[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.896063] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 18.978592] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.262842] random: sshd: uninitialized urandom read (32 bytes read) [ 20.095229] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. [ 25.599262] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/01 09:04:19 fuzzer started [ 26.939874] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/01 09:04:22 dialing manager at 10.128.0.26:46293 2018/08/01 09:04:25 syscalls: 1808 2018/08/01 09:04:25 code coverage: enabled 2018/08/01 09:04:25 comparison tracing: enabled 2018/08/01 09:04:25 setuid sandbox: enabled 2018/08/01 09:04:25 namespace sandbox: enabled 2018/08/01 09:04:25 fault injection: enabled 2018/08/01 09:04:25 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/01 09:04:25 net packed injection: enabled 2018/08/01 09:04:25 net device setup: enabled [ 32.278820] random: crng init done 09:04:50 executing program 0: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:04:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) 09:04:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r2, &(0x7f00000000c0), 0xfffffdef) 09:04:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x8004745a, &(0x7f0000000180)) 09:04:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 09:04:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000380)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) r5 = syz_open_pts(r0, 0x0) dup2(r4, r3) dup2(r3, r5) 09:04:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_FIOSETOWN(r1, 0xb704, &(0x7f0000000440)) 09:04:50 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/14, 0xe) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) [ 56.432134] IPVS: ftp: loaded support on port[0] = 21 [ 56.435257] IPVS: ftp: loaded support on port[0] = 21 [ 56.458002] IPVS: ftp: loaded support on port[0] = 21 [ 56.498179] IPVS: ftp: loaded support on port[0] = 21 [ 56.515454] IPVS: ftp: loaded support on port[0] = 21 [ 56.522071] IPVS: ftp: loaded support on port[0] = 21 [ 56.543631] IPVS: ftp: loaded support on port[0] = 21 [ 56.559276] IPVS: ftp: loaded support on port[0] = 21 [ 58.223875] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.230279] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.249849] device bridge_slave_0 entered promiscuous mode [ 58.258694] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.265085] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.272609] device bridge_slave_0 entered promiscuous mode [ 58.286447] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.292879] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.300473] device bridge_slave_0 entered promiscuous mode [ 58.318527] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.324916] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.335594] device bridge_slave_0 entered promiscuous mode [ 58.344668] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.351051] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.361336] device bridge_slave_0 entered promiscuous mode [ 58.368272] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.374662] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.382138] device bridge_slave_0 entered promiscuous mode [ 58.390253] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.396639] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.408209] device bridge_slave_1 entered promiscuous mode [ 58.416054] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.422525] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.429713] device bridge_slave_0 entered promiscuous mode [ 58.438587] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.445005] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.452453] device bridge_slave_1 entered promiscuous mode [ 58.461600] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.467987] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.475485] device bridge_slave_1 entered promiscuous mode [ 58.483269] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.489678] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.496696] device bridge_slave_1 entered promiscuous mode [ 58.502891] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.509371] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.519079] device bridge_slave_0 entered promiscuous mode [ 58.528075] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.534485] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.544888] device bridge_slave_1 entered promiscuous mode [ 58.552591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.561105] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.567486] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.574864] device bridge_slave_1 entered promiscuous mode [ 58.592136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.600539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.607900] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.614307] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.632831] device bridge_slave_1 entered promiscuous mode [ 58.640155] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.646530] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.664518] device bridge_slave_1 entered promiscuous mode [ 58.675393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.684649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.692017] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.700763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.713032] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.721082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.730309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.747839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.770696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.800039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.812757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.862779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.871076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.028094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.058772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.070547] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.093360] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.158856] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.169522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.180848] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.195117] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.203937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.213707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.222778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.244134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.258348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.323833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.332819] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.355879] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.680234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.701827] team0: Port device team_slave_0 added [ 59.726119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.745074] team0: Port device team_slave_0 added [ 59.780892] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.798987] team0: Port device team_slave_0 added [ 59.812121] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.825192] team0: Port device team_slave_1 added [ 59.832268] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.841392] team0: Port device team_slave_0 added [ 59.848891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.860657] team0: Port device team_slave_0 added [ 59.866012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.874366] team0: Port device team_slave_0 added [ 59.885908] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 59.894206] team0: Port device team_slave_0 added [ 59.901781] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.914696] team0: Port device team_slave_1 added [ 59.923730] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.937605] team0: Port device team_slave_1 added [ 59.944098] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.956010] team0: Port device team_slave_1 added [ 59.964581] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 59.976510] team0: Port device team_slave_1 added [ 59.989114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 59.996005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.006872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.022987] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.030158] team0: Port device team_slave_1 added [ 60.035573] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.043141] team0: Port device team_slave_0 added [ 60.050065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.057082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.066067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.078858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.087240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.097154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.110520] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.127283] team0: Port device team_slave_1 added [ 60.142532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.152388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.159952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.171358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.188754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.198159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.205758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.213419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.220839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.228496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.235870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.243548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.252984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.260082] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.267605] team0: Port device team_slave_1 added [ 60.278624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.285664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.295669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.312008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.327197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.337658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.345271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.353004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.360712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.368300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.375410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.383700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 60.390701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.410493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.430106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.445406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.452936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.460709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.468135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.475821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.485241] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.492372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.500184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.514249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.527219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.536177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.545293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 60.553146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.566503] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.574299] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.582232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.598962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.628774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.644748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.652972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.660724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.668141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.675927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.683664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.691344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.699129] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.706846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.716012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.723307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.731629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.741479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.749140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.757322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.767056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.776727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.788225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.803161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.822950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.836518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.844466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.852134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.861756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.874080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 60.884099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 60.896505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.924679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.952834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.962272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.970086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.978035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.985730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.993660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.019965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.028226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.044984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.898227] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.904636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.911322] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.917709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.930305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 61.936902] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.943302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.949939] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.956303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.963748] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 61.970798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.983689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.999204] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.005722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.012406] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.018764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.026392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.122536] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.128938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.135593] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.141961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.149607] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.157170] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.163571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.170219] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.176596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.183701] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.197756] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.204167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.210781] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.217170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.256815] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.264918] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.271295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.277933] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.284298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.296076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.383998] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.390411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.397164] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.403662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.416664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 