[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 18.453364] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 21.906288] random: sshd: uninitialized urandom read (32 bytes read) [ 22.261453] random: sshd: uninitialized urandom read (32 bytes read) [ 22.832424] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. [ 28.354866] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/13 20:33:30 fuzzer started [ 29.535950] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/13 20:33:33 dialing manager at 10.128.0.26:41001 2018/08/13 20:33:38 syscalls: 1 2018/08/13 20:33:38 code coverage: enabled 2018/08/13 20:33:38 comparison tracing: enabled 2018/08/13 20:33:38 setuid sandbox: enabled 2018/08/13 20:33:38 namespace sandbox: enabled 2018/08/13 20:33:38 fault injection: enabled 2018/08/13 20:33:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/13 20:33:38 net packed injection: enabled 2018/08/13 20:33:38 net device setup: enabled [ 36.909123] random: crng init done 20:35:35 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @multicast1}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000140)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @remote, @loopback}, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r2, 0x81, "5a6c8f742338b05190041e1961e198e179259fbb1e73bb9f2418e395161391d8bbfdc81d9ccd30437a52948b7376415c0b70da663b7507d165279f5a7663470bc2be1c0edb2828691f5d95c4a1835bc4228ba043ad7e4e335c7ae601862aa20b5c7a6c40a609201003dc978cfd480835fcf32dde78cf2a97e99b35d0eb5a2e61cf"}, &(0x7f0000000300)=0x89) r3 = accept(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f00000003c0)=0x80) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000001400)={&(0x7f0000000400)=""/4096, 0x28000, 0x800, 0x3}, 0x18) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001440)={'HL\x00'}, &(0x7f0000001480)=0x1e) pause() ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000014c0)={'bcsh0\x00', 0x1}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000015c0)={@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, {&(0x7f0000001500)=""/117, 0x75}, &(0x7f0000001580), 0x30}, 0xa0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000001680)=0x6) ioctl$RTC_PIE_ON(r0, 0x7005) r4 = getpgrp(0xffffffffffffffff) ptrace$poke(0x5, r4, &(0x7f00000016c0), 0x10001) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000001700), 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/cuse\x00', 0x4000, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000001780)=0x81) ioctl$TIOCLINUX5(r5, 0x541c, &(0x7f00000017c0)={0x5, 0x8, 0x20, 0x2, 0x7}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000001800)=""/50) inotify_init1(0x80000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001840)=0x600, 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000001880), &(0x7f00000018c0)=0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001900)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = open(&(0x7f0000001940)='./file0\x00', 0x100, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000001980)={0x9}) setns(r6, 0x20000000) getpid() socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 20:35:35 executing program 2: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)='\x00', 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r1, r2) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x400142, 0x0) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000380)={0x7ff, 0x3}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x4c, "86be04e67a323eef7dd184010cf923ddcac88ceef48b71aece39de30fb4986a27ef17bdd15e6a36f554e2e69c9b0e50c341b987400c815944260c20e0e02a6737bfa5e6c5a2d2f01bb9e90de"}, &(0x7f0000000440)=0x54) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000480)={r4, 0x1d4}, &(0x7f00000004c0)=0x8) fcntl$getflags(r3, 0x40b) modify_ldt$write2(0x11, &(0x7f0000000500)={0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000, 