5f27938db40f9102304e56f85dbf791cf5d1e8902cb8904b7f031d0fbe9ce2b6c0728e5926a250d2ec6f299a6016376d61160d21f217e3d6", 0xaf}, {&(0x7f0000000580)="1c810056fdecee772e1d3b4c5e596662486d0bab85c38d17c0b97ec9f878bd46edee8233951be3bfa1c36c892c126ef232e0b316dc49ba34addc67883b3ac2c3dc8b3280731359aaed2082ab885136a007c7ecc0bb3bd7396cd85164e54e8f694570e2a42e11003e8f87151655033663ce81ea1bdf961ae79ba521e0ea438ff3d21e37290919f5e55487077ee18d0bc6bd67c64a110f1f028f43c31ea4e4c43c6b26b41b1f4b443d42b034b570e848b2a0ce22bb4177cea294610d7b877d0cd0e9f100b8f9c955ca826573a5ea3bcaf290a1ab9549407ac5829c", 0xda}, {&(0x7f0000000680)="d1980c1a3b6cdf11bdc7cbd23b9ad90d6ba26511307f55a3a1ed9a704a19f990cfca9075ca2d4ec286d99458fa1e3c42e29a68b15ed12dfd6c2b78b51b7707fa85afe5ff", 0x44}, {&(0x7f0000000700)="67939f3d9b4111b513b26d7c1748228484b448a2b195ed9ec14b51474589ad4d781f7841909767b7026e6c0293a7877d5395edac5a9da066d025b09c4f81ecbccd03b0a95e35c3624a052d91b85802913de34056590720bcadc653693dee1060366f379413c7c3fafc04bbec91541918a18cee3c2ac4deb8d83a5889f0bfe3020aeb64aab5a0f67ccdb6b96fa41515c63dc238d7d5c7cfe3901fc281d6b2a2b83b6e6cfbdb7772c6e3eb138896996f48d091b60002b6035472b35d9e4a4e59f75fd8dd1da53b778b7172b462755c459fa238e53752f69a70939f65071d969874aae3ec1713f7255b12eb6d4ee4300685cb66", 0xf2}], 0x8, r9) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004400)={0x0, 0x0, 0x2080, {0x4}, [], "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", "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"}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 344.193441][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.202980][T12725] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.521409][T12741] IPVS: ftp: loaded support on port[0] = 21 [ 344.882540][T12747] IPVS: ftp: loaded support on port[0] = 21 [ 345.032841][T12751] IPVS: ftp: loaded support on port[0] = 21 13:44:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x12, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x18[-.wlan1\x00', 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000100)=""/2, 0x2) 13:44:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x20, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f00700000000000000000000000000001c00000000000000000000000c00090000000000", @ANYRES32=0x0], 0x28}}, 0x0) 13:44:43 executing program 3: syz_open_dev$sndseq(&(0x7f0000001540)='/dev/snd/seq\x00', 0x0, 0xd4d261990e0916f) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/146, 0x92}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/88, 0x58}], 0x6, &(0x7f00000014c0)=""/57, 0x39}, 0x101a0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000108000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b0008000300642272e908001b0000000000"], 0x34}}, 0x0) 13:44:43 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x5aaf7a5f2f85022f, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x8}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1d}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008830}, 0x2000c010) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="9e4301000006000000011fe4ac14140ceb", 0x11}], 0x1}, 0x0) [ 345.087787][T12747] chnl_net:caif_netlink_parms(): no params data found [ 345.179722][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.187199][T12747] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.196167][T12747] device bridge_slave_0 entered promiscuous mode [ 345.218853][T12759] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 345.225653][T12761] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 345.248510][T12759] ===================================================== [ 