62.987826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.001620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.020894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.036524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.044068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.051850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.904213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.066258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.121845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.146874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.182061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.253998] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.389850] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.401905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.442294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.471016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.484025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.497608] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.583818] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.636609] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.642929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.653011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.774607] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.821961] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.828207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.838834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.870138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.876654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.883926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.899905] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.908199] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.914762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.934878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.949857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 67.036082] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.042352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.052037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.075683] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.253852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.260483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.273538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.282606] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.290278] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.313723] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.329366] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.335571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.343939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.385943] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.406767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 67.413924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.430403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.710329] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.758591] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.785918] 8021q: adding VLAN 0 to HW filter on device team0 09:05:03 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/14, 0xe) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 09:05:03 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/14, 0xe) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 09:05:03 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/14, 0xe) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup2(r0, r1) 09:05:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)={[{@session={'session', 0x3d, 0xbe80000000000000}}]}) 09:05:03 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 09:05:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_FIOSETOWN(r1, 0xb704, &(0x7f0000000440)) [ 69.632467] hfsplus: session requires an argument [ 69.637380] hfsplus: unable to parse mount options 09:05:03 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 09:05:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)={[{@session={'session', 0x3d, 0xbe80000000000000}}]}) [ 69.808234] hfsplus: session requires an argument [ 69.813158] hfsplus: unable to parse mount options 09:05:04 executing program 0: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:05:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_FIOSETOWN(r1, 0xb704, &(0x7f0000000440)) 09:05:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:04 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 09:05:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r2, &(0x7f00000000c0), 0xfffffdef) 09:05:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x8004745a, &(0x7f0000000180)) 09:05:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)={[{@session={'session', 0x3d, 0xbe80000000000000}}]}) 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) 09:05:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_FIOSETOWN(r1, 0xb704, &(0x7f0000000440)) 09:05:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r2, &(0x7f00000000c0), 0xfffffdef) 09:05:04 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) [ 70.097493] hfsplus: session requires an argument [ 70.102448] hfsplus: unable to parse mount options 09:05:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x8004745a, &(0x7f0000000180)) 09:05:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:04 executing program 0: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:05:04 executing program 4: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:05:04 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) 09:05:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)={[{@session={'session', 0x3d, 0xbe80000000000000}}]}) 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) 09:05:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r2, &(0x7f00000000c0), 0xfffffdef) 09:05:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x8004745a, &(0x7f0000000180)) [ 70.333195] hfsplus: session requires an argument [ 70.338127] hfsplus: unable to parse mount options 09:05:04 executing program 0: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0505350, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:04 executing program 4: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:05:04 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) 09:05:04 executing program 1: fanotify_init(0x1, 0x1) getpid() futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$intptr(0x29, 0x0) 09:05:04 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x38) close(r0) 09:05:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 09:05:04 executing program 4: inotify_init1(0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000480)="2e2f66696c65302f662e6c6530f000", 0x40003ffe, 0x0) truncate(&(0x7f00000002c0)="2e2f66696c65302f662e6c6530f000", 0xb5) unlink(&(0x7f00000001c0)="2e2f66696c65302f662e6c6530f000") 09:05:04 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/232, &(0x7f0000000140)=0xfffffffffffffeaa) close(r2) r3 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) close(r2) 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 09:05:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f0000000000)='./file0//ile0\x00', &(0x7f0000000340)) stat(&(0x7f00000005c0)='./file0//ile0\x00', &(0x7f0000000480)) read$FUSE(r2, &(0x7f0000001000), 0x1000) read$FUSE(r2, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000040000000000000000000000000000000b00000000000000656d316e6f646576656d3100000000f3ffffff0000000000000000000000000001000000000000002c0000000000e50300000040000000000000000000000000140000000000000022738f7374656dcc6370010000006367726f7570246367726f75701500000000"], 0x90) 09:05:04 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x38) close(r0) 09:05:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:04 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 09:05:05 executing program 1: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:05 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x38) close(r0) 09:05:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4e, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={[0xfc]}}, 0x1c) r1 = dup(r0) connect(r1, &(0x7f0000000400)=@un=@abs, 0x80) 09:05:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) 09:05:05 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) 09:05:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) 09:05:05 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fc7000)='./control\x00', 0x86000006) inotify_add_watch(r0, &(0x7f0000fc8000)='./control\x00', 0x2000000) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) [ 71.522706] FAULT_FLAG_ALLOW_RETRY missing 30 [ 71.527273] CPU: 0 PID: 6681 Comm: syz-executor1 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 71.535681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.545041] Call Trace: [ 71.547766] dump_stack+0x1c9/0x2b4 [ 71.551418] ? dump_stack_print_info.cold.2+0x52/0x52 [ 71.556625] ? kasan_check_write+0x14/0x20 [ 71.560888] ? do_raw_spin_lock+0xc1/0x200 [ 71.565146] handle_userfault.cold.33+0x43/0x52 [ 71.569837] ? userfaultfd_ioctl+0x5420/0x5420 [ 71.574548] ? trace_hardirqs_on+0x10/0x10 [ 71.578802] ? plist_check_head+0x150/0x150 [ 71.583140] ? schedule+0xfb/0x450 [ 71.586698] ? lock_downgrade+0x8f0/0x8f0 [ 71.590870] ? userfaultfd_ctx_put+0x810/0x810 [ 71.595452] ? check_same_owner+0x340/0x340 [ 71.599769] ? do_raw_spin_unlock+0xa7/0x2f0 [ 71.604285] ? rcu_note_context_switch+0x730/0x730 [ 71.609214] ? lock_acquire+0x1e4/0x540 [ 71.613236] ? __sanitizer_cov_trace_cmp1+0x1/0x20 [ 71.618167] ? futex_wait_queue_me+0x562/0x840 [ 71.622760] ? refill_pi_state_cache.part.8+0x320/0x320 [ 71.628236] ? do_raw_spin_lock+0xc1/0x200 [ 71.632482] ? trace_hardirqs_on+0x10/0x10 [ 71.636719] ? get_futex_value_locked+0xcb/0xf0 [ 71.641537] ? futex_wait_setup+0x281/0x410 [ 71.645853] ? lock_acquire+0x1e4/0x540 [ 71.649841] ? __handle_mm_fault+0x3a15/0x4470 [ 71.654433] ? lock_downgrade+0x8f0/0x8f0 [ 71.658578] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 71.663771] ? kasan_check_read+0x11/0x20 [ 71.667910] ? do_raw_spin_unlock+0xa7/0x2f0 [ 71.672309] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 71.676889] ? kasan_check_write+0x14/0x20 [ 71.681120] ? do_raw_spin_lock+0xc1/0x200 [ 71.685454] __handle_mm_fault+0x3a22/0x4470 [ 71.689877] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 71.694720] ? lock_acquire+0x1e4/0x540 [ 71.698690] ? handle_mm_fault+0x417/0xc80 [ 71.702937] ? lock_downgrade+0x8f0/0x8f0 [ 71.707080] ? lock_release+0xa30/0xa30 [ 71.711040] ? rcu_note_context_switch+0x730/0x730 [ 71.715959] ? mem_cgroup_from_task+0xcb/0x1f0 [ 71.720545] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 71.725294] handle_mm_fault+0x53e/0xc80 [ 71.729347] ? __handle_mm_fault+0x4470/0x4470 [ 71.733915] ? find_vma+0x34/0x190 [ 71.737453] __do_page_fault+0x620/0xe50 [ 71.741507] ? mm_fault_error+0x380/0x380 [ 71.745657] ? lock_acquire+0x1e4/0x540 [ 71.749649] ? __fd_install+0x2b2/0x880 [ 71.753628] do_page_fault+0xf6/0x8c0 [ 71.757441] ? vmalloc_sync_all+0x30/0x30 [ 71.761589] ? ksys_dup3+0x690/0x690 [ 71.765301] ? errseq_sample+0xe5/0x130 [ 71.769443] ? _copy_to_user+0x110/0x110 [ 71.773510] ? lock_acquire+0x1e4/0x540 [ 71.777486] ? __might_fault+0x12b/0x1e0 [ 71.781549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 71.786397] page_fault+0x1e/0x30 [ 71.789867] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 71.795483] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 71.814381] RSP: 0018:ffff880196727d08 EFLAGS: 00010206 [ 71.819866] RAX: ffffed0032ce4fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 71.827290] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880196727d78 [ 71.834563] RBP: ffff880196727d40 R08: ffffed0032ce4fb2 R09: ffffed0032ce4faf [ 71.841830] R10: ffffed0032ce4fb1 R11: ffff880196727d8f R12: 0000000020013018 [ 71.849088] R13: 0000000020013000 R14: ffff880196727d78 R15: 00007ffffffff000 [ 71.856362] ? _copy_from_user+0x10d/0x150 [ 71.860598] __x64_sys_sigaltstack+0xf1/0x3b0 [ 71.865213] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 71.870307] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 71.875836] ? fput+0x130/0x1a0 [ 71.879110] ? ksys_ioctl+0x81/0xd0 [ 71.882736] do_syscall_64+0x1b9/0x820 [ 71.886622] ? finish_task_switch+0x1d3/0x870 [ 71.891204] ? syscall_return_slowpath+0x5e0/0x5e0 [ 71.896150] ? syscall_return_slowpath+0x31d/0x5e0 [ 71.901095] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 71.906113] ? __switch_to_asm+0x34/0x70 [ 71.910192] ? __switch_to_asm+0x34/0x70 [ 71.914251] ? __switch_to_asm+0x40/0x70 [ 71.918308] ? __switch_to_asm+0x34/0x70 [ 71.922968] ? __switch_to_asm+0x40/0x70 [ 71.927030] ? __switch_to_asm+0x34/0x70 [ 71.931096] ? __switch_to_asm+0x40/0x70 [ 71.935166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 71.940037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 71.945228] RIP: 0033:0x456a09 [ 71.948409] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:06 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24c) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r2, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x11000000000b) r3 = accept(r2, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) shutdown(r3, 0x20000000001) 09:05:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 09:05:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 09:05:06 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fc7000)='./control\x00', 0x86000006) inotify_add_watch(r0, &(0x7f0000fc8000)='./control\x00', 0x2000000) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 09:05:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) [ 71.967323] RSP: 002b:00007f31df8c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 71.975028] RAX: ffffffffffffffda RBX: 00007f31df8c46d4 RCX: 0000000000456a09 [ 71.982302] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 71.989568] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.996831] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.004086] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 09:05:06 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fc7000)='./control\x00', 0x86000006) inotify_add_watch(r0, &(0x7f0000fc8000)='./control\x00', 0x2000000) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 09:05:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 09:05:06 executing program 1: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:06 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) 09:05:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 09:05:06 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) lseek(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x38) close(r0) 09:05:06 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) creat(&(0x7f0000fc7000)='./control/file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000fc7000)='./control\x00', 0x86000006) inotify_add_watch(r0, &(0x7f0000fc8000)='./control\x00', 0x2000000) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 09:05:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 