0x9, 0xf3f, 0x1f, 0x9, 0x164400000000}, 0x10) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000540)="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") inotify_add_watch(r3, &(0x7f0000000640)='./file0\x00', 0x4000810) mkdir(&(0x7f0000000680)='./file0\x00', 0x120) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000800)={0x3f, 0x92c, &(0x7f00000006c0), &(0x7f0000000700)="593263862605f99e2c203fbae4bb5a361763f28ab50388b9f83d7525de8127fb9e522a60608dc41f0245d79603174dad19ad5498b9750178b0154f339474384dfd15e15aa85e54643b209cc2b5a192cf5346d07371275cd6053ecd7d7c497ddf59c834e15d7c3573cb26f9b857c4a3622d436749ee57bf45cff6a9ea71c508f51170326736dbf0951a71782fd3136ac3bdf57e6a444bc9f3ec41e0ad136b08e0811b4e8dd0307b3b37932c9d519aeace4b9c11ab560535392394500136636b13cd08b7f200dc47caba3e6e597e978ed5302d80dc8611eb711d2f", 0x0, 0xda}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000840)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1a}, 0x465}, @in={0x2, 0x4e24, @remote}], 0x3c) connect(r3, &(0x7f0000000880)=@hci={0x1f, r0, 0x3}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000980)={0x2, 0x8001, 0xffffffffffffff81, 0x2, 0x3}) fstat(r3, &(0x7f00000009c0)) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000a80)={0x9, &(0x7f0000000a40)=[{0x9, 0x1}, {0x3, 0x4}, {0x8, 0x9}, {0x4, 0x1}, {0xffff, 0x2}, {0x100000001, 0x9}, {0x8000, 0x4}, {0x2, 0x3}, {0x8, 0x7}]}) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000ac0)={r5, 0x81}, &(0x7f0000000b00)=0x8) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000b40)=0xd434) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000c40)={0x1f5a0000, 0xfeb}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000c80)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001e00)={0x3, 0x0, &(0x7f0000000cc0)=""/72, &(0x7f0000000d40)=""/129, &(0x7f0000000e00)=""/4096}) inotify_init1(0x80000) utime(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)={0x7ff800, 0x5}) 20:35:35 executing program 7: r0 = gettid() ptrace$pokeuser(0x6, r0, 0x5, 0x200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r1, 0x8, r0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x8100) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x4000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_fscache='cache=fscache'}]}}) sendmsg$xdp(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x2c, 0x7, r3, 0x30}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f88d8a0c4209b153d0369a55704a6071360c563e054164011563d21083e7c1fcbd30349aef70b20d7e4b6bda36a7cf8191c33102ef82abd01be96a5906566e6a5579cfc991d34871155401a875b1e5849e7419b4946ce63c3395c037a8dd1352c16bfa88f41076ff51b1a8a236b1c4ea606a424df6ed9144fcfa69947e30616ee1080b769120a08a82f17a6b75d069e9a14c0483f025317c2f592e5144d291087d43f4ba84ca21852544f64b5f2919568f1e41548a5b9d1538c287bb738740119f16714d0b76a8a254bbfc6db47a4bf0cd900ae6cd45fa", 0xd7}], 0x1, 0x0, 0x0, 0x4040}, 0x4040000) mq_notify(r2, &(0x7f0000000440)={0x0, 0x2a, 0x1, @tid=r0}) sched_rr_get_interval(r0, &(0x7f0000000480)) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000004c0)={@empty, r3}, 0x14) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000500)={'bcsh0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}) ptrace$cont(0x18, r0, 0x0, 0x6b6fb07) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000540)={{0x7, 0x200, 0x1, 0x2a1f, 0x10000, 0xec50d17}, 0x4}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000580)={0x5, 0x1000, 0x6, 0x4, 0x9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0xa0, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x10001, @loopback, 0x101}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x80000001}, @in6={0xa, 0x4e23, 0x8, @local, 0x7fffffff}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0x7fffffff, @remote, 