345.255487][T12759] BUG: KMSAN: uninit-value in __flow_hash_from_keys+0x673/0xe70 [ 345.259462][T12761] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 345.263147][T12759] CPU: 0 PID: 12759 Comm: syz-executor.1 Not tainted 5.4.0-rc8-syzkaller #0 [ 345.263156][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.263161][T12759] Call Trace: [ 345.263184][T12759] dump_stack+0x1c9/0x220 [ 345.263207][T12759] kmsan_report+0x128/0x220 [ 345.263233][T12759] __msan_warning+0x64/0xc0 [ 345.263255][T12759] __flow_hash_from_keys+0x673/0xe70 [ 345.263311][T12759] __skb_get_hash+0x137/0x3d0 [ 345.317883][T12759] ip_tunnel_xmit+0x7e9/0x3320 [ 345.322655][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 345.328543][T12759] gre_tap_xmit+0xa73/0xb80 [ 345.333041][T12759] ? gre_tap_init+0x650/0x650 [ 345.337700][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.342802][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 345.348773][T12759] sch_direct_xmit+0x515/0x18c0 [ 345.353614][T12759] ? kmsan_internal_set_origin+0x6a/0xb0 [ 345.359242][T12759] __dev_queue_xmit+0x212d/0x4200 [ 345.364247][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 345.370153][T12759] dev_queue_xmit+0x4b/0x60 [ 345.374645][T12759] br_dev_queue_push_xmit+0x803/0x8b0 [ 345.380019][T12759] __br_forward+0xa60/0xe30 [ 345.384532][T12759] ? fdb_add_hw_addr+0x510/0x510 [ 345.389551][T12759] br_flood+0xb4f/0xfe0 [ 345.393706][T12759] br_dev_xmit+0x134f/0x16e0 [ 345.398294][T12759] ? br_net_exit+0x230/0x230 [ 345.402879][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.408008][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 345.413889][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 345.418914][T12759] ? llc_sysctl_exit+0x110/0x110 [ 345.423836][T12759] dev_queue_xmit+0x4b/0x60 [ 345.428323][T12759] neigh_resolve_output+0xab7/0xb50 [ 345.433530][T12759] ? neigh_event_ns+0x8a0/0x8a0 [ 345.438474][T12759] ip_finish_output2+0x1a9c/0x25d0 [ 345.443621][T12759] __ip_finish_output+0xaf8/0xda0 [ 345.448644][T12759] ip_finish_output+0x2db/0x420 [ 345.453487][T12759] ip_output+0x541/0x610 [ 345.457725][T12759] ? ip_mc_finish_output+0x6d0/0x6d0 [ 345.462993][T12759] ? ip_finish_output+0x420/0x420 [ 345.468102][T12759] ip_local_out+0x164/0x1d0 [ 345.472604][T12759] iptunnel_xmit+0x85d/0xdc0 [ 345.477206][T12759] ip_tunnel_xmit+0x2c41/0x3320 [ 345.482080][T12759] ipgre_xmit+0xff3/0x1120 [ 345.486499][T12759] ? ipgre_close+0x240/0x240 [ 345.491087][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.496202][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 345.502091][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 345.507125][T12759] dev_queue_xmit+0x4b/0x60 [ 345.511615][T12759] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 345.516908][T12759] packet_sendmsg+0x8234/0x9100 [ 345.521762][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 345.527813][T12759] ? aa_label_sk_perm+0x6d6/0x940 [ 345.532830][T12759] ? kmsan_get_metadata+0x51/0x350 [ 345.537928][T12759] ? kmsan_internal_set_origin+0x6a/0xb0 [ 345.543566][T12759] ? metadata_is_contiguous+0x270/0x270 [ 345.549120][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 345.555173][T12759] ? aa_sk_perm+0x730/0xaf0 [ 345.559700][T12759] ? compat_packet_setsockopt+0x360/0x360 [ 345.565403][T12759] ___sys_sendmsg+0x14ff/0x1590 [ 345.570260][T12759] ? __fget_light+0x6b1/0x710 [ 345.574942][T12759] __se_sys_sendmsg+0x305/0x460 [ 345.579795][T12759] __x64_sys_sendmsg+0x4a/0x70 [ 345.584633][T12759] do_syscall_64+0xb6/0x160 [ 