09:05:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) 09:05:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) [ 72.350068] FAULT_FLAG_ALLOW_RETRY missing 30 [ 72.354671] CPU: 0 PID: 6755 Comm: syz-executor1 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 72.363261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.372619] Call Trace: [ 72.375214] dump_stack+0x1c9/0x2b4 [ 72.378841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 72.384031] ? kasan_check_write+0x14/0x20 [ 72.388264] ? do_raw_spin_lock+0xc1/0x200 [ 72.392507] handle_userfault.cold.33+0x43/0x52 [ 72.397182] ? userfaultfd_ioctl+0x5420/0x5420 [ 72.401757] ? trace_hardirqs_on+0x10/0x10 [ 72.405991] ? rb_erase+0x3550/0x3550 [ 72.410338] ? trace_hardirqs_on+0x10/0x10 [ 72.414576] ? userfaultfd_ctx_put+0x810/0x810 [ 72.419171] ? lock_downgrade+0x801/0x8f0 [ 72.423310] ? lock_downgrade+0x8f0/0x8f0 [ 72.427452] ? check_preempt_curr+0x320/0x3a0 [ 72.431939] ? kasan_check_read+0x11/0x20 [ 72.436087] ? do_raw_spin_unlock+0xa7/0x2f0 [ 72.440487] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 72.445068] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 72.449648] ? rcu_read_lock+0x70/0x70 [ 72.453537] ? trace_hardirqs_on+0x10/0x10 [ 72.457773] ? trace_hardirqs_on+0x10/0x10 [ 72.461999] ? migrate_swap_stop+0x850/0x850 [ 72.466404] ? lock_acquire+0x1e4/0x540 [ 72.470388] ? __handle_mm_fault+0x3a15/0x4470 [ 72.474964] ? lock_downgrade+0x8f0/0x8f0 [ 72.479119] ? kasan_check_read+0x11/0x20 [ 72.483261] ? do_raw_spin_unlock+0xa7/0x2f0 [ 72.487671] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 72.492247] ? kasan_check_write+0x14/0x20 [ 72.496494] ? do_raw_spin_lock+0xc1/0x200 [ 72.500736] __handle_mm_fault+0x3a22/0x4470 [ 72.505143] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 72.510003] ? lock_acquire+0x1e4/0x540 [ 72.513964] ? handle_mm_fault+0x417/0xc80 [ 72.518190] ? lock_downgrade+0x8f0/0x8f0 [ 72.522332] ? lock_release+0xa30/0xa30 [ 72.526295] ? rcu_note_context_switch+0x730/0x730 [ 72.531225] ? mem_cgroup_from_task+0xcb/0x1f0 [ 72.535800] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 72.540560] handle_mm_fault+0x53e/0xc80 [ 72.544612] ? __handle_mm_fault+0x4470/0x4470 [ 72.549193] ? find_vma+0x34/0x190 [ 72.552722] __do_page_fault+0x620/0xe50 [ 72.556777] ? __switch_to_asm+0x34/0x70 [ 72.560831] ? mm_fault_error+0x380/0x380 [ 72.564966] ? __schedule+0x884/0x1ec0 [ 72.568844] ? lock_acquire+0x1e4/0x540 [ 72.572814] do_page_fault+0xf6/0x8c0 [ 72.576609] ? vmalloc_sync_all+0x30/0x30 [ 72.580749] ? ksys_dup3+0x690/0x690 [ 72.584460] ? errseq_sample+0xe5/0x130 [ 72.588436] ? _copy_to_user+0x110/0x110 [ 72.592503] ? lock_acquire+0x1e4/0x540 [ 72.596469] ? __might_fault+0x12b/0x1e0 [ 72.600522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 72.605367] page_fault+0x1e/0x30 [ 72.608809] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 72.614426] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 72.633324] RSP: 0018:ffff880195a57d08 EFLAGS: 00010206 [ 72.638677] RAX: ffffed0032b4afb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 72.645940] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880195a57d78 [ 72.653196] RBP: ffff880195a57d40 R08: ffffed0032b4afb2 R09: ffffed0032b4afaf [ 72.660540] R10: ffffed0032b4afb1 R11: ffff880195a57d8f R12: 0000000020013018 [ 72.667799] R13: 0000000020013000 R14: ffff880195a57d78 R15: 00007ffffffff000 [ 72.675079] ? _copy_from_user+0x10d/0x150 [ 72.679307] __x64_sys_sigaltstack+0xf1/0x3b0 [ 72.683794] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 72.688885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 72.694416] ? exit_to_usermode_loop+0x1f4/0x380 [ 72.699183] ? syscall_slow_exit_work+0x500/0x500 [ 72.704013] ? ksys_ioctl+0x81/0xd0 [ 72.707634] do_syscall_64+0x1b9/0x820 [ 72.711785] ? finish_task_switch+0x1d3/0x870 [ 72.716272] ? syscall_return_slowpath+0x5e0/0x5e0 [ 72.721193] ? syscall_return_slowpath+0x31d/0x5e0 [ 72.726119] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 72.731126] ? __switch_to_asm+0x34/0x70 [ 72.735191] ? __switch_to_asm+0x34/0x70 [ 72.739249] ? __switch_to_asm+0x40/0x70 [ 72.743304] ? __switch_to_asm+0x34/0x70 [ 72.747356] ? __switch_to_asm+0x40/0x70 [ 72.751417] ? __switch_to_asm+0x34/0x70 [ 72.755469] ? __switch_to_asm+0x40/0x70 [ 72.759524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 72.764365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 72.769542] RIP: 0033:0x456a09 [ 72.772731] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 72.791625] RSP: 002b:00007f31df8c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 09:05:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 09:05:06 executing program 3: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:06 executing program 6: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) [ 72.799333] RAX: ffffffffffffffda RBX: 00007f31df8c46d4 RCX: 0000000000456a09 [ 72.806594] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 72.813852] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.821128] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 72.828419] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 09:05:06 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 09:05:06 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000200), 0xfffffcbf}]) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000127c0)={'team0\x00'}) write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000001c0)=""/173, 0xad, &(0x7f0000000280)=""/13}}, 0x68) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x17, 0x5, "144f655c1ce6bd0bd794a927c88ff93096cfb24e275514e1a934066cb67b76ae1d2c821785a9b2b4656f17e2ce142cebbcb6505955a58c766d577a55719fa6ad", "b226a4da88e595cb8ed83eabeab31c6e3432b4b218ce63ca0e0eb5bdbd562b05", [0x8, 0x3]}) close(r1) [ 72.914267] FAULT_FLAG_ALLOW_RETRY missing 30 [ 72.918878] CPU: 0 PID: 6776 Comm: syz-executor3 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 72.927308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.936677] Call Trace: [ 72.939288] dump_stack+0x1c9/0x2b4 [ 72.942940] ? dump_stack_print_info.cold.2+0x52/0x52 [ 72.948162] ? kasan_check_write+0x14/0x20 [ 72.952513] ? do_raw_spin_lock+0xc1/0x200 [ 72.956753] handle_userfault.cold.33+0x43/0x52 [ 72.961446] ? userfaultfd_ioctl+0x5420/0x5420 [ 72.966033] ? trace_hardirqs_on+0x10/0x10 [ 72.970261] ? rb_erase+0x3550/0x3550 [ 72.974066] ? trace_hardirqs_on+0x10/0x10 [ 72.978320] ? perf_trace_lock+0xde/0x920 [ 72.982480] ? lock_downgrade+0x801/0x8f0 [ 72.986616] ? lock_downgrade+0x8f0/0x8f0 [ 72.990766] ? zap_class+0x740/0x740 [ 72.994475] ? do_raw_spin_unlock+0xa7/0x2f0 [ 72.998873] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 73.003444] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 73.008024] ? rcu_read_lock+0x70/0x70 [ 73.011921] ? trace_hardirqs_on+0x10/0x10 [ 73.016244] ? trace_hardirqs_on+0x10/0x10 [ 73.020471] ? lock_acquire+0x1e4/0x540 [ 73.024447] ? __handle_mm_fault+0x3a15/0x4470 [ 73.029020] ? lock_downgrade+0x8f0/0x8f0 [ 73.033192] ? kasan_check_read+0x11/0x20 [ 73.037328] ? do_raw_spin_unlock+0xa7/0x2f0 [ 73.041727] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 73.046300] ? kasan_check_write+0x14/0x20 [ 73.050524] ? do_raw_spin_lock+0xc1/0x200 [ 73.054752] __handle_mm_fault+0x3a22/0x4470 [ 73.059248] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 73.064093] ? lock_acquire+0x1e4/0x540 [ 73.068068] ? handle_mm_fault+0x417/0xc80 [ 73.072306] ? lock_downgrade+0x8f0/0x8f0 [ 73.076545] ? lock_release+0xa30/0xa30 [ 73.080518] ? mem_cgroup_from_task+0xcb/0x1f0 [ 73.085087] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 73.089839] handle_mm_fault+0x53e/0xc80 [ 73.093893] ? __handle_mm_fault+0x4470/0x4470 [ 73.098462] ? find_vma+0x34/0x190 [ 73.101993] __do_page_fault+0x620/0xe50 [ 73.106044] ? mm_fault_error+0x380/0x380 [ 73.110186] ? __schedule+0x884/0x1ec0 [ 73.114065] ? lock_acquire+0x1e4/0x540 [ 73.118038] do_page_fault+0xf6/0x8c0 [ 73.121831] ? vmalloc_sync_all+0x30/0x30 [ 73.125967] ? ksys_dup3+0x690/0x690 [ 73.129669] ? errseq_sample+0xe5/0x130 [ 73.133649] ? _copy_to_user+0x110/0x110 [ 73.137705] ? lock_acquire+0x1e4/0x540 [ 73.141676] ? __might_fault+0x12b/0x1e0 [ 73.145733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.150568] page_fault+0x1e/0x30 [ 73.154009] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 73.159622] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 73.178512] RSP: 0018:ffff8801963afd08 EFLAGS: 00010206 [ 73.183874] RAX: ffffed0032c75fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 73.191136] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801963afd78 [ 73.199287] RBP: ffff8801963afd40 R08: ffffed0032c75fb2 R09: ffffed0032c75faf [ 73.206550] R10: ffffed0032c75fb1 R11: ffff8801963afd8f R12: 0000000020013018 [ 73.213829] R13: 0000000020013000 R14: ffff8801963afd78 R15: 00007ffffffff000 [ 73.221102] ? _copy_from_user+0x10d/0x150 [ 73.225417] __x64_sys_sigaltstack+0xf1/0x3b0 [ 73.229906] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 73.234997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 73.240521] ? exit_to_usermode_loop+0x1f4/0x380 [ 73.245268] ? syscall_slow_exit_work+0x500/0x500 [ 73.250101] ? ksys_ioctl+0x81/0xd0 [ 73.253718] do_syscall_64+0x1b9/0x820 [ 73.257590] ? finish_task_switch+0x1d3/0x870 [ 73.262075] ? syscall_return_slowpath+0x5e0/0x5e0 [ 73.267164] ? syscall_return_slowpath+0x31d/0x5e0 [ 73.272091] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 73.277096] ? __switch_to_asm+0x34/0x70 [ 73.281146] ? __switch_to_asm+0x34/0x70 [ 73.285193] ? __switch_to_asm+0x40/0x70 [ 73.289248] ? __switch_to_asm+0x34/0x70 [ 73.293302] ? __switch_to_asm+0x40/0x70 [ 73.297349] ? __switch_to_asm+0x34/0x70 [ 73.301405] ? __switch_to_asm+0x40/0x70 [ 73.305476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.310309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.315490] RIP: 0033:0x456a09 [ 73.318677] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.337739] RSP: 002b:00007f31d4b85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 73.345957] RAX: ffffffffffffffda RBX: 00007f31d4b866d4 RCX: 0000000000456a09 [ 73.353211] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 09:05:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@delsa={0x3c, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1}, [@srcaddr={0x14}]}, 0x3c}}, 0x0) [ 73.360588] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.367842] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.375097] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 [ 73.439953] FAULT_FLAG_ALLOW_RETRY missing 30 [ 73.444538] CPU: 0 PID: 6785 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 73.452949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.462329] Call Trace: [ 73.464939] dump_stack+0x1c9/0x2b4 [ 73.468583] ? dump_stack_print_info.cold.2+0x52/0x52 [ 73.473823] ? kasan_check_write+0x14/0x20 [ 73.478075] ? do_raw_spin_lock+0xc1/0x200 [ 73.482331] handle_userfault.cold.33+0x43/0x52 09:05:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 09:05:07 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 09:05:07 executing program 1: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@delsa={0x3c, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1}, [@srcaddr={0x14}]}, 0x3c}}, 0x0) [ 73.487026] ? userfaultfd_ioctl+0x5420/0x5420 [ 73.491624] ? trace_hardirqs_on+0x10/0x10 [ 73.495894] ? schedule+0xfb/0x450 [ 73.499473] ? lock_downgrade+0x8f0/0x8f0 [ 73.503645] ? perf_trace_lock+0xde/0x920 [ 73.507803] ? check_same_owner+0x340/0x340 [ 73.512145] ? do_raw_spin_unlock+0xa7/0x2f0 [ 73.516569] ? zap_class+0x740/0x740 [ 73.520306] ? __sanitizer_cov_trace_cmp1+0x1/0x20 [ 73.525258] ? futex_wait_queue_me+0x562/0x840 [ 73.529859] ? refill_pi_state_cache.part.8+0x320/0x320 [ 73.535263] ? do_raw_spin_lock+0xc1/0x200 09:05:07 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00006ffff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000200), 0x366b03e7bec5d4de, 0x7ce9cd0214bbc626, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) [ 73.539516] ? trace_hardirqs_on+0x10/0x10 [ 73.543771] ? futex_wait_setup+0x281/0x410 [ 73.548133] ? lock_acquire+0x1e4/0x540 [ 73.552178] ? __handle_mm_fault+0x3a15/0x4470 [ 73.556780] ? lock_downgrade+0x8f0/0x8f0 [ 73.560943] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 73.566213] ? kasan_check_read+0x11/0x20 [ 73.570377] ? do_raw_spin_unlock+0xa7/0x2f0 [ 73.574830] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 73.579427] ? kasan_check_write+0x14/0x20 [ 73.583669] ? do_raw_spin_lock+0xc1/0x200 [ 73.587902] __handle_mm_fault+0x3a22/0x4470 [ 73.592315] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 73.597160] ? lock_acquire+0x1e4/0x540 [ 73.601129] ? handle_mm_fault+0x417/0xc80 [ 73.606139] ? lock_downgrade+0x8f0/0x8f0 [ 73.610278] ? lock_release+0xa30/0xa30 [ 73.614247] ? mem_cgroup_from_task+0xcb/0x1f0 [ 73.618905] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 73.623660] handle_mm_fault+0x53e/0xc80 [ 73.627715] ? __handle_mm_fault+0x4470/0x4470 [ 73.632293] ? find_vma+0x34/0x190 [ 73.635830] __do_page_fault+0x620/0xe50 [ 73.639885] ? mm_fault_error+0x380/0x380 [ 73.644026] do_page_fault+0xf6/0x8c0 [ 73.647826] ? vmalloc_sync_all+0x30/0x30 [ 73.651980] ? ksys_dup3+0x690/0x690 [ 73.655684] ? up_write+0x7b/0x220 [ 73.659219] ? lock_acquire+0x1e4/0x540 [ 73.663182] ? __might_fault+0x12b/0x1e0 [ 73.667240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.672253] page_fault+0x1e/0x30 [ 73.675697] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 73.681323] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 73.700222] RSP: 0018:ffff8801cce57d08 EFLAGS: 00010206 [ 73.705575] RAX: ffffed00399cafb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 73.712833] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff8801cce57d78 [ 73.720089] RBP: ffff8801cce57d40 R08: ffffed00399cafb2 R09: ffffed00399cafaf [ 73.727345] R10: ffffed00399cafb1 R11: ffff8801cce57d8f R12: 0000000020013018 [ 73.734604] R13: 0000000020013000 R14: ffff8801cce57d78 R15: 00007ffffffff000 [ 73.741885] ? _copy_from_user+0x10d/0x150 [ 73.746111] __x64_sys_sigaltstack+0xf1/0x3b0 [ 73.750602] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 73.755697] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 73.761229] ? fput+0x130/0x1a0 [ 73.764501] ? ksys_ioctl+0x81/0xd0 [ 73.768132] do_syscall_64+0x1b9/0x820 [ 73.772018] ? finish_task_switch+0x1d3/0x870 [ 73.776514] ? syscall_return_slowpath+0x5e0/0x5e0 [ 73.781449] ? syscall_return_slowpath+0x31d/0x5e0 [ 73.786371] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 73.791378] ? __switch_to_asm+0x34/0x70 [ 73.795441] ? __switch_to_asm+0x34/0x70 [ 73.799592] ? __switch_to_asm+0x40/0x70 [ 73.803738] ? __switch_to_asm+0x34/0x70 [ 73.807787] ? __switch_to_asm+0x40/0x70 [ 73.811837] ? __switch_to_asm+0x34/0x70 [ 73.815903] ? __switch_to_asm+0x40/0x70 [ 73.820216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.825064] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 73.830239] RIP: 0033:0x456a09 [ 73.833683] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 73.852661] RSP: 002b:00007f7620e11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 73.860370] RAX: ffffffffffffffda RBX: 00007f7620e126d4 RCX: 0000000000456a09 [ 73.867634] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 73.874994] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.882250] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 73.889516] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 [ 73.905744] FAULT_FLAG_ALLOW_RETRY missing 30 [ 73.910460] CPU: 1 PID: 6811 Comm: syz-executor1 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 73.918867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.928215] Call Trace: [ 73.930810] dump_stack+0x1c9/0x2b4 [ 73.934477] ? dump_stack_print_info.cold.2+0x52/0x52 09:05:07 executing program 3: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) [ 73.939679] ? kasan_check_write+0x14/0x20 [ 73.943923] ? do_raw_spin_lock+0xc1/0x200 [ 