0xfffffffffffffbcd}]}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000700)={r5, @in6={{0xa, 0x4e23, 0x8, @remote}}, 0x100000000, 0xffff, 0x1, 0x400, 0x1}, 0x98) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000840)=""/68, &(0x7f00000008c0)=0x44) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000900)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000940)=0x10) syz_open_dev$evdev(&(0x7f0000000980)='/dev/input/event#\x00', 0x1, 0x20000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000009c0)={0x8, 0x407, 0x9}) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000a00)={0x400, 0x8001, 0x50f0f366}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000a40)={0x0, 0x10000}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001280)={&(0x7f0000000a80), 0xc, &(0x7f0000001240)={&(0x7f0000000b00)={0x730, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x2a4, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x80, 0x3816, 0xe9}, {0x1, 0x9, 0x100000001, 0x1}, {0x5, 0x8c, 0x2, 0x5}, {0x100, 0x1, 0x2, 0x7f00000000000000}, {0x8, 0xffffffffffffffe0, 0x0, 0x1000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4e86}}}]}}, {{0x8, 0x1, r3}, {0x1b0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xb16}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x192}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x100, 0x7fffffff, 0x800, 0x101}, {0x38ef09a5, 0x7, 0x400, 0x1ff}, {0x7, 0x1, 0x3, 0x7}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r3}, {0x1a8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x14000}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f2f}}, {0x8, 0x6, r3}}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_open_dev$sndctrl(&(0x7f00000012c0)='/dev/snd/controlC#\x00', 0x5, 0x2) gettid() getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001300)={r5, 0x0, 0x20, 0x3d, 0xffffffff}, &(0x7f0000001340)=0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vcs\x00', 0x20040, 0x0) 20:35:35 executing program 5: io_setup(0x401, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0xffffffffffffff01, 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={0x2e4}, 0x8}) r1 = timerfd_create(0x6, 0x800) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xd248, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @multicast1}, &(0x7f0000000680)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @broadcast}, &(0x7f0000000900)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000a00)={@empty, @rand_addr, 0x0}, &(0x7f0000000a40)=0xc) getpeername$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000b00)={@broadcast, @multicast1, 0x0}, &(0x7f0000000b40)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14, 0x80800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000dc0)={@loopback, @broadcast, 0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000e40)={@empty, 0x0}, &(0x7f0000000e80)=0x14) recvmsg(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000ec0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/61, 0x3d}, {&(0x7f0000000f80)=""/41, 0x29}, {&(0x7f0000000fc0)=""/112, 0x70}, {&(0x7f0000001040)=""/143, 0x8f}], 0x4, &(0x7f0000001140)=""/65, 0x41, 0x10000}, 0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001280)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000b180)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f000000b280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f000000b2c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f000000b3c0)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f000000b400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000b440)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f000000b480)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f000000b4c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000b500)=0x14) getsockname(0xffffffffffffffff, &(0x7f000000b900)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