345.589126][T12759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.594999][T12759] RIP: 0033:0x45a639 [ 345.598893][T12759] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.618493][T12759] RSP: 002b:00007fdfd28bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.626892][T12759] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 345.634867][T12759] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 345.642925][T12759] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 345.650887][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfd28bf6d4 [ 345.658843][T12759] R13: 00000000004c8d02 R14: 00000000004df538 R15: 00000000ffffffff [ 345.666812][T12759] [ 345.669120][T12759] Uninit was stored to memory at: [ 345.674125][T12759] kmsan_internal_chain_origin+0xbd/0x180 [ 345.679835][T12759] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 345.685794][T12759] kmsan_memcpy_metadata+0xb/0x10 [ 345.690806][T12759] __msan_memcpy+0x56/0x70 [ 345.695205][T12759] __skb_flow_dissect+0x5db5/0x7a40 [ 345.700385][T12759] __skb_get_hash+0x10b/0x3d0 [ 345.705137][T12759] ip_tunnel_xmit+0x7e9/0x3320 [ 345.709888][T12759] gre_tap_xmit+0xa73/0xb80 [ 345.714375][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.719467][T12759] sch_direct_xmit+0x515/0x18c0 [ 345.724315][T12759] __dev_queue_xmit+0x212d/0x4200 [ 345.729337][T12759] dev_queue_xmit+0x4b/0x60 [ 345.733825][T12759] br_dev_queue_push_xmit+0x803/0x8b0 [ 345.739178][T12759] __br_forward+0xa60/0xe30 [ 345.743775][T12759] br_flood+0xb4f/0xfe0 [ 345.747914][T12759] br_dev_xmit+0x134f/0x16e0 [ 345.752502][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.757594][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 345.762596][T12759] dev_queue_xmit+0x4b/0x60 [ 345.767080][T12759] neigh_resolve_output+0xab7/0xb50 [ 345.772275][T12759] ip_finish_output2+0x1a9c/0x25d0 [ 345.777377][T12759] __ip_finish_output+0xaf8/0xda0 [ 345.782394][T12759] ip_finish_output+0x2db/0x420 [ 345.787232][T12759] ip_output+0x541/0x610 [ 345.791463][T12759] ip_local_out+0x164/0x1d0 [ 345.795967][T12759] iptunnel_xmit+0x85d/0xdc0 [ 345.800644][T12759] ip_tunnel_xmit+0x2c41/0x3320 [ 345.805598][T12759] ipgre_xmit+0xff3/0x1120 [ 345.810002][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.815095][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 345.820101][T12759] dev_queue_xmit+0x4b/0x60 [ 345.824589][T12759] packet_sendmsg+0x8234/0x9100 [ 345.829422][T12759] ___sys_sendmsg+0x14ff/0x1590 [ 345.834343][T12759] __se_sys_sendmsg+0x305/0x460 [ 345.839177][T12759] __x64_sys_sendmsg+0x4a/0x70 [ 345.843927][T12759] do_syscall_64+0xb6/0x160 [ 345.848504][T12759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 345.854371][T12759] [ 345.856675][T12759] Uninit was stored to memory at: [ 345.861687][T12759] kmsan_internal_chain_origin+0xbd/0x180 [ 345.867387][T12759] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 345.873347][T12759] kmsan_memcpy_metadata+0xb/0x10 [ 345.878362][T12759] __msan_memcpy+0x56/0x70 [ 345.882762][T12759] pskb_expand_head+0x38a/0x19f0 [ 345.887680][T12759] gre_tap_xmit+0x79c/0xb80 [ 345.892164][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.897255][T12759] sch_direct_xmit+0x515/0x18c0 [ 345.902090][T12759] __dev_queue_xmit+0x212d/0x4200 [ 345.907097][T12759] dev_queue_xmit+0x4b/0x60 [ 345.911582][T12759] br_dev_queue_push_xmit+0x803/0x8b0 [ 345.916934][T12759] __br_forward+0xa60/0xe30 [ 345.921426][T12759] br_flood+0xb4f/0xfe0 [ 345.925564][T12759] br_dev_xmit+0x134f/0x16e0 [ 345.930134][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.935225][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 