73.948177] handle_userfault.cold.33+0x43/0x52 [ 73.952862] ? userfaultfd_ioctl+0x5420/0x5420 [ 73.957457] ? trace_hardirqs_on+0x10/0x10 [ 73.961705] ? rb_erase+0x3550/0x3550 [ 73.965521] ? trace_hardirqs_on+0x10/0x10 [ 73.969819] ? userfaultfd_ctx_put+0x810/0x810 [ 73.974422] ? lock_downgrade+0x801/0x8f0 [ 73.978594] ? lock_downgrade+0x8f0/0x8f0 [ 73.982778] ? zap_class+0x740/0x740 [ 73.986519] ? do_raw_spin_unlock+0xa7/0x2f0 [ 73.990939] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 73.995538] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 74.000146] ? rcu_read_lock+0x70/0x70 [ 74.004239] ? trace_hardirqs_on+0x10/0x10 [ 74.008487] ? trace_hardirqs_on+0x10/0x10 [ 74.012732] ? lock_acquire+0x1e4/0x540 [ 74.016713] ? __handle_mm_fault+0x3a15/0x4470 [ 74.021302] ? lock_downgrade+0x8f0/0x8f0 [ 74.025459] ? kasan_check_read+0x11/0x20 [ 74.029622] ? do_raw_spin_unlock+0xa7/0x2f0 [ 74.034045] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 74.038639] ? kasan_check_write+0x14/0x20 [ 74.042892] ? do_raw_spin_lock+0xc1/0x200 [ 74.047674] __handle_mm_fault+0x3a22/0x4470 [ 74.052100] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 74.055015] FAULT_FLAG_ALLOW_RETRY missing 30 [ 74.056958] ? lock_acquire+0x1e4/0x540 [ 74.056975] ? handle_mm_fault+0x417/0xc80 [ 74.056996] ? lock_downgrade+0x8f0/0x8f0 [ 74.074072] ? lock_release+0xa30/0xa30 [ 74.078040] ? rcu_note_context_switch+0x730/0x730 [ 74.082971] ? mem_cgroup_from_task+0xcb/0x1f0 [ 74.087543] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 74.092295] handle_mm_fault+0x53e/0xc80 [ 74.096359] ? __handle_mm_fault+0x4470/0x4470 [ 74.100939] ? find_vma+0x34/0x190 [ 74.104483] __do_page_fault+0x620/0xe50 [ 74.108549] ? mm_fault_error+0x380/0x380 [ 74.112702] ? __schedule+0x884/0x1ec0 [ 74.116669] ? lock_acquire+0x1e4/0x540 [ 74.120636] do_page_fault+0xf6/0x8c0 [ 74.124443] ? vmalloc_sync_all+0x30/0x30 [ 74.128584] ? ksys_dup3+0x690/0x690 [ 74.132295] ? errseq_sample+0xe5/0x130 [ 74.136260] ? _copy_to_user+0x110/0x110 [ 74.140319] ? lock_acquire+0x1e4/0x540 [ 74.144280] ? __might_fault+0x12b/0x1e0 [ 74.148336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.153190] page_fault+0x1e/0x30 [ 74.156725] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 74.162341] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 74.181230] RSP: 0018:ffff880195657d08 EFLAGS: 00010206 [ 74.186582] RAX: ffffed0032acafb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 74.193840] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880195657d78 [ 74.201098] RBP: ffff880195657d40 R08: ffffed0032acafb2 R09: ffffed0032acafaf [ 74.208360] R10: ffffed0032acafb1 R11: ffff880195657d8f R12: 0000000020013018 [ 74.215657] R13: 0000000020013000 R14: ffff880195657d78 R15: 00007ffffffff000 [ 74.222931] ? _copy_from_user+0x10d/0x150 [ 74.227161] __x64_sys_sigaltstack+0xf1/0x3b0 [ 74.231649] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 74.237102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 74.243449] ? exit_to_usermode_loop+0x1f4/0x380 [ 74.248199] ? syscall_slow_exit_work+0x500/0x500 [ 74.253038] ? ksys_ioctl+0x81/0xd0 [ 74.256656] do_syscall_64+0x1b9/0x820 [ 74.260538] ? finish_task_switch+0x1d3/0x870 [ 74.265028] ? syscall_return_slowpath+0x5e0/0x5e0 [ 74.269949] ? syscall_return_slowpath+0x31d/0x5e0 [ 74.274869] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 74.279876] ? __switch_to_asm+0x34/0x70 [ 74.283929] ? __switch_to_asm+0x34/0x70 [ 74.287978] ? __switch_to_asm+0x40/0x70 [ 74.292028] ? __switch_to_asm+0x34/0x70 [ 74.296076] ? __switch_to_asm+0x40/0x70 [ 74.300126] ? __switch_to_asm+0x34/0x70 [ 74.304175] ? __switch_to_asm+0x40/0x70 [ 74.308236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.313074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.318251] RIP: 0033:0x456a09 [ 74.321435] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.340502] RSP: 002b:00007f31df8c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 74.348198] RAX: ffffffffffffffda RBX: 00007f31df8c46d4 RCX: 0000000000456a09 [ 74.355455] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 74.363148] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.370405] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 74.377751] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 [ 74.385025] CPU: 0 PID: 6826 Comm: syz-executor3 Not tainted 4.18.0-rc7-next-20180801+ #29 09:05:08 executing program 6: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) [ 74.393546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.403004] Call Trace: [ 74.405604] dump_stack+0x1c9/0x2b4 [ 74.410080] ? dump_stack_print_info.cold.2+0x52/0x52 [ 74.415290] ? kasan_check_write+0x14/0x20 [ 74.419541] ? do_raw_spin_lock+0xc1/0x200 [ 74.423792] handle_userfault.cold.33+0x43/0x52 [ 74.428477] ? userfaultfd_ioctl+0x5420/0x5420 [ 74.433071] ? trace_hardirqs_on+0x10/0x10 [ 74.437323] ? plist_check_head+0x150/0x150 [ 74.441648] ? schedule+0xfb/0x450 [ 74.445200] ? lock_downgrade+0x8f0/0x8f0 [ 74.449359] ? userfaultfd_ctx_put+0x810/0x810 [ 74.453958] ? check_same_owner+0x340/0x340 [ 74.458289] ? do_raw_spin_unlock+0xa7/0x2f0 [ 74.462709] ? rcu_note_context_switch+0x730/0x730 [ 74.467944] ? lock_acquire+0x1e4/0x540 [ 74.471938] ? __sanitizer_cov_trace_cmp1+0x1/0x20 [ 74.476883] ? futex_wait_queue_me+0x562/0x840 [ 74.481478] ? refill_pi_state_cache.part.8+0x320/0x320 [ 74.486849] ? do_raw_spin_lock+0xc1/0x200 [ 74.491085] ? trace_hardirqs_on+0x10/0x10 [ 74.495325] ? get_futex_value_locked+0xcb/0xf0 [ 74.500002] ? futex_wait_setup+0x281/0x410 [ 74.504343] ? lock_acquire+0x1e4/0x540 [ 74.508329] ? __handle_mm_fault+0x3a15/0x4470 [ 74.512923] ? lock_downgrade+0x8f0/0x8f0 [ 74.513878] FAULT_FLAG_ALLOW_RETRY missing 30 [ 74.517076] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 74.517098] ? kasan_check_read+0x11/0x20 [ 74.517112] ? do_raw_spin_unlock+0xa7/0x2f0 [ 74.517124] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 74.517140] ? kasan_check_write+0x14/0x20 [ 74.544316] ? do_raw_spin_lock+0xc1/0x200 [ 74.548554] __handle_mm_fault+0x3a22/0x4470 [ 74.552958] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 74.557799] ? lock_acquire+0x1e4/0x540 [ 74.561761] ? handle_mm_fault+0x417/0xc80 [ 74.565984] ? lock_downgrade+0x8f0/0x8f0 [ 74.570123] ? lock_release+0xa30/0xa30 [ 74.574111] ? rcu_note_context_switch+0x730/0x730 [ 74.579029] ? mem_cgroup_from_task+0xcb/0x1f0 [ 74.583657] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 74.588422] handle_mm_fault+0x53e/0xc80 [ 74.592483] ? __handle_mm_fault+0x4470/0x4470 [ 74.597067] ? find_vma+0x34/0x190 [ 74.600629] __do_page_fault+0x620/0xe50 [ 74.604691] ? mm_fault_error+0x380/0x380 [ 74.608836] do_page_fault+0xf6/0x8c0 [ 74.612634] ? vmalloc_sync_all+0x30/0x30 [ 74.616773] ? ksys_dup3+0x690/0x690 [ 74.620481] ? up_write+0x7b/0x220 [ 74.624017] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 74.628074] ? lock_acquire+0x1e4/0x540 [ 74.632043] ? __might_fault+0x12b/0x1e0 [ 74.636111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.640961] page_fault+0x1e/0x30 [ 74.644409] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 74.650028] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 74.668919] RSP: 0018:ffff88019548fd08 EFLAGS: 00010206 [ 74.674275] RAX: ffffed0032a91fb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 74.681535] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019548fd78 [ 74.688794] RBP: ffff88019548fd40 R08: ffffed0032a91fb2 R09: ffffed0032a91faf [ 74.696400] R10: ffffed0032a91fb1 R11: ffff88019548fd8f R12: 0000000020013018 [ 74.703660] R13: 0000000020013000 R14: ffff88019548fd78 R15: 00007ffffffff000 [ 74.710947] ? _copy_from_user+0x10d/0x150 [ 74.715179] __x64_sys_sigaltstack+0xf1/0x3b0 [ 74.719667] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 74.724764] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 74.730295] ? fput+0x130/0x1a0 [ 74.733577] ? ksys_ioctl+0x81/0xd0 [ 74.737202] do_syscall_64+0x1b9/0x820 [ 74.741094] ? finish_task_switch+0x1d3/0x870 [ 74.745589] ? syscall_return_slowpath+0x5e0/0x5e0 [ 74.750519] ? syscall_return_slowpath+0x31d/0x5e0 [ 74.755456] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 74.760473] ? __switch_to_asm+0x34/0x70 [ 74.764536] ? __switch_to_asm+0x34/0x70 [ 74.768600] ? __switch_to_asm+0x40/0x70 [ 74.772823] ? __switch_to_asm+0x34/0x70 [ 74.776873] ? __switch_to_asm+0x40/0x70 [ 74.780927] ? __switch_to_asm+0x34/0x70 [ 74.784977] ? __switch_to_asm+0x40/0x70 [ 74.789032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.793869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 74.799049] RIP: 0033:0x456a09 [ 74.802241] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 74.821307] RSP: 002b:00007f31d4b85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 74.829008] RAX: ffffffffffffffda RBX: 00007f31d4b866d4 RCX: 0000000000456a09 [ 74.836280] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 74.843547] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.850812] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 74.858074] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 [ 74.865353] CPU: 1 PID: 6836 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 74.873796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.883156] Call Trace: [ 74.885752] dump_stack+0x1c9/0x2b4 [ 74.889396] ? dump_stack_print_info.cold.2+0x52/0x52 [ 74.894703] ? kasan_check_write+0x14/0x20 [ 74.898956] ? do_raw_spin_lock+0xc1/0x200 [ 74.903228] handle_userfault.cold.33+0x43/0x52 [ 74.907910] ? userfaultfd_ioctl+0x5420/0x5420 [ 74.912505] ? trace_hardirqs_on+0x10/0x10 [ 74.916753] ? rb_erase+0x3550/0x3550 [ 74.920597] ? trace_hardirqs_on+0x10/0x10 [ 74.924855] ? userfaultfd_ctx_put+0x810/0x810 [ 74.929456] ? lock_downgrade+0x801/0x8f0 [ 74.933625] ? lock_downgrade+0x8f0/0x8f0 [ 74.937771] ? check_preempt_curr+0x320/0x3a0 [ 74.942266] ? kasan_check_read+0x11/0x20 [ 74.946613] ? do_raw_spin_unlock+0xa7/0x2f0 [ 74.951032] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 74.955629] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 74.960219] ? rcu_read_lock+0x70/0x70 [ 74.964115] ? trace_hardirqs_on+0x10/0x10 [ 74.968389] ? trace_hardirqs_on+0x10/0x10 [ 74.972637] ? migrate_swap_stop+0x850/0x850 [ 74.977050] ? lock_acquire+0x1e4/0x540 [ 74.981035] ? __handle_mm_fault+0x3a15/0x4470 [ 74.985624] ? lock_downgrade+0x8f0/0x8f0 [ 74.989765] ? kasan_check_read+0x11/0x20 [ 74.993910] ? do_raw_spin_unlock+0xa7/0x2f0 [ 74.998325] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 75.002905] ? kasan_check_write+0x14/0x20 [ 75.007128] ? do_raw_spin_lock+0xc1/0x200 [ 75.011356] __handle_mm_fault+0x3a22/0x4470 [ 75.015765] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 75.020696] ? lock_acquire+0x1e4/0x540 [ 75.024681] ? handle_mm_fault+0x417/0xc80 [ 75.028910] ? lock_downgrade+0x8f0/0x8f0 [ 75.033064] ? lock_release+0xa30/0xa30 [ 75.037034] ? rcu_note_context_switch+0x730/0x730 [ 75.041967] ? mem_cgroup_from_task+0xcb/0x1f0 [ 75.046563] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 75.051435] handle_mm_fault+0x53e/0xc80 [ 75.055518] ? __handle_mm_fault+0x4470/0x4470 [ 75.060129] ? find_vma+0x34/0x190 [ 75.063681] __do_page_fault+0x620/0xe50 [ 75.067749] ? __switch_to_asm+0x34/0x70 [ 75.071811] ? mm_fault_error+0x380/0x380 [ 75.075956] ? __schedule+0x884/0x1ec0 [ 75.079854] ? lock_acquire+0x1e4/0x540 [ 75.083840] do_page_fault+0xf6/0x8c0 [ 75.087637] ? vmalloc_sync_all+0x30/0x30 [ 75.091785] ? ksys_dup3+0x690/0x690 [ 75.095761] ? errseq_sample+0xe5/0x130 [ 75.099734] ? _copy_to_user+0x110/0x110 [ 75.103802] ? lock_acquire+0x1e4/0x540 [ 75.107795] ? __might_fault+0x12b/0x1e0 [ 75.111968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.116829] page_fault+0x1e/0x30 [ 75.120323] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 75.125951] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 75.144865] RSP: 0018:ffff88019fbf7d08 EFLAGS: 00010206 [ 75.150245] RAX: ffffed0033f7efb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 75.157531] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019fbf7d78 [ 75.164952] RBP: ffff88019fbf7d40 R08: ffffed0033f7efb2 R09: ffffed0033f7efaf [ 75.172220] R10: ffffed0033f7efb1 R11: ffff88019fbf7d8f R12: 0000000020013018 [ 75.179490] R13: 0000000020013000 R14: ffff88019fbf7d78 R15: 00007ffffffff000 [ 75.186776] ? _copy_from_user+0x10d/0x150 [ 75.191029] __x64_sys_sigaltstack+0xf1/0x3b0 [ 75.195537] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 75.200639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 75.206184] ? exit_to_usermode_loop+0x1f4/0x380 [ 75.210947] ? syscall_slow_exit_work+0x500/0x500 [ 75.215790] ? ksys_ioctl+0x81/0xd0 [ 75.219435] do_syscall_64+0x1b9/0x820 [ 75.223344] ? finish_task_switch+0x1d3/0x870 [ 75.227850] ? syscall_return_slowpath+0x5e0/0x5e0 [ 75.232781] ? syscall_return_slowpath+0x31d/0x5e0 [ 75.237709] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 75.242720] ? __switch_to_asm+0x34/0x70 [ 75.246780] ? __switch_to_asm+0x34/0x70 [ 75.250853] ? __switch_to_asm+0x40/0x70 [ 75.254928] ? __switch_to_asm+0x34/0x70 [ 75.259005] ? __switch_to_asm+0x40/0x70 [ 75.263054] ? __switch_to_asm+0x34/0x70 [ 75.267109] ? __switch_to_asm+0x40/0x70 [ 75.271195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.276135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.281340] RIP: 0033:0x456a09 09:05:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200000}, 0xc) close(r1) 09:05:09 executing program 1: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) 09:05:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000740)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) [ 75.284522] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.303419] RSP: 002b:00007f7620e11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 75.311142] RAX: ffffffffffffffda RBX: 00007f7620e126d4 RCX: 0000000000456a09 [ 75.318432] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 75.325701] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.332964] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 75.340230] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 09:05:09 executing program 3: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 75.436815] FAULT_FLAG_ALLOW_RETRY missing 30 [ 75.441515] CPU: 1 PID: 6844 Comm: syz-executor1 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 75.449929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.459294] Call Trace: [ 75.461897] dump_stack+0x1c9/0x2b4 [ 75.465607] ? dump_stack_print_info.cold.2+0x52/0x52 [ 75.470819] ? kasan_check_write+0x14/0x20 [ 75.473204] FAULT_FLAG_ALLOW_RETRY missing 30 [ 75.475082] ? do_raw_spin_lock+0xc1/0x200 [ 75.475104] handle_userfault.cold.33+0x43/0x52 [ 75.475124] ? userfaultfd_ioctl+0x5420/0x5420 [ 75.475144] ? trace_hardirqs_on+0x10/0x10 [ 75.497344] ? plist_check_head+0x150/0x150 [ 75.501749] ? schedule+0xfb/0x450 [ 75.505286] ? lock_downgrade+0x8f0/0x8f0 [ 75.509441] ? userfaultfd_ctx_put+0x810/0x810 [ 75.514027] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 75.518861] ? do_raw_spin_unlock+0xa7/0x2f0 [ 75.523279] ? rcu_note_context_switch+0x730/0x730 [ 75.528203] ? perf_trace_lock+0x920/0x920 [ 75.532434] ? __sanitizer_cov_trace_cmp1+0x1/0x20 [ 75.537354] ? futex_wait_queue_me+0x562/0x840 [ 75.541935] ? refill_pi_state_cache.part.8+0x320/0x320 [ 75.547290] ? do_raw_spin_lock+0xc1/0x200 [ 75.551519] ? trace_hardirqs_on+0x10/0x10 [ 75.555743] ? get_futex_value_locked+0xcb/0xf0 [ 75.560409] ? lock_acquire+0x1e4/0x540 [ 75.564386] ? __handle_mm_fault+0x3a15/0x4470 [ 75.568963] ? lock_downgrade+0x8f0/0x8f0 [ 75.573108] ? kasan_check_read+0x11/0x20 [ 75.577249] ? do_raw_spin_unlock+0xa7/0x2f0 [ 75.581650] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 75.586227] ? kasan_check_write+0x14/0x20 [ 75.590451] ? do_raw_spin_lock+0xc1/0x200 [ 75.594680] __handle_mm_fault+0x3a22/0x4470 [ 75.599088] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 75.603930] ? lock_acquire+0x1e4/0x540 [ 75.607897] ? handle_mm_fault+0x417/0xc80 [ 75.612126] ? lock_downgrade+0x8f0/0x8f0 [ 