000b980)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f000000b9c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000ba00)=0x14) accept$packet(0xffffffffffffffff, &(0x7f000000bb00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000bb40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000bb80)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f000000bc80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000bcc0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f000000bdc0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f000000be00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000be40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f000000be80)={0x11, 0x0, 0x0}, &(0x7f000000bec0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f000000bf00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000bf40)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000e700)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f000000e800)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000e840)={@local, @dev, 0x0}, &(0x7f000000e880)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000e8c0)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f000000e9c0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f000000ea00)={@dev, 0x0}, &(0x7f000000ea40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f000000f680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f000000f640)={&(0x7f000000ea80)={0xba0, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xbc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1a8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x1bc, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x4, 0x1, 0x990a, 0x2}, {0x7, 0x4, 0x1, 0x1971}, {0xffffffff, 0x5, 0x620a, 0x3ff}, {0x9, 0x8000, 0x4, 0x8}]}}}]}}, {{0x8, 0x1, r21}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r22}, {0xb0, 0x2, [{0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x0, 0xb3, 0xffffffff, 0x7}, {0xad, 0xffff, 0x81, 0x4}, {0x9, 0x0, 0x6, 0x3}, {0x3, 0x7, 0x100, 0x70a6}, {0x1eb, 0x1000, 0x7, 0x2}, {0x9, 0x0, 0x6, 0x80000000}, {0x7, 0x5, 0x7, 0x800}, {0x80, 0x3, 0x7, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r23}, {0xf8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r28}, {0x260, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r29}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r32}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r33}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x20, 0x6, 0x0, 0xfffffffffffffffd}, {0x8, 0x8, 0x80, 0x1f}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r35}, {0x18c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r36}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}]}}]}, 0xba0}, 0x1, 0x0, 0x0, 0x800}, 0x400c5) 20:35:35 executing program 6: r0 = epoll_create1(0x0) write(r0, &(0x7f0000000000)="d44dc375d59849ba6adb6ab0", 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x0, 0xff, 0xe08, 0x4}, {0x4e, 0x6ac3, 0x9}, {0x2, 0x4, 0x8, 0x7}, {0x8000, 0xff, 0x9, 0x6}, {0x2, 0x7fff, 0x5, 0x1}, {0x40, 0x8, 0x4cb, 0x1}]}, 0x10) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x800, 0x3, &(0x7f0000000440)=[{&(0x7f00000001c0)="bf53cd09429b61f0f2c1d9f96da0dd35d709318426d5b377a484bccb1337b4dae9d8b576369e473d8494fe8018babd6c9779a8d18525625c722afe2f1f0e6785cf270f692e569868421baf3d132991e255d46984332eb02b34935972566eec57f18ea8acedc0a29d360f792bcc4257bfceb2698ab165d11c6ff9504c950d6bbc843077c34b320b0d0f6037bd24400954aeb96d", 0x93, 0xd7}, {&(0x7f0000000280)="63b0e5a4c1e22770ea3b098dd33e8375e48d2250b42edc6538e66162d78d2e895910c967df72d9abc2bcdc47f4afbed7bb4b0e2bdc3d318b553983a234ef53903a4cd55931e01d543d5f52b9bff3fe11dc1d8bae839d487f4196a141516698d231193761356ccac68036348bd2dfbfad9fe5f4a8232e9a497a321f558a9bac540bc131c89ec1a48541c623161fe852e423edaf3f0b", 0x95, 