345.940322][T12759] dev_queue_xmit+0x4b/0x60 [ 345.944813][T12759] neigh_resolve_output+0xab7/0xb50 [ 345.949993][T12759] ip_finish_output2+0x1a9c/0x25d0 [ 345.955087][T12759] __ip_finish_output+0xaf8/0xda0 [ 345.960104][T12759] ip_finish_output+0x2db/0x420 [ 345.964933][T12759] ip_output+0x541/0x610 [ 345.969176][T12759] ip_local_out+0x164/0x1d0 [ 345.973658][T12759] iptunnel_xmit+0x85d/0xdc0 [ 345.978404][T12759] ip_tunnel_xmit+0x2c41/0x3320 [ 345.983233][T12759] ipgre_xmit+0xff3/0x1120 [ 345.987630][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 345.992737][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 345.997743][T12759] dev_queue_xmit+0x4b/0x60 [ 346.002229][T12759] packet_sendmsg+0x8234/0x9100 [ 346.007063][T12759] ___sys_sendmsg+0x14ff/0x1590 [ 346.011907][T12759] __se_sys_sendmsg+0x305/0x460 [ 346.016736][T12759] __x64_sys_sendmsg+0x4a/0x70 [ 346.021477][T12759] do_syscall_64+0xb6/0x160 [ 346.025958][T12759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.031826][T12759] [ 346.034133][T12759] Uninit was stored to memory at: [ 346.039137][T12759] kmsan_internal_chain_origin+0xbd/0x180 [ 346.044842][T12759] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 346.050819][T12759] kmsan_memcpy_metadata+0xb/0x10 [ 346.055824][T12759] __msan_memcpy+0x56/0x70 [ 346.060233][T12759] pskb_expand_head+0x38a/0x19f0 [ 346.065152][T12759] ip_tunnel_xmit+0x2974/0x3320 [ 346.070005][T12759] ipgre_xmit+0xff3/0x1120 [ 346.074403][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 346.079504][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 346.084510][T12759] dev_queue_xmit+0x4b/0x60 [ 346.088999][T12759] packet_sendmsg+0x8234/0x9100 [ 346.093930][T12759] ___sys_sendmsg+0x14ff/0x1590 [ 346.098761][T12759] __se_sys_sendmsg+0x305/0x460 [ 346.103681][T12759] __x64_sys_sendmsg+0x4a/0x70 [ 346.108425][T12759] do_syscall_64+0xb6/0x160 [ 346.112921][T12759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.118794][T12759] [ 346.121106][T12759] Uninit was created at: [ 346.125330][T12759] kmsan_internal_poison_shadow+0x60/0x120 [ 346.131114][T12759] kmsan_slab_alloc+0x97/0x100 [ 346.135859][T12759] __kmalloc_node_track_caller+0xe27/0x11a0 [ 346.141734][T12759] __alloc_skb+0x306/0xa10 [ 346.146134][T12759] alloc_skb_with_frags+0x18c/0xa80 [ 346.151322][T12759] sock_alloc_send_pskb+0xafd/0x10a0 [ 346.156586][T12759] packet_sendmsg+0x63a6/0x9100 [ 346.161414][T12759] ___sys_sendmsg+0x14ff/0x1590 [ 346.166243][T12759] __se_sys_sendmsg+0x305/0x460 [ 346.171159][T12759] __x64_sys_sendmsg+0x4a/0x70 [ 346.175913][T12759] do_syscall_64+0xb6/0x160 [ 346.180396][T12759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.186261][T12759] ===================================================== [ 346.193173][T12759] Disabling lock debugging due to kernel taint [ 346.199323][T12759] Kernel panic - not syncing: panic_on_warn set ... [ 346.205896][T12759] CPU: 0 PID: 12759 Comm: syz-executor.1 Tainted: G B 5.4.0-rc8-syzkaller #0 [ 346.215931][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.225977][T12759] Call Trace: [ 346.229256][T12759] dump_stack+0x1c9/0x220 [ 346.233761][T12759] panic+0x3c9/0xc1e [ 346.237655][T12759] kmsan_report+0x215/0x220 [ 346.242237][T12759] __msan_warning+0x64/0xc0 [ 346.246727][T12759] __flow_hash_from_keys+0x673/0xe70 [ 346.252123][T12759] __skb_get_hash+0x137/0x3d0 [ 346.256803][T12759] ip_tunnel_xmit+0x7e9/0x3320 [ 346.261582][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 346.267459][T12759] gre_tap_xmit+0xa73/0xb80 [ 346.271956][T12759] ? gre_tap_init+0x650/0x650 [ 346.276702][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 346.281804][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 346.287683][T12759] sch_direct_xmit+0x515/0x18c0 [ 346.292522][T12759] ? kmsan_internal_set_origin+0x6a/0xb0 [ 346.298170][T12759] __dev_queue_xmit+0x212d/0x4200 [ 346.303175][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 346.309069][T12759] dev_queue_xmit+0x4b/0x60 [ 346.313561][T12759] br_dev_queue_push_xmit+0x803/0x8b0 [ 346.318923][T12759] __br_forward+0xa60/0xe30 [ 346.323423][T12759] ? fdb_add_hw_addr+0x510/0x510 [ 346.328348][T12759] br_flood+0xb4f/0xfe0 [ 346.332506][T12759] br_dev_xmit+0x134f/0x16e0 [ 346.337096][T12759] ? br_net_exit+0x230/0x230 [ 346.341671][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 346.346774][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 346.352655][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 346.357677][T12759] ? llc_sysctl_exit+0x110/0x110 [ 346.362600][T12759] dev_queue_xmit+0x4b/0x60 [ 346.367090][T12759] neigh_resolve_output+0xab7/0xb50 [ 346.372285][T12759] ? neigh_event_ns+0x8a0/0x8a0 [ 346.377117][T12759] ip_finish_output2+0x1a9c/0x25d0 [ 346.382227][T12759] __ip_finish_output+0xaf8/0xda0 [ 346.387243][T12759] ip_finish_output+0x2db/0x420 [ 346.392088][T12759] ip_output+0x541/0x610 [ 346.396323][T12759] ? ip_mc_finish_output+0x6d0/0x6d0 [ 346.401588][T12759] ? ip_finish_output+0x420/0x420 [ 346.406595][T12759] ip_local_out+0x164/0x1d0 [ 346.411097][T12759] iptunnel_xmit+0x85d/0xdc0 [ 346.415691][T12759] ip_tunnel_xmit+0x2c41/0x3320 [ 346.420546][T12759] ipgre_xmit+0xff3/0x1120 [ 346.424971][T12759] ? ipgre_close+0x240/0x240 [ 346.429544][T12759] dev_hard_start_xmit+0x51a/0xab0 [ 346.434645][T12759] ? kmsan_get_shadow_origin_ptr+0x91/0x4d0 [ 346.440521][T12759] __dev_queue_xmit+0x35b6/0x4200 [ 346.445550][T12759] dev_queue_xmit+0x4b/0x60 [ 346.450055][T12759] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 346.455330][T12759] packet_sendmsg+0x8234/0x9100 [ 346.460178][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 346.466231][T12759] ? aa_label_sk_perm+0x6d6/0x940 [ 346.471249][T12759] ? kmsan_get_metadata+0x51/0x350 [ 346.476437][T12759] ? kmsan_internal_set_origin+0x6a/0xb0 [ 346.482055][T12759] ? metadata_is_contiguous+0x270/0x270 [ 346.487589][T12759] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 346.493641][T12759] ? aa_sk_perm+0x730/0xaf0 [ 346.498152][T12759] ? compat_packet_setsockopt+0x360/0x360 [ 346.503865][T12759] ___sys_sendmsg+0x14ff/0x1590 [ 346.508718][T12759] ? __fget_light+0x6b1/0x710 [ 346.513387][T12759] __se_sys_sendmsg+0x305/0x460 [ 346.518340][T12759] __x64_sys_sendmsg+0x4a/0x70 [ 346.523271][T12759] do_syscall_64+0xb6/0x160 [ 346.527762][T12759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 346.533740][T12759] RIP: 0033:0x45a639 [ 346.537623][T12759] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.557234][T12759] RSP: 002b:00007fdfd28bec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.565646][T12759] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 346.573601][T12759] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 346.581548][T12759] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 346.589503][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdfd28bf6d4 [ 346.597459][T12759] R13: 00000000004c8d02 R14: 00000000004df538 R15: 00000000ffffffff [ 346.606593][T12759] Kernel Offset: 0xca00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 346.618121][T12759] Rebooting in 86400 seconds..