75.616269] ? lock_release+0xa30/0xa30 [ 75.620238] ? rcu_note_context_switch+0x730/0x730 [ 75.625157] ? mem_cgroup_from_task+0xcb/0x1f0 [ 75.629731] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 75.634484] handle_mm_fault+0x53e/0xc80 [ 75.641165] ? __handle_mm_fault+0x4470/0x4470 [ 75.645738] ? find_vma+0x34/0x190 [ 75.649280] __do_page_fault+0x620/0xe50 [ 75.653336] ? mm_fault_error+0x380/0x380 [ 75.657477] ? lock_acquire+0x1e4/0x540 [ 75.661444] ? __fd_install+0x2b2/0x880 [ 75.665412] do_page_fault+0xf6/0x8c0 [ 75.669207] ? vmalloc_sync_all+0x30/0x30 [ 75.673356] ? ksys_dup3+0x690/0x690 [ 75.677086] ? errseq_sample+0xe5/0x130 [ 75.681056] ? lock_acquire+0x1e4/0x540 [ 75.685109] ? __might_fault+0x12b/0x1e0 [ 75.689162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.694011] page_fault+0x1e/0x30 [ 75.697459] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 75.703078] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 75.721969] RSP: 0018:ffff880195bdfd08 EFLAGS: 00010206 [ 75.727331] RAX: ffffed0032b7bfb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 75.734588] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff880195bdfd78 [ 75.741932] RBP: ffff880195bdfd40 R08: ffffed0032b7bfb2 R09: ffffed0032b7bfaf [ 75.749191] R10: ffffed0032b7bfb1 R11: ffff880195bdfd8f R12: 0000000020013018 [ 75.756450] R13: 0000000020013000 R14: ffff880195bdfd78 R15: 00007ffffffff000 [ 75.763726] ? _copy_from_user+0x10d/0x150 [ 75.767954] __x64_sys_sigaltstack+0xf1/0x3b0 [ 75.772444] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 75.777537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 75.783077] ? fput+0x130/0x1a0 [ 75.786349] ? ksys_ioctl+0x81/0xd0 [ 75.789970] do_syscall_64+0x1b9/0x820 [ 75.793850] ? finish_task_switch+0x1d3/0x870 [ 75.800610] ? syscall_return_slowpath+0x5e0/0x5e0 [ 75.805544] ? syscall_return_slowpath+0x31d/0x5e0 [ 75.810478] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 75.815486] ? __switch_to_asm+0x34/0x70 [ 75.819535] ? __switch_to_asm+0x34/0x70 [ 75.823588] ? __switch_to_asm+0x40/0x70 [ 75.827639] ? __switch_to_asm+0x34/0x70 [ 75.831698] ? __switch_to_asm+0x40/0x70 [ 75.835750] ? __switch_to_asm+0x34/0x70 [ 75.839799] ? __switch_to_asm+0x40/0x70 [ 75.843859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.848705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 75.853885] RIP: 0033:0x456a09 [ 75.857069] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 75.876055] RSP: 002b:00007f31df8c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 09:05:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200000}, 0xc) close(r1) [ 75.883754] RAX: ffffffffffffffda RBX: 00007f31df8c46d4 RCX: 0000000000456a09 [ 75.891013] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 75.898269] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.905960] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 75.913215] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 [ 75.920750] CPU: 0 PID: 6854 Comm: syz-executor3 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 75.929184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 09:05:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) [ 75.938540] Call Trace: [ 75.941143] dump_stack+0x1c9/0x2b4 [ 75.944779] ? dump_stack_print_info.cold.2+0x52/0x52 [ 75.949980] ? kasan_check_write+0x14/0x20 [ 75.954259] ? do_raw_spin_lock+0xc1/0x200 [ 75.958540] handle_userfault.cold.33+0x43/0x52 [ 75.963226] ? userfaultfd_ioctl+0x5420/0x5420 [ 75.967829] ? trace_hardirqs_on+0x10/0x10 [ 75.972080] ? plist_check_head+0x150/0x150 [ 75.976412] ? schedule+0xfb/0x450 [ 75.979962] ? lock_downgrade+0x8f0/0x8f0 [ 75.984111] ? userfaultfd_ctx_put+0x810/0x810 [ 75.988682] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 75.993512] ? do_raw_spin_unlock+0xa7/0x2f0 [ 75.997906] ? rcu_note_context_switch+0x730/0x730 [ 76.002822] ? perf_trace_lock+0x870/0x920 [ 76.007059] ? __sanitizer_cov_trace_cmp1+0x1/0x20 [ 76.011975] ? futex_wait_queue_me+0x562/0x840 [ 76.016558] ? refill_pi_state_cache.part.8+0x320/0x320 [ 76.021914] ? do_raw_spin_lock+0xc1/0x200 [ 76.026137] ? trace_hardirqs_on+0x10/0x10 [ 76.030453] ? get_futex_value_locked+0xcb/0xf0 [ 76.035131] ? lock_acquire+0x1e4/0x540 [ 76.039106] ? __handle_mm_fault+0x3a15/0x4470 [ 76.043697] ? lock_downgrade+0x8f0/0x8f0 [ 76.047838] ? kasan_check_read+0x11/0x20 [ 76.051981] ? do_raw_spin_unlock+0xa7/0x2f0 [ 76.056393] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 76.060976] ? kasan_check_write+0x14/0x20 [ 76.065213] ? do_raw_spin_lock+0xc1/0x200 [ 76.069450] __handle_mm_fault+0x3a22/0x4470 [ 76.073858] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 76.078695] ? lock_acquire+0x1e4/0x540 [ 76.082657] ? handle_mm_fault+0x417/0xc80 [ 76.086882] ? lock_downgrade+0x8f0/0x8f0 [ 76.091028] ? lock_release+0xa30/0xa30 [ 76.095013] ? rcu_note_context_switch+0x730/0x730 [ 76.099939] ? mem_cgroup_from_task+0xcb/0x1f0 [ 76.104532] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 76.109371] handle_mm_fault+0x53e/0xc80 [ 76.113439] ? __handle_mm_fault+0x4470/0x4470 [ 76.118020] ? find_vma+0x34/0x190 [ 76.121560] __do_page_fault+0x620/0xe50 [ 76.125609] ? mm_fault_error+0x380/0x380 [ 76.129756] ? lock_acquire+0x1e4/0x540 [ 76.133722] ? __fd_install+0x2b2/0x880 [ 76.137694] do_page_fault+0xf6/0x8c0 [ 76.141490] ? vmalloc_sync_all+0x30/0x30 [ 76.145632] ? ksys_dup3+0x690/0x690 [ 76.149340] ? errseq_sample+0xe5/0x130 [ 76.153311] ? lock_acquire+0x1e4/0x540 [ 76.157277] ? __might_fault+0x12b/0x1e0 [ 76.161344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.166193] page_fault+0x1e/0x30 [ 76.169654] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 76.175290] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 76.194280] RSP: 0018:ffff88019f76fd08 EFLAGS: 00010206 [ 76.199633] RAX: ffffed0033eedfb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 76.206891] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019f76fd78 [ 76.214157] RBP: ffff88019f76fd40 R08: ffffed0033eedfb2 R09: ffffed0033eedfaf [ 76.221429] R10: ffffed0033eedfb1 R11: ffff88019f76fd8f R12: 0000000020013018 [ 76.228697] R13: 0000000020013000 R14: ffff88019f76fd78 R15: 00007ffffffff000 [ 76.235975] ? _copy_from_user+0x10d/0x150 [ 76.240213] __x64_sys_sigaltstack+0xf1/0x3b0 [ 76.244701] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 76.249803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.255330] ? fput+0x130/0x1a0 [ 76.258607] ? ksys_ioctl+0x81/0xd0 [ 76.262246] do_syscall_64+0x1b9/0x820 [ 76.266128] ? finish_task_switch+0x1d3/0x870 [ 76.270612] ? syscall_return_slowpath+0x5e0/0x5e0 [ 76.275529] ? syscall_return_slowpath+0x31d/0x5e0 [ 76.280460] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 76.285483] ? __switch_to_asm+0x34/0x70 [ 76.289539] ? __switch_to_asm+0x34/0x70 [ 76.293590] ? __switch_to_asm+0x40/0x70 [ 76.297658] ? __switch_to_asm+0x34/0x70 [ 76.301726] ? __switch_to_asm+0x40/0x70 [ 76.305792] ? __switch_to_asm+0x34/0x70 [ 76.309859] ? __switch_to_asm+0x40/0x70 [ 76.313925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.318761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.323935] RIP: 0033:0x456a09 09:05:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@delsa={0x3c, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1}, [@srcaddr={0x14}]}, 0x3c}}, 0x0) [ 76.327130] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.346025] RSP: 002b:00007f31d4b85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 [ 76.353747] RAX: ffffffffffffffda RBX: 00007f31d4b866d4 RCX: 0000000000456a09 [ 76.361020] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 76.368301] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.375653] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 76.382918] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 09:05:10 executing program 6: mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000015000/0x3000)=nil, 0x7fffdffea000}, 0x1}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/52) 09:05:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x11, r1, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000080)=""/57) 09:05:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200000}, 0xc) close(r1) 09:05:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200000}, 0xc) close(r1) 09:05:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@delsa={0x3c, 0x11, 0x11, 0x0, 0x0, {@in6=@mcast1}, [@srcaddr={0x14}]}, 0x3c}}, 0x0) [ 76.559926] FAULT_FLAG_ALLOW_RETRY missing 30 [ 76.564624] CPU: 1 PID: 6887 Comm: syz-executor6 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 76.573036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.582399] Call Trace: [ 76.584992] dump_stack+0x1c9/0x2b4 [ 76.588681] ? dump_stack_print_info.cold.2+0x52/0x52 [ 76.593882] ? kasan_check_write+0x14/0x20 [ 76.598112] ? do_raw_spin_lock+0xc1/0x200 [ 76.602342] handle_userfault.cold.33+0x43/0x52 [ 76.607010] ? userfaultfd_ioctl+0x5420/0x5420 [ 76.611581] ? trace_hardirqs_on+0x10/0x10 [ 76.615816] ? plist_check_head+0x150/0x150 [ 76.620133] ? schedule+0xfb/0x450 [ 76.623670] ? lock_downgrade+0x8f0/0x8f0 [ 76.627812] ? userfaultfd_ctx_put+0x810/0x810 [ 76.632392] ? check_same_owner+0x340/0x340 [ 76.637660] ? do_raw_spin_unlock+0xa7/0x2f0 [ 76.642061] ? rcu_note_context_switch+0x730/0x730 [ 76.646989] ? lock_acquire+0x1e4/0x540 [ 76.650969] ? __sanitizer_cov_trace_cmp1+0x1/0x20 [ 76.655894] ? futex_wait_queue_me+0x562/0x840 [ 76.660475] ? refill_pi_state_cache.part.8+0x320/0x320 [ 76.665832] ? do_raw_spin_lock+0xc1/0x200 [ 76.670061] ? trace_hardirqs_on+0x10/0x10 [ 76.674308] ? get_futex_value_locked+0xcb/0xf0 [ 76.678975] ? futex_wait_setup+0x281/0x410 [ 76.683300] ? lock_acquire+0x1e4/0x540 [ 76.687266] ? __handle_mm_fault+0x3a15/0x4470 [ 76.691842] ? lock_downgrade+0x8f0/0x8f0 [ 76.695989] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 76.701184] ? kasan_check_read+0x11/0x20 [ 76.705333] ? do_raw_spin_unlock+0xa7/0x2f0 [ 76.709738] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 76.714315] ? kasan_check_write+0x14/0x20 [ 76.718546] ? do_raw_spin_lock+0xc1/0x200 [ 76.722782] __handle_mm_fault+0x3a22/0x4470 [ 76.727191] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 76.732051] ? lock_acquire+0x1e4/0x540 [ 76.736018] ? handle_mm_fault+0x417/0xc80 [ 76.740245] ? lock_downgrade+0x8f0/0x8f0 [ 76.744393] ? lock_release+0xa30/0xa30 [ 76.748370] ? rcu_note_context_switch+0x730/0x730 [ 76.753291] ? mem_cgroup_from_task+0xcb/0x1f0 [ 76.757877] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 76.762642] handle_mm_fault+0x53e/0xc80 [ 76.766698] ? __handle_mm_fault+0x4470/0x4470 [ 76.771274] ? find_vma+0x34/0x190 [ 76.774819] __do_page_fault+0x620/0xe50 [ 76.778875] ? mm_fault_error+0x380/0x380 [ 76.783021] do_page_fault+0xf6/0x8c0 [ 76.786815] ? vmalloc_sync_all+0x30/0x30 [ 76.790955] ? ksys_dup3+0x690/0x690 [ 76.794663] ? up_write+0x7b/0x220 [ 76.798201] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 76.802257] ? lock_acquire+0x1e4/0x540 [ 76.806227] ? __might_fault+0x12b/0x1e0 [ 76.810290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.815137] page_fault+0x1e/0x30 [ 76.818588] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 76.824201] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 76.845881] RSP: 0018:ffff88019fb77d08 EFLAGS: 00010206 [ 76.851237] RAX: ffffed0033f6efb2 RBX: 0000000000000018 RCX: 0000000000000003 [ 76.858493] RDX: 0000000000000000 RSI: 0000000020013000 RDI: ffff88019fb77d78 [ 76.865753] RBP: ffff88019fb77d40 R08: ffffed0033f6efb2 R09: ffffed0033f6efaf [ 76.873022] R10: ffffed0033f6efb1 R11: ffff88019fb77d8f R12: 0000000020013018 [ 76.880276] R13: 0000000020013000 R14: ffff88019fb77d78 R15: 00007ffffffff000 [ 76.887559] ? _copy_from_user+0x10d/0x150 [ 76.891798] __x64_sys_sigaltstack+0xf1/0x3b0 [ 76.896287] ? __do_compat_sys_sigaction+0x5c0/0x5c0 [ 76.901382] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 76.906908] ? fput+0x130/0x1a0 [ 76.910178] ? ksys_ioctl+0x81/0xd0 [ 76.913804] do_syscall_64+0x1b9/0x820 [ 76.917681] ? finish_task_switch+0x1d3/0x870 [ 76.922167] ? syscall_return_slowpath+0x5e0/0x5e0 [ 76.927088] ? syscall_return_slowpath+0x31d/0x5e0 [ 76.932105] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 76.937114] ? __switch_to_asm+0x34/0x70 [ 76.941167] ? __switch_to_asm+0x34/0x70 [ 76.945217] ? __switch_to_asm+0x40/0x70 [ 76.949265] ? __switch_to_asm+0x34/0x70 [ 76.953490] ? __switch_to_asm+0x40/0x70 [ 76.957550] ? __switch_to_asm+0x34/0x70 [ 76.961602] ? __switch_to_asm+0x40/0x70 [ 76.965666] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.970508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 76.975691] RIP: 0033:0x456a09 [ 76.978876] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.997765] RSP: 002b:00007f7620e11c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000083 09:05:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 09:05:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x11, r1, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000080)=""/57) 09:05:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) [ 77.005468] RAX: ffffffffffffffda RBX: 00007f7620e126d4 RCX: 0000000000456a09 [ 77.012728] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020013000 [ 77.019984] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.027249] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 77.034522] R13: 00000000004d4c00 R14: 00000000004c8845 R15: 0000000000000000 09:05:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x4d5) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000800)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x2) 09:05:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x11, r1, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000080)=""/57) 09:05:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 09:05:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 09:05:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x11, r1, 0x0) semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000080)=""/57) 09:05:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) close(r0) 09:05:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x11, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 09:05:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 09:05:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 09:05:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28}, 0x28) 09:05:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:11 executing program 4: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x0, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxn\x00t1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000040)='./file0\x00', 0x10080, 0x0) 09:05:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 09:05:11 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) close(r0) 09:05:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 09:05:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{}, {}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 09:05:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28}, 0x28) 09:05:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:12 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='?', 0x1}], 0x1, &(0x7f00000001c0)}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x810c5701, &(0x7f0000000100)) 09:05:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4004e22, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000000e003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000180)='./file0/fil..