0x5}, {&(0x7f0000000340)="701d15ce8d5dcc7778f83f0916a1e0f600d0ac57ebdfce25317f13b5c61c51902b598a6fd4c85041372b8ca40a9db10a1f175601ed02f650009e765a469f8a2650e469d0ae16feb2998f7ccf974abe2d81ff20204123710de76d8cc700411bc746d5d3a04b1ff34ca85b2387da20599ca439ebfef6ee19e11bf2d8fb9d89247dac4372d57db0f06270142a0474aff3503dcc875af76f36f9f0a405a59969d6cfc0bb879550d6436a375577ccc9093c6619f41e8cd91e731cbdb3a9984c48bb0a84dd3f254a49ed004f72f9add2f3e7d39a161896cf450643e62612f275066304e9a5a908cf2d2e3b075cdcf84d1fd489", 0xf0, 0x4199}], 0x10000, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@usrquota='usrquota'}, {@usrquota='usrquota'}, {@discard='discard'}]}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="d53b734821db3d9f7a98854ea2eb2dfe1d8bbb6a050b10b4b9f1d3e1bf08b7b3811d1b636941692e770f34be2931726481c39c12cd0139aa2bea772bd17c3ed264d4786750c6d1bc1e310925a01d6f2189f32a1f506032d993b6959b312e97b43088f082dd5f49852ffd2f8d0c0d4e09c8d9cd44704c5c05380d8081a88a4ac61ae253ec014af347223fc6948f2514c46dacc5d7a78d7ca1b674d57d68e59be1ddcf1bbe5375174cbee60ee4f1b8ae4f8bb38eb3ef890418dda0") r2 = mq_open(&(0x7f0000000600)='\x00', 0x40, 0x1, &(0x7f0000000640)={0x7930, 0x80000000, 0x4, 0x1f, 0x3, 0xfd3a, 0x2, 0x91be244}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000680)='/dev/qat_adf_ctl\x00', 0xf534cf6557f595df, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000006c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000700)=r4, 0x12) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000740)="1c5bf1270d3d1cc96f6f2a7231cc39b3bafff05589836a168036bab079b685c671b2ad6caeef79a206c41d3d49b45d3a20c6811370f2364a15ff1e866458a66c5bb883bfc30dbbf8c44b2ea180b0bba23a2abd176e211edbba47679d5da4af68c72032b19aab84b20103fffc8cd79e0e5dde4d5295c48ecd06fb189a630f433cd5be83ace1b6b16f67de47") fcntl$setlease(r3, 0x400, 0x3) r5 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f0000009400)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/254, 0xfe}, {&(0x7f0000000940)=""/38, 0x26}, {&(0x7f0000000980)=""/2, 0x2}, {&(0x7f00000009c0)=""/102, 0x66}, {&(0x7f0000000a40)=""/46, 0x2e}], 0x5, &(0x7f0000000b00)=""/7, 0x7, 0x4}, 0x100000000}, {{&(0x7f0000000b40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/167, 0xa7}], 0x2, &(0x7f0000000dc0)=""/36, 0x24}, 0x3f}, {{&(0x7f0000000e00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000e80)=""/107, 0x6b}, {&(0x7f0000000f00)=""/47, 0x2f}, {&(0x7f0000000f40)=""/136, 0x88}, {&(0x7f0000001000)=""/87, 0x57}, {&(0x7f0000001080)=""/36, 0x24}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/128, 0x80}], 0x7, &(0x7f00000021c0)=""/4096, 0x1000, 0x2}, 0xee61}, {{&(0x7f00000031c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000006600)=[{&(0x7f0000003240)=""/217, 0xd9}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/90, 0x5a}, {&(0x7f00000053c0)=""/9, 0x9}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/133, 0x85}, {&(0x7f00000064c0)=""/68, 0x44}, {&(0x7f0000006540)=""/185, 0xb9}], 0x9, &(0x7f00000066c0)=""/154, 0x9a, 0x8}, 0x1}, {{&(0x7f0000006780)=@can, 0x80, &(0x7f0000006b40)=[{&(0x7f0000006800)=""/182, 0xb6}, {&(0x7f00000068c0)=""/39, 0x27}, {&(0x7f0000006900)=""/66, 0x42}, {&(0x7f0000006980)=""/98, 0x62}, {&(0x7f0000006a00)=""/196, 0xc4}, {&(0x7f0000006b00)=""/2, 0x2}], 0x6, &(0x7f0000006bc0)=""/226, 0xe2, 0x2}, 0x1000000}, {{&(0x7f0000006cc0)=@can, 0x80, &(0x7f0000008f00)=[{&(0x7f0000006d40)=""/64, 0x40}, {&(0x7f0000006d80)=""/4096, 0x1000}, {&(0x7f0000007d80)=""/4096, 0x1000}, {&(0x7f0000008d80)=""/112, 0x70}, {&(0x7f0000008e00)=""/64, 0x40}, {&(0x7f0000008e40)=""/40, 0x28}, {&(0x7f0000008e80)=""/97, 0x61}], 0x7, &(0x7f0000008f80)=""/92, 0x5c, 0x3}, 0x7}, {{&(0x7f0000009000)=@rc, 0x80, &(0x7f0000009340)=[{&(0x7f0000009080)=""/168, 0xa8}, {&(0x7f0000009140)=""/128, 0x80}, {&(0x7f00000091c0)=""/201, 0xc9}, {&(0x7f00000092c0)=""/27, 0x1b}, {&(0x7f0000009300)=""/57, 0x39}], 0x5, &(0x7f00000093c0)=""/4, 0x4, 0x401}, 0x7}], 0x7, 0x2002, &(0x7f00000095c0)) bind$packet(r2, &(0x7f0000009600)={0x11, 0x9, r6, 0x1, 0x1, 0x6, @link_local}, 0x14) ioctl$int_in(r5, 0x5473, &(0x7f0000009640)=0x100000000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x2) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000009680)) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000096c0)=0x8) syz_open_dev$mouse(&(0x7f0000009700)='/dev/input/mouse#\x00', 0x1, 0x200) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000009740)=0x4) getresgid(&(0x7f0000009780), &(0x7f00000097c0)=0x0, &(0x7f0000009800)) fstat(r2, &(0x7f0000009840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000098c0)='./file0\x00', &(0x7f0000009900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000009980)='./file0\x00', &(0x7f00000099c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000009a40)=[r8, r9, r10, r11]) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000009a80)={"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"}) accept4(r7, 0x0, &(0x7f0000009e80), 0x80800) 20:35:35 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x3, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @remote, 'ip6gre0\x00'}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="7a874923e3e162e2e7eb202cf7e82c72cbebd5cc24c0ddfc3141d8fa6b7c8846cfa2fdf9c25a20d6cc641f4117fce0873b49cb6fa81bee7a661932a987404d914269862965c7e66a5b9ed9904450c77111b672eb19b880bd0e735539", 0x5c}, {&(0x7f0000000180)="d60104db04774eb3f1e197ba5ea745ab4292aa5839028e277f005a0503c85b07ae0734857368f9f531c76e34f793d750c68b10178668f874611af11313d81510a9a6fcf3adcd43c1cee3d82b382b86fb12507c108bac22b0c4b964fb17c3602db5c7ece3e0b26eeed6a2fbf565813cea4fe35cded5bc474252e009b606122da12ebfa7086b5b8f7d706df770b4680c4dee286de6351e3fd4dfa84e0a1599eb777c6bd80343847b33e0ece6723f1f9c64f00095756c8ef0573d11be57e2c80f", 0xbf}, {&(0x7f0000000240)="dfe9ffe6c568883ff93ab0cecd5ea4aee661174fe826d3b0e648f9631a297bea09d4e43ec83ad4032929389c683314dd3fefc32eb9a67ed3f91f2e0d97bb5dfc5902619a24e3ff9afb4a949c531ca7687b0e9998ac9ec27afc59da718ef7b5a4d311d231e58d792682d049575508a9858ab544792a30736acc489e898192acba01c6ef5c6c19fb0670eb6dc6d746c3ce38cc61f8710291a828572eaab03b1c4fe2d74311d0ff425404766a45522d89dd1b577e0dbf429eb6d10760f47908453e2c87e73b297602c291c39ded593627777a37017148ebf571", 0xd8}, {&(0x7f0000000340)="2629873004ee05142e5f14fe5bcd97dbe7c4ea200e2ff438a85587252cf7b0ed3bce1e38837cd112b7cf705ccb54c82aa48f2d8008e05190cc8530b2", 0x3c}, {&(0x7f0000000380)="149d968f1b5d12e923bb718e9899820b6c89abcf8317ef2a26f99f5b9f438d4a98bc18fba123aa7058c738e7129b0860bbe43f5a047fe8d0c845d82ebfe4c1fccc3c228f", 0x44}, {&(0x7f0000000400)="a4ee381e0b925b07be994661781b898ad73ddf1ddd41da017cf38c9c03f3de95563bc7f43b6ddff217ddc66b222ecdd25a1dcbb739da75249ab914e441a692961cc4d214d1d94725f4733fe2b6d6ef5b7daef93b1045a0f87f42ae0a7a33a05adb9012a0cbe706b473652406fff3ccc9cfd04f440d4f339ed81db4a4d676036ae0ce736ee4cfb40abad849557451af8242546b159fdb81c5c3143193f3aa2417d6d51bd8195ac375fccff3a653bd0a088867d8afe87417b2afab5d7e30b6bdceafc7885afc2714ad22a33b8451fe9b68", 0xd0}], 0x6, 0x0, 0x0, 0x8000}, 0x20040004) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000005c0)=@assoc_value={0x0, 0x20}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000640)={r2, 0xc7, "d869d81a1f12c708692c57c7bac82b9d964724ba367c0bf0eeac7f8b4f4f6ef3b82eb7a5e240c493440474e011c35ba57cae04a51cc5386c26f273962a8b23f5135dc510fcf578b9ea2bcfb41f2d525ebe75bf9604a98095c33aff98d26cac7d770a9ff0cc1a5444cda5ff51c0cc6cf6d3191e0213f861cf3b4adf66465719f517791f40aec29081867984d0973ea079692fa44808216badbdc639199ad56656d246b3e23078ff248ccbd2252bae2770dac319c88b9cd945d8aef5f12d9ae6d89c622bced6549b"}, &(0x7f0000000740)=0xcf) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f00000007c0)) accept$alg(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000800)={0x0, 