\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 09:05:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 09:05:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000cc3ff0), &(0x7f00000000c0), 0x0) 09:05:12 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) close(r0) 09:05:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvfrom(r1, &(0x7f0000000000)=""/117, 0x75, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x703000) 09:05:12 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='?', 0x1}], 0x1, &(0x7f00000001c0)}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x810c5701, &(0x7f0000000100)) [ 78.269388] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 78.277274] FAT-fs (loop0): Filesystem has been set read-only 09:05:12 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 09:05:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28}, 0x28) 09:05:12 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev}], 0x10) close(r1) close(r0) 09:05:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000cc3ff0), &(0x7f00000000c0), 0x0) [ 78.365668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 09:05:12 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='?', 0x1}], 0x1, &(0x7f00000001c0)}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x810c5701, &(0x7f0000000100)) 09:05:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvfrom(r1, &(0x7f0000000000)=""/117, 0x75, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x703000) [ 78.422816] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:05:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28}, 0x28) 09:05:12 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) 09:05:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4004e22, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000000e003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000180)='./file0/fil..\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 09:05:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 3: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='?', 0x1}], 0x1, &(0x7f00000001c0)}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x810c5701, &(0x7f0000000100)) 09:05:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 09:05:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000cc3ff0), &(0x7f00000000c0), 0x0) 09:05:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvfrom(r1, &(0x7f0000000000)=""/117, 0x75, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x703000) 09:05:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) 09:05:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 09:05:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 09:05:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x0) recvfrom(r1, &(0x7f0000000000)=""/117, 0x75, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x703000) 09:05:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4004e22, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000000e003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000180)='./file0/fil..\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 09:05:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 09:05:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000000140), 0x0) futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000cc3ff0), &(0x7f00000000c0), 0x0) 09:05:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) 09:05:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 09:05:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 09:05:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) [ 78.869420] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 78.877452] FAT-fs (loop0): Filesystem has been set read-only 09:05:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) 09:05:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85714070") r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(r1, 0x0) shmdt(r2) 09:05:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = getpid() setpgid(r1, 0x0) 09:05:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 09:05:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 09:05:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 09:05:13 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4004e22, 0x0, @ipv4={[], [], @local}}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x4000000e003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000180)='./file0/fil..\x00', 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) 09:05:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080), 0x10) 09:05:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x38}}, 0x0) 09:05:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000040)) 09:05:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) 09:05:13 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 09:05:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f000045fff8)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) 09:05:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}}, 0x0) 09:05:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x38}}, 0x0) 09:05:13 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2400, 0x0) 09:05:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000040)) [ 79.168836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 79.200730] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 79.208606] FAT-fs (loop0): Filesystem has been set read-only 09:05:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000240)) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000380)=""/4096) close(r3) 09:05:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) 09:05:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd401000100ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x0, 0x80, 0x0, 'queue0\x00'}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 09:05:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}}, 0x0) 09:05:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x38}}, 0x0) 09:05:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000040)) 09:05:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x1, 0x0) 09:05:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x38}}, 0x0) 09:05:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) [ 79.367710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 09:05:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}}, 0x0) 09:05:13 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000040)) 09:05:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x700, 0x77d50800, 0x8}}}}}}, &(0x7f0000000100)) 09:05:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @local}]}, 0x28}}, 0x0) 09:05:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x1, 0x0) [ 79.465016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 79.552819] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 [ 79.568089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 79.589671] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 09:05:14 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2400, 0x0) 09:05:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}}, 0x0) 09:05:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x1, 0x0) 09:05:14 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="cdbf0e000084", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 09:05:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd401000100ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x0, 0x80, 0x0, 'queue0\x00'}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 09:05:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x20001}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1b515f]}, 0x48) 09:05:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040), 0x1c) 09:05:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x700, 0x77d50800, 0x8}}}}}}, &(0x7f0000000100)) 09:05:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 09:05:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x1, 0x0) 09:05:14 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="cdbf0e000084", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 80.223607] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 09:05:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040), 0x1c) 09:05:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x700, 0x77d50800, 0x8}}}}}}, &(0x7f0000000100)) 09:05:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd401000100ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x0, 0x80, 0x0, 'queue0\x00'}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 09:05:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 09:05:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040), 0x1c) [ 80.380001] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 09:05:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 09:05:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 09:05:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x20001}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1b515f]}, 0x48) 09:05:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="f44337778cba", [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x700, 0x77d50800, 0x8}}}}}}, &(0x7f0000000100)) 09:05:14 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="cdbf0e000084", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) 09:05:14 executing program 6: r0 = socket$inet6(0xa, 0x80803, 0x2f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f0000000040), 0x1c) 09:05:14 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2400, 0x0) 09:05:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd401000100ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x0, 0x80, 0x0, 'queue0\x00'}) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 09:05:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x20001}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1b515f]}, 0x48) 09:05:15 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0xffffff83, 0x8}}}}}}, &(0x7f00000006c0)) 09:05:15 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="cdbf0e000084", @local, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x2c, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) [ 80.965969] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 09:05:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 09:05:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x20001}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1b515f]}, 0x48) 09:05:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:15 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0xffffff83, 0x8}}}}}}, &(0x7f00000006c0)) 09:05:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x14}, [@typed={0x8, 0x7, @str=',]\x00'}]}, 0x1c}}, 0x0) 09:05:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) [ 81.184368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 09:05:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0), 0x1) 09:05:15 executing program 2: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000448000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2400, 0x0) 09:05:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) 09:05:15 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0xffffff83, 0x8}}}}}}, &(0x7f00000006c0)) 09:05:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002100)={r0, &(0x7f0000000100), &(0x7f0000001100)=""/4096}, 0x18) 09:05:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) 09:05:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x14}, [@typed={0x8, 0x7, @str=',]\x00'}]}, 0x1c}}, 0x0) 09:05:15 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000440)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "a1d8f2", 0x10, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@ni={0xffffff83, 0x8}}}}}}, &(0x7f00000006c0)) 09:05:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002100)={r0, &(0x7f0000000100), &(0x7f0000001100)=""/4096}, 0x18) [ 81.815229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 09:05:15 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0), 0x1) 09:05:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x14}, [@typed={0x8, 0x7, @str=',]\x00'}]}, 0x1c}}, 0x0) 09:05:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2}, 0x90) 09:05:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002100)={r0, &(0x7f0000000100), &(0x7f0000001100)=""/4096}, 0x18) 09:05:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) [ 81.966530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 09:05:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:16 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0), 0x1) 09:05:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002100)={r0, &(0x7f0000000100), &(0x7f0000001100)=""/4096}, 0x18) 09:05:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2}, 0x90) 09:05:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x27, 0x1, 0x0, 0x0, {0x14}, [@typed={0x8, 0x7, @str=',]\x00'}]}, 0x1c}}, 0x0) 09:05:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 09:05:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a80)='fdinfo/4\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x21, 0x80000003) 09:05:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) 09:05:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x43, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}}, 0x0) [ 82.689192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 09:05:16 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0), 0x1) 09:05:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 09:05:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a80)='fdinfo/4\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x21, 0x80000003) 09:05:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 09:05:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2}, 0x90) [ 82.767129] openvswitch: netlink: IP tunnel dst address not specified 09:05:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x1) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/88, 0x58}], 0x1, &(0x7f0000000540)=""/114, 0x72}}, {{&(0x7f0000000600)=@pppol2tpv3in6, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/155, 0x9b}], 0x1, &(0x7f0000000ac0)=""/220, 0xdc}}], 0x2, 0x10000, &(0x7f0000000c40)={0x77359400}) 09:05:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/236, 0xec, 0x0, &(0x7f0000000200)=@sco, 0x80) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/101, 0x65}], 0x1) sendto$inet(r0, &(0x7f0000000280)="49eea8c297ddf7f9c2e11fdb4907bf4c1a4bda2b97b0a1c8bbf46094d70f4286075e580da69f5edbdbf8729c33b34de88bf90db8dfdb170834d7d928376fa5b3e374785ded07fbde016a2727296ecb4fb2de5a182f850eec1ab221dd5df13ba678857b8a59e6dae5204880e61d4dfafb6595f80853c23b077b8b4aed33912e707c44", 0x82, 0x0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 09:05:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r1) 09:05:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a80)='fdinfo/4\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x21, 0x80000003) 09:05:16 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000600)="f8f56030", 0x4) sendto$inet6(r0, &(0x7f0000000100)="0b0020000000ffffffff", 0xa, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [], @remote}}, 0x1c) 09:05:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) [ 82.861985] openvswitch: netlink: IP tunnel dst address not specified 09:05:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x1) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/88, 0x58}], 0x1, &(0x7f0000000540)=""/114, 0x72}}, {{&(0x7f0000000600)=@pppol2tpv3in6, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/155, 0x9b}], 0x1, &(0x7f0000000ac0)=""/220, 0xdc}}], 0x2, 0x10000, &(0x7f0000000c40)={0x77359400}) 09:05:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2}, 0x90) 09:05:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x43, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}}, 0x0) 09:05:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a80)='fdinfo/4\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x21, 0x80000003) 09:05:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 09:05:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) [ 82.993723] skbuff: bad partial csum: csum=65535/65535 len=0 [ 83.013401] skbuff: bad partial csum: csum=65535/65535 len=0 [ 83.029136] openvswitch: netlink: IP tunnel dst address not specified 09:05:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x1) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/88, 0x58}], 0x1, &(0x7f0000000540)=""/114, 0x72}}, {{&(0x7f0000000600)=@pppol2tpv3in6, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/155, 0x9b}], 0x1, &(0x7f0000000ac0)=""/220, 0xdc}}], 0x2, 0x10000, &(0x7f0000000c40)={0x77359400}) 09:05:17 