0x3, 0xfffffffffffffff7, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000840)={r3, 0x80000000}, 0x8) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000880)="a2f488720da958864d5c50cd8c3858cd0b264e0096a346c1de068d3b3a232e8d0f48ab332f9bdab11ffbe809f89d6234c1d98fd163cb5d637335901cbd80f53c4f7c38d2fc97f9f85c114380718bd327398865682837b6ddfe088436a4e5524435ddcfa5e2df6e9d0d47f74f0dab9e16eb40659285a75b82c5f8e82e57e6abd0f15d53e0965088d119159e03e8b92c4ac8fd43da8a0c2d6caeae7bc6b9f3c5e74fef7f0a7acc613cf3c8685906c8d205cf7a9fb43e0892f881ed8d10c84fd4d5476796", 0xc3) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000980)={[], 0x1, 0x5, 0x8, 0x0, 0x2, 0x2000, 0x6000, [], 0x8}) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000b40)) connect$nfc_llcp(r4, &(0x7f0000000b80)={0x27, 0x1, 0x1, 0x1, 0x16cc00, 0x9, "620a7370c8bca9cba78f9a3bedad3651ab740667959bcdd2ca443f8e32c617d5f6cd0c8329a85e6b59dfa37c6898902a4b9e6937dd93bc45b9a9909ab66025", 0x17}, 0x60) ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000c40)={'nr0\x00', @ifru_settings={0x6, 0x2, @raw_hdlc=&(0x7f0000000c00)={0x2, 0x3}}}) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000c80)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) setpgid(r6, r7) recvmsg$kcm(r5, &(0x7f0000001e80)={&(0x7f0000000d40)=@pppoe, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/26, 0x1a}], 0x2, &(0x7f0000000e80)=""/4096, 0x1000, 0x1}, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000001ec0)) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000001f00)=0x3, 0x4) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f0000001f40)=0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000001f80)={'veth0_to_bond\x00', 0x4}) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000001fc0)=""/113) fremovexattr(r5, &(0x7f0000002040)=@known='com.apple.FinderInfo\x00') ioctl$LOOP_CLR_FD(r4, 0x4c01) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000002080)={r2, 0x3ff, 0x20, 0x1000}, &(0x7f00000020c0)=0x18) fcntl$notify(r5, 0x402, 0x21) sendmsg$nl_crypto(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)=@delrng={0x10, 0x14, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4004850) 20:35:35 executing program 4: time(&(0x7f0000000000)) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40001, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @broadcast}, &(0x7f00000000c0)=0xc) sendto$llc(r0, &(0x7f0000000100)="c59c3bf10e888ca7c91e6ee3c446ac5c4b9a927dc70c763bdcf147be3aca9b1f5244dde9f86e8822a91f76e0f1e0cf7900704bc5476d22df730d3f88c9571ae9b85e80425ebafca6471dcf543e1fa76ce72674a0278fb62f2dc2a44e3aad68be2503c9a6a8f7831ba55042f5f21af0b5fc4a0bcd", 0x74, 0x1, &(0x7f0000000180)={0x1a, 0x320, 0x7, 0x3fe00000000000, 0x40, 0x9, @link_local}, 0x10) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) accept4$alg(r2, 0x0, 0x0, 0x80000) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000001280)={'broute\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000001240)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000013c0)={{0x6, 0x40}, 0x0, 0x7cfe, 0x8, {0x6, 0x6}, 0x6, 0xb7}) mount$9p_fd(0x0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='9p\x00', 0x8000, &(0x7f00000014c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'cgroup.threads\x00'}}, {@privport='privport'}, {@debug={'debug', 0x3d, 0xd6}}, {@cachetag={'cachetag'}}]}}) renameat2(r2, &(0x7f0000001580)='./file0\x00', r2, &(0x7f00000015c0)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001600)={0x0, 0x1a2}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001680)={r4, 0xffffffff, 0x2, [0x7fff, 0x4]}, &(0x7f00000016c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001740)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001700)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000001780)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e23, @multicast2}}}, 