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000600)="f8f56030", 0x4) sendto$inet6(r0, &(0x7f0000000100)="0b0020000000ffffffff", 0xa, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [], @remote}}, 0x1c) 09:05:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d35000), 0x0) recvmmsg(r2, &(0x7f0000001080), 0x5, 0x0, 0x0) 09:05:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 09:05:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f00000014c0)=[{&(0x7f0000003ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/32, 0x20}, 0x0) 09:05:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/236, 0xec, 0x0, &(0x7f0000000200)=@sco, 0x80) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/101, 0x65}], 0x1) sendto$inet(r0, &(0x7f0000000280)="49eea8c297ddf7f9c2e11fdb4907bf4c1a4bda2b97b0a1c8bbf46094d70f4286075e580da69f5edbdbf8729c33b34de88bf90db8dfdb170834d7d928376fa5b3e374785ded07fbde016a2727296ecb4fb2de5a182f850eec1ab221dd5df13ba678857b8a59e6dae5204880e61d4dfafb6595f80853c23b077b8b4aed33912e707c44", 0x82, 0x0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 09:05:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 09:05:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x43, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}}, 0x0) 09:05:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d35000), 0x0) recvmmsg(r2, &(0x7f0000001080), 0x5, 0x0, 0x0) 09:05:17 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000600)="f8f56030", 0x4) sendto$inet6(r0, &(0x7f0000000100)="0b0020000000ffffffff", 0xa, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [], @remote}}, 0x1c) 09:05:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x1) recvmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/88, 0x58}], 0x1, &(0x7f0000000540)=""/114, 0x72}}, {{&(0x7f0000000600)=@pppol2tpv3in6, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/155, 0x9b}], 0x1, &(0x7f0000000ac0)=""/220, 0xdc}}], 0x2, 0x10000, &(0x7f0000000c40)={0x77359400}) 09:05:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@broadcast, @empty]}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 09:05:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000072c0)=[{{&(0x7f0000005300)=@can, 0x80, &(0x7f0000006900)=[{&(0x7f00000065c0)="5a8678ab29c05cf2793de2a2ed6d8e6285e2126c7a551a7e0d2f3eaa5d6e92ff5409935f152ae322eb1a4544d04e1fce9214cf8aa0113a280e6b77ccbae9bcc76da23843577026254cbb99e1e47d0ddc37821598e507f11a93b0418523b887cfc7d5aa90838e8403cc83e9e9b60fb0f8246e45e2a2be22e75ebb3e3ca37e8c4293c1da6997034d", 0x87}], 0x1, &(0x7f00000069c0)=[{0xb8, 0x13d, 0x8000, "fb1c8f09bb12a687cc9f9e680aaa37eb59e8e59353b9c84c9058bb8df29e54a8accc6cdd78cbeea8cbdafe57cfc50fed8a5bdad3122424791954b489ed10e805636177c60f0233bed84401b5fcc20458061061fe832971e0e771eeb3f19a71fb5f43f8822797f941943855cd2cb33bd050a4edf87d82b1c3c08f3b6fd3af3df618ebc6fb8ba592b7f9d37dd3fbf960d589a2b69d381fdcd0f8de213680aeaa73de90b9"}, {0x70, 0x19f, 0x10001, "24c874e1e562a2aba5746a8a120eebbf068c87c2ed418cabeb0b30819ddc00832944cdf8ee82d63a3158d881c1ddc21590a4d8bd3e6bd0264cb0cc7356ca3ced0567b0f442323c7c7cae2c9c0caae57d710e50c6e7a355c3eccf"}], 0x128, 0x4008800}, 0x591a}], 0x1, 0x0) 09:05:17 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000600)="f8f56030", 0x4) sendto$inet6(r0, &(0x7f0000000100)="0b0020000000ffffffff", 0xa, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [], @remote}}, 0x1c) 09:05:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d35000), 0x0) recvmmsg(r2, &(0x7f0000001080), 0x5, 0x0, 0x0) 09:05:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5ce80700315f85714070") r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) 09:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000000), 0x20000020) 09:05:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x43, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x10}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}}, 0x0) 09:05:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000280)={0x14, 0x55, 0x3ef, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:05:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000072c0)=[{{&(0x7f0000005300)=@can, 0x80, &(0x7f0000006900)=[{&(0x7f00000065c0)="5a8678ab29c05cf2793de2a2ed6d8e6285e2126c7a551a7e0d2f3eaa5d6e92ff5409935f152ae322eb1a4544d04e1fce9214cf8aa0113a280e6b77ccbae9bcc76da23843577026254cbb99e1e47d0ddc37821598e507f11a93b0418523b887cfc7d5aa90838e8403cc83e9e9b60fb0f8246e45e2a2be22e75ebb3e3ca37e8c4293c1da6997034d", 0x87}], 0x1, &(0x7f00000069c0)=[{0xb8, 0x13d, 0x8000, "fb1c8f09bb12a687cc9f9e680aaa37eb59e8e59353b9c84c9058bb8df29e54a8accc6cdd78cbeea8cbdafe57cfc50fed8a5bdad3122424791954b489ed10e805636177c60f0233bed84401b5fcc20458061061fe832971e0e771eeb3f19a71fb5f43f8822797f941943855cd2cb33bd050a4edf87d82b1c3c08f3b6fd3af3df618ebc6fb8ba592b7f9d37dd3fbf960d589a2b69d381fdcd0f8de213680aeaa73de90b9"}, {0x70, 0x19f, 0x10001, "24c874e1e562a2aba5746a8a120eebbf068c87c2ed418cabeb0b30819ddc00832944cdf8ee82d63a3158d881c1ddc21590a4d8bd3e6bd0264cb0cc7356ca3ced0567b0f442323c7c7cae2c9c0caae57d710e50c6e7a355c3eccf"}], 0x128, 0x4008800}, 0x591a}], 0x1, 0x0) 09:05:17 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 09:05:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/236, 0xec, 0x0, &(0x7f0000000200)=@sco, 0x80) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/101, 0x65}], 0x1) sendto$inet(r0, &(0x7f0000000280)="49eea8c297ddf7f9c2e11fdb4907bf4c1a4bda2b97b0a1c8bbf46094d70f4286075e580da69f5edbdbf8729c33b34de88bf90db8dfdb170834d7d928376fa5b3e374785ded07fbde016a2727296ecb4fb2de5a182f850eec1ab221dd5df13ba678857b8a59e6dae5204880e61d4dfafb6595f80853c23b077b8b4aed33912e707c44", 0x82, 0x0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 09:05:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000d35000), 0x0) recvmmsg(r2, &(0x7f0000001080), 0x5, 0x0, 0x0) 09:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000000), 0x20000020) 09:05:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5ce80700315f85714070") r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) 09:05:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 09:05:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000072c0)=[{{&(0x7f0000005300)=@can, 0x80, &(0x7f0000006900)=[{&(0x7f00000065c0)="5a8678ab29c05cf2793de2a2ed6d8e6285e2126c7a551a7e0d2f3eaa5d6e92ff5409935f152ae322eb1a4544d04e1fce9214cf8aa0113a280e6b77ccbae9bcc76da23843577026254cbb99e1e47d0ddc37821598e507f11a93b0418523b887cfc7d5aa90838e8403cc83e9e9b60fb0f8246e45e2a2be22e75ebb3e3ca37e8c4293c1da6997034d", 0x87}], 0x1, &(0x7f00000069c0)=[{0xb8, 0x13d, 0x8000, "fb1c8f09bb12a687cc9f9e680aaa37eb59e8e59353b9c84c9058bb8df29e54a8accc6cdd78cbeea8cbdafe57cfc50fed8a5bdad3122424791954b489ed10e805636177c60f0233bed84401b5fcc20458061061fe832971e0e771eeb3f19a71fb5f43f8822797f941943855cd2cb33bd050a4edf87d82b1c3c08f3b6fd3af3df618ebc6fb8ba592b7f9d37dd3fbf960d589a2b69d381fdcd0f8de213680aeaa73de90b9"}, {0x70, 0x19f, 0x10001, "24c874e1e562a2aba5746a8a120eebbf068c87c2ed418cabeb0b30819ddc00832944cdf8ee82d63a3158d881c1ddc21590a4d8bd3e6bd0264cb0cc7356ca3ced0567b0f442323c7c7cae2c9c0caae57d710e50c6e7a355c3eccf"}], 0x128, 0x4008800}, 0x591a}], 0x1, 0x0) 09:05:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000280)={0x14, 0x55, 0x3ef, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000000), 0x20000020) 09:05:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5ce80700315f85714070") r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) 09:05:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000072c0)=[{{&(0x7f0000005300)=@can, 0x80, &(0x7f0000006900)=[{&(0x7f00000065c0)="5a8678ab29c05cf2793de2a2ed6d8e6285e2126c7a551a7e0d2f3eaa5d6e92ff5409935f152ae322eb1a4544d04e1fce9214cf8aa0113a280e6b77ccbae9bcc76da23843577026254cbb99e1e47d0ddc37821598e507f11a93b0418523b887cfc7d5aa90838e8403cc83e9e9b60fb0f8246e45e2a2be22e75ebb3e3ca37e8c4293c1da6997034d", 0x87}], 0x1, &(0x7f00000069c0)=[{0xb8, 0x13d, 0x8000, "fb1c8f09bb12a687cc9f9e680aaa37eb59e8e59353b9c84c9058bb8df29e54a8accc6cdd78cbeea8cbdafe57cfc50fed8a5bdad3122424791954b489ed10e805636177c60f0233bed84401b5fcc20458061061fe832971e0e771eeb3f19a71fb5f43f8822797f941943855cd2cb33bd050a4edf87d82b1c3c08f3b6fd3af3df618ebc6fb8ba592b7f9d37dd3fbf960d589a2b69d381fdcd0f8de213680aeaa73de90b9"}, {0x70, 0x19f, 0x10001, "24c874e1e562a2aba5746a8a120eebbf068c87c2ed418cabeb0b30819ddc00832944cdf8ee82d63a3158d881c1ddc21590a4d8bd3e6bd0264cb0cc7356ca3ced0567b0f442323c7c7cae2c9c0caae57d710e50c6e7a355c3eccf"}], 0x128, 0x4008800}, 0x591a}], 0x1, 0x0) 09:05:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') dup3(r2, r3, 0x0) shutdown(r1, 0x1) 09:05:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/236, 0xec, 0x0, &(0x7f0000000200)=@sco, 0x80) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/101, 0x65}], 0x1) sendto$inet(r0, &(0x7f0000000280)="49eea8c297ddf7f9c2e11fdb4907bf4c1a4bda2b97b0a1c8bbf46094d70f4286075e580da69f5edbdbf8729c33b34de88bf90db8dfdb170834d7d928376fa5b3e374785ded07fbde016a2727296ecb4fb2de5a182f850eec1ab221dd5df13ba678857b8a59e6dae5204880e61d4dfafb6595f80853c23b077b8b4aed33912e707c44", 0x82, 0x0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 09:05:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000000), 0x20000020) 09:05:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5ce80700315f85714070") r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) 09:05:17 executing program 2: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:18 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 09:05:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_out(r0, 0x4148, &(0x7f0000000040)) 09:05:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 09:05:18 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb6"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:05:18 executing program 2: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') dup3(r2, r3, 0x0) shutdown(r1, 0x1) 09:05:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000280)={0x14, 0x55, 0x3ef, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:05:18 executing program 6: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 09:05:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_out(r0, 0x4148, &(0x7f0000000040)) 09:05:18 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c1809726554877c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343070e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163521d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e2d7fa4f4", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb6"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:05:18 executing program 2: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:18 executing program 6: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 09:05:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') dup3(r2, r3, 0x0) shutdown(r1, 0x1) 09:05:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_out(r0, 0x4148, &(0x7f0000000040)) 09:05:19 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 09:05:19 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb6"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:05:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) 09:05:19 executing program 6: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000280)={0x14, 0x55, 0x3ef, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:05:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$int_out(r0, 0x4148, &(0x7f0000000040)) 09:05:19 executing program 2: clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000200)) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) wait4(r4, 0x0, 0x1040080000000, &(0x7f0000000080)) 09:05:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fremovexattr(r3, &(0x7f00000000c0)=@known='system.posix_acl_default\x00') dup3(r2, r3, 0x0) shutdown(r1, 0x1) 09:05:19 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 09:05:19 executing program 4: r0 = socket(0x40000000002, 0x3, 0x3f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 09:05:19 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fb6"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:05:19 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 09:05:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) [ 85.272612] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! 09:05:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/253, 0xfd}], 0x1, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383be7e2038e9c1b263a3", 0x10) sendmmsg$alg(r2, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000014c0), 0x2, &(0x7f0000001500)}], 0x3f42c54, 0x0) 09:05:19 executing program 4: r0 = socket(0x40000000002, 0x3, 0x3f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 09:05:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000000000)={@remote}, 0x20) 09:05:19 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 09:05:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 09:05:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 09:05:19 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000000000)={@remote}, 0x20) 09:05:19 executing program 4: r0 = socket(0x40000000002, 0x3, 0x3f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 09:05:19 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x511d, 0x0, 0x0, 0x0, 0x800}) 09:05:19 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 09:05:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000000000)={@remote}, 0x20) 10:13:36 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 10:13:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 10:13:36 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x511d, 0x0, 0x0, 0x0, 0x800}) 10:13:36 executing program 4: r0 = socket(0x40000000002, 0x3, 0x3f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bridge0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000e0}, 0x63) 10:47:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x37, &(0x7f0000000000)={@remote}, 0x20) 10:47:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 10:47:44 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x511d, 0x0, 0x0, 0x0, 0x800}) 11:21:52 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 11:21:52 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 11:21:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 11:21:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 11:21:52 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 11:21:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") prctl$setptracer(0x59616d61, r0) prctl$setptracer(0x59616d61, r0) 11:21:52 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x511d, 0x0, 0x0, 0x0, 0x800}) 11:21:52 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)) close(r0) 11:56:00 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 11:56:00 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3bc6) r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f0000316000)={&(0x7f0000002300)=@generic={0x10000000001e, "010000000000e30000000001af268c573c5bf86c483724d41e14dd6a739eff090000000000000000d79f00000000000000076c3f010039d8f986ff03000000000000e550d5fe32c419d67bcbc7e3ad316a1983000000fc341c1fc75624281e27800ece70b076cf979ac40000bd767e2e7821dfd300981a1565b3b16d7436"}, 0x80, &(0x7f00000022c0), 0x0, &(0x7f00002d4000)}, 0x0) 11:56:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x624}) 11:56:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:56:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x1000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 11:56:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x1000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 11:56:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:56:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) 11:56:01 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 11:56:01 executing program 7: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022", 0x31, 0x1400}], 0x0, &(0x7f0000016a00)) 11:56:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 11:56:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x1000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 11:56:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:56:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x624}) 11:56:01 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 11:56:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x1000, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 11:56:01 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) [ 87.175377] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.182608] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 87.262635] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 87.269772] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 87.297392] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.304605] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 87.313179] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 87.320376] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 87.341423] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 87.348561] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock 11:56:01 executing program 7: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022", 0x31, 0x1400}], 0x0, &(0x7f0000016a00)) 11:56:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 11:56:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xffff0000, 0x0, 0xfffff000}}) 11:56:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x624}) 11:56:01 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 11:56:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x2) read$FUSE(r1, &(0x7f0000000ec0), 0x1000) 11:56:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = getpgid(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x13) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000180)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 11:56:01 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) 11:56:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:56:01 executing program 7: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022", 0x31, 0x1400}], 0x0, &(0x7f0000016a00)) [ 87.829512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:56:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x624}) 11:56:01 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 11:56:01 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) 11:56:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xffff0000, 0x0, 0xfffff000}}) [ 87.872781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:56:02 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 11:56:02 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 11:56:02 executing program 7: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022", 0x31, 0x1400}], 0x0, &(0x7f0000016a00)) 11:56:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:56:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1224) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00', &(0x7f00000002c0)=""/51, 0x33) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0x0, 0x2}, 0x10) 11:56:02 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) 11:56:02 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) [ 88.927703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:56:03 executing program 3: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 11:56:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xffff0000, 0x0, 0xfffff000}}) 11:56:03 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 11:56:03 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffe5}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 11:56:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x2) read$FUSE(r1, &(0x7f0000000ec0), 0x1000) 11:56:03 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)={0x0, r2}) 11:56:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:56:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1224) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00', &(0x7f00000002c0)=""/51, 0x33) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0x0, 0x2}, 0x10) 11:56:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xffff0000, 0x0, 0xfffff000}}) 11:56:03 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffe5}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 11:56:03 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)={0x0, r2}) 11:56:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1224) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00', &(0x7f00000002c0)=""/51, 0x33) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0x0, 0x2}, 0x10) [ 89.393368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:56:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:56:03 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffe5}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 11:56:03 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)={0x0, r2}) 11:56:03 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffe5}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 11:56:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1224) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00', &(0x7f00000002c0)=""/51, 0x33) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0x0, 0x2}, 0x10) 11:56:03 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x90) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)={0x0, r2}) 11:56:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x2) read$FUSE(r1, &(0x7f0000000ec0), 0x1000) [ 89.717549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:56:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)=0x2) read$FUSE(r1, &(0x7f0000000ec0), 0x1000) [ 89.831637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 11:56:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000280)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)={[{@noflush_merge='noflush_merge'}]}) 11:56:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a3a870700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000a40)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f52a1cf0500000000010001feff00000000010081000000"], 0x18) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 11:56:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000df1000)=0x8, 0x4) 11:56:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 11:56:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x153, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) close(r1) 11:56:04 executing program 3: creat(&(0x7f0000001380)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 11:56:04 executing program 6: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffffffffffb}, &(0x7f00000001c0)=0x8) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) clone(0x48009fff, &(0x7f0000001f37), &(0x7f00000002c0), &(0x7f0000001000), &(0x7f00000003c0)) 11:56:04 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x3ff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) 11:56:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 11:56:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000df1000)=0x8, 0x4) 11:56:04 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="cd3997030f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x3ff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @mcast2}}}}}}, 0x0) 11:56:04 executing program 3: creat(&(0x7f0000001380)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 11:56:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a3a870700315f85714070") r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x402) syz_open_dev$mice(&(0x7f0000000a40)='/dev/input/mice\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f52a1cf0500000000010001feff00000000010081000000"], 0x18) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 90.845900] attempt to access beyond end of device [ 90.850958] loop4: rw=12288, want=8200, limit=20 [ 90.862553] IPVS: ftp: loaded support on port[0] = 21 [ 90.934637] kasan: CONFIG_KASAN_INLINE enabled [ 90.939324] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 90.946747] general protection fault: 0000 [#1] SMP KASAN [ 90.952323] CPU: 0 PID: 8185 Comm: syz-executor4 Not tainted 4.18.0-rc7-next-20180801+ #29 [ 90.960732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.970196] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 90.975392] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 90.994305] RSP: 0018:ffff88019f37ebe8 EFLAGS: 00010246 [ 90.999664] RAX: dffffc0000000000 RBX: ffff88019f37ef30 RCX: ffffc9000641f000 [ 91.006930] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 91.014191] RBP: ffff88019f37ef58 R08: ffff8801c967c180 R09: fffff94000e52d46 [ 91.021458] R10: fffff94000e52d46 R11: ffffea0007296a37 R12: fffffffffffffffb [ 91.028717] R13: ffff88019f37eeb0 R14: 0000000000000003 R15: ffff88019e728600 [ 91.035975] FS: 00007fecefa66700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 91.044185] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.050072] CR2: 00000000004d4e70 CR3: 00000001d839e000 CR4: 00000000001406f0 [ 91.057333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.064602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.071863] Call Trace: [ 91.074457] ? get_checkpoint_version+0x620/0x620 [ 91.079297] ? save_stack+0xa9/0xd0 [ 91.082914] ? save_stack+0x43/0xd0 [ 91.086531] ? kasan_kmalloc+0xc4/0xe0 [ 91.090417] ? __kmalloc+0x14e/0x760 [ 91.094135] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 91.099324] ? f2fs_fill_super+0x2d42/0x8110 [ 91.103726] ? mount_bdev+0x314/0x3e0 [ 91.107522] ? f2fs_mount+0x3c/0x50 [ 91.111145] ? vfs_get_tree+0x1cb/0x5c0 [ 91.115115] ? do_mount+0x6f2/0x1e20 [ 91.118826] ? ksys_mount+0x12d/0x140 [ 91.122620] ? __x64_sys_mount+0xbe/0x150 [ 91.126779] ? do_syscall_64+0x1b9/0x820 [ 91.130943] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.136326] ? lock_acquire+0x1e4/0x540 [ 91.140308] ? cache_grow_end.part.37+0x95/0x170 [ 91.145064] ? lock_downgrade+0x8f0/0x8f0 [ 91.149222] ? kasan_check_read+0x11/0x20 [ 91.153397] ? do_raw_spin_unlock+0xa7/0x2f0 [ 91.157803] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 91.162380] ? kasan_check_write+0x14/0x20 [ 91.166610] ? do_raw_spin_lock+0xc1/0x200 [ 91.170859] ? kasan_unpoison_shadow+0x35/0x50 [ 91.175436] ? kasan_kmalloc+0xc4/0xe0 [ 91.179322] ? __kmalloc+0x315/0x760 [ 91.183057] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 91.188245] f2fs_get_valid_checkpoint+0x436/0x1ec0 [ 91.193276] ? _raw_spin_unlock+0x22/0x30 [ 91.197423] ? f2fs_recover_orphan_inodes+0x1180/0x1180 [ 91.202785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.208322] ? f2fs_iget+0x4f5/0x4fa0 [ 91.212128] ? lock_downgrade+0x8f0/0x8f0 [ 91.216268] ? lock_downgrade+0x8f0/0x8f0 [ 91.220422] ? f2fs_inode_chksum_set+0xf0/0xf0 [ 91.225002] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 91.229587] ? zap_class+0x740/0x740 [ 91.233311] ? trace_hardirqs_on+0xd/0x10 [ 91.237461] ? lock_acquire+0x1e4/0x540 [ 91.241434] ? debug_object_activate+0x41a/0x690 [ 91.246188] ? lock_downgrade+0x8f0/0x8f0 [ 91.250328] ? save_stack+0x43/0xd0 [ 91.253949] ? kasan_check_read+0x11/0x20 [ 91.258113] ? lock_acquire+0x1e4/0x540 [ 91.262258] ? __percpu_counter_init+0x2ad/0x370 [ 91.267095] ? lock_downgrade+0x8f0/0x8f0 [ 91.271239] ? kasan_check_read+0x11/0x20 [ 91.275387] ? do_raw_spin_unlock+0xa7/0x2f0 [ 91.279790] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 91.284363] ? kasan_check_write+0x14/0x20 [ 91.288589] ? do_raw_spin_lock+0xc1/0x200 [ 91.292818] ? trace_hardirqs_on+0xd/0x10 [ 91.296982] ? __percpu_counter_init+0x2b2/0x370 [ 91.301736] ? percpu_counter_cpu_dead+0x1c0/0x1c0 [ 91.306659] ? __init_waitqueue_head+0x9e/0x150 [ 91.311409] ? init_wait_entry+0x1c0/0x1c0 [ 91.315651] f2fs_fill_super+0x2d42/0x8110 [ 91.319879] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 91.324909] ? f2fs_commit_super+0x400/0x400 [ 91.329313] ? perf_trace_lock+0xde/0x920 [ 91.333543] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 91.338646] ? widen_string+0xe0/0x2e0 [ 91.342521] ? format_decode+0xaf0/0xaf0 [ 91.346582] ? string+0x225/0x2d0 [ 91.350042] ? widen_string+0x2e0/0x2e0 [ 91.354007] ? register_shrinker_prepared+0x15b/0x1c0 [ 91.359192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.364840] ? bdev_name.isra.8+0x1a1/0x1f0 [ 91.369154] ? pointer+0x157/0x990 [ 91.372692] ? netdev_bits+0xb0/0xb0 [ 91.376392] ? format_decode+0x1b1/0xaf0 [ 91.380536] ? set_precision+0xe0/0xe0 [ 91.384410] ? do_raw_spin_unlock+0xa7/0x2f0 [ 91.388817] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.394339] ? vsnprintf+0x20d/0x1b60 [ 91.398144] ? vsprintf+0x40/0x40 [ 91.401591] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 91.406597] ? set_blocksize+0x2c1/0x340 [ 91.410653] mount_bdev+0x314/0x3e0 [ 91.414275] ? mount_bdev+0x314/0x3e0 [ 91.418179] ? f2fs_commit_super+0x400/0x400 [ 91.422581] f2fs_mount+0x3c/0x50 [ 91.426031] ? kill_f2fs_super+0x330/0x330 [ 91.430322] legacy_get_tree+0x131/0x460 [ 91.434987] vfs_get_tree+0x1cb/0x5c0 [ 91.438864] ? vfs_set_fs_source+0x12c/0x180 [ 91.443292] do_mount+0x6f2/0x1e20 [ 91.446834] ? check_same_owner+0x340/0x340 [ 91.451145] ? lock_release+0xa30/0xa30 [ 91.455119] ? copy_mount_string+0x40/0x40 [ 91.459341] ? kasan_kmalloc+0xc4/0xe0 [ 91.463220] ? kmem_cache_alloc_trace+0x318/0x780 [ 91.468066] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 91.473594] ? _copy_from_user+0xdf/0x150 [ 91.477735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 91.483265] ? copy_mount_options+0x285/0x380 [ 91.487931] ksys_mount+0x12d/0x140 [ 91.491551] __x64_sys_mount+0xbe/0x150 [ 91.495524] do_syscall_64+0x1b9/0x820 [ 91.499401] ? finish_task_switch+0x1d3/0x870 [ 91.503901] ? syscall_return_slowpath+0x5e0/0x5e0 [ 91.508818] ? syscall_return_slowpath+0x31d/0x5e0 [ 91.513841] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 91.518847] ? __switch_to_asm+0x34/0x70 [ 91.522899] ? __switch_to_asm+0x34/0x70 [ 91.526969] ? __switch_to_asm+0x40/0x70 [ 91.531016] ? __switch_to_asm+0x34/0x70 [ 91.535067] ? __switch_to_asm+0x40/0x70 [ 91.539115] ? __switch_to_asm+0x34/0x70 [ 91.543170] ? __switch_to_asm+0x40/0x70 [ 91.547221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 91.552059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 91.557239] RIP: 0033:0x45943a [ 91.560428] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 91.579326] RSP: 002b:00007fecefa65a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 91.587197] RAX: ffffffffffffffda RBX: 00007fecefa65b30 RCX: 000000000045943a [ 91.594455] RDX: 00007fecefa65ad0 RSI: 00000000200000c0 RDI: 00007fecefa65af0 [ 91.601713] RBP: 00000000200000c0 R08: 00007fecefa65b30 R09: 00007fecefa65ad0 [ 91.608970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000014 [ 91.616226] R13: 0000000000000000 R14: 00000000004c8ea0 R15: 0000000000000000 [ 91.623490] Modules linked in: [ 91.626676] Dumping ftrace buffer: [ 91.630200] (ftrace buffer empty) 11:56:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x153, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) close(r1) 11:56:05 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 91.634538] ---[ end trace 42ad1d26d991ceb3 ]--- [ 91.639361] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 91.644594] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 91.665191] RSP: 0018:ffff88019f37ebe8 EFLAGS: 00010246 [ 91.670626] RAX: dffffc0000000000 RBX: ffff88019f37ef30 RCX: ffffc9000641f000 [ 91.677935] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 91.685248] RBP: ffff88019f37ef58 R08: ffff8801c967c180 R09: fffff94000e52d46 [ 91.692565] R10: fffff94000e52d46 R11: ffffea0007296a37 R12: fffffffffffffffb [ 91.699886] R13: ffff88019f37eeb0 R14: 0000000000000003 R15: ffff88019e728600 [ 91.708674] FS: 00007fecefa66700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 91.717003] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.722929] CR2: 00000000004d4e70 CR3: 00000001d839e000 CR4: 00000000001406f0 [ 91.730253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.737570] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.744888] Kernel panic - not syncing: Fatal exception [ 91.750779] Dumping ftrace buffer: [ 91.754315] (ftrace buffer empty) [ 91.758006] Kernel Offset: disabled [ 91.761619] Rebooting in 86400 seconds..