0x90) r6 = fcntl$getown(r0, 0x9) ptrace$peek(0xffffffffffffffff, r6, &(0x7f0000001840)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000018c0)={0x10, 0x30, 0xfa00, {&(0x7f0000001880), 0x8, {0xa, 0x4e20, 0x6, @local, 0x9}, r5}}, 0x38) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001900)={{0x5000, 0x7002, 0x9, 0x7fff, 0xa2, 0xe744, 0x4, 0x401, 0x8, 0x6, 0xfffffffffffffff9, 0x1}, {0xd000, 0x2, 0xb, 0x100, 0x2, 0x200, 0x800, 0xfffffffffffffeff, 0x8, 0x400, 0x3, 0x5cdd}, {0x0, 0xf004, 0xe, 0x2, 0xfff, 0x6, 0x6, 0x1, 0x40, 0x2, 0x8000, 0x5}, {0x2000, 0x6001, 0x9, 0x200, 0xa80, 0x1a7, 0x1, 0x4, 0x1, 0xffffffffffff2f19, 0xda, 0x5}, {0x4000, 0x1, 0x4, 0xf49, 0x100000001, 0x1, 0x5b7b, 0x0, 0x2, 0x40, 0x5ad0, 0x3f}, {0x2000, 0x3004, 0xd, 0x0, 0xfffffffffffffff9, 0x10001, 0x6, 0x7, 0x800, 0x5, 0x7a43, 0x20}, {0x0, 0x1002, 0x4, 0x7fffffff, 0x401, 0x4, 0x7f, 0x7ff, 0xf9f, 0x0, 0x9, 0x8}, {0x1000, 0x3, 0xe, 0x1, 0x4, 0x5, 0x80000001, 0x81, 0xb80, 0x2, 0x4b8, 0xfffffffffffffff9}, {0x112004, 0x10000}, {0x2, 0x1}, 0x20, 0x0, 0x115001, 0x20, 0xb, 0x900, 0x11f005, [0x2, 0xfffffffffffffffd, 0x5, 0xd074]}) fsync(r2) getgid() write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000001a40)={0x33, 0x6, 0x0, {0x6, 0x2, 0xa, 0x0, "2fbf6264657665746830"}}, 0x33) delete_module(&(0x7f0000001a80)='cgroup.threads\x00', 0x200) mq_getsetattr(r2, &(0x7f0000001ac0)={0x7, 0xc6c, 0xfffffffffffffb51, 0x20, 0xfff, 0x7ff, 0x3, 0x4}, &(0x7f0000001b00)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001b40)={r4, @in6={{0xa, 0x4e22, 0x3, @remote, 0x10001}}, [0x7fffffff, 0x3, 0x9, 0x2, 0x5, 0x0, 0x101, 0xfff, 0x200, 0x9, 0x3, 0x0, 0xc0000000000, 0x3, 0x100000000]}, &(0x7f0000001c40)=0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000001c80)={0x6, 0x1, 0x3ff, 0x0, 0x0, [], [], [], 0x401, 0x40}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001dc0)="f681426567e2639dc2ce46c18dd61386", 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001e00)={0x0, r3, 0xf, 0x1}, 0x14) 20:35:35 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r0, 0x7, &(0x7f0000000040)) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/bnep\x00') ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) r2 = msgget$private(0x0, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000280)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r5 = geteuid() getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x77a0, r3, r4, r5, r6, 0x4, 0x7}, 0x6, 0x0, 0x7, 0x9, 0x0, 0x7fffffff, r0, r0}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x4, &(0x7f0000ffd000/0x2000)=nil, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r1}, 0x10) r7 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000500)) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x2, 0x17, 0x9, 0x7, 0x38, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@mcast2, 0x2, 0x4, 0x14}, @sadb_key={0x21, 0x9, 0x7e8, 0x0, "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"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x17}, 0x5}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x3503}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x2, 0xbb, 0x2, 0xe0000001}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e23}, @sadb_x_sa2={0x2, 0x13, 0x7ff, 0x0, 0x0, 0x70bd2b}, @sadb_sa={0x2, 0x1, 0x4d3, 0xa134, 0x7, 0x79, 0x0, 0x20000000}]}, 0x1c0}}, 0x40) bind$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000008c0)) getegid() lchown(&(0x7f0000000900)='./file0\x00', r3, r4) write$P9_RXATTRCREATE(r1, &(0x7f0000000940)={0x7, 0x21, 0x1}, 0x7) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000980)={0xffff, 0x5, 0x6, 0x0, 0x20}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000009c0)={@empty, @local, 0x1, 0x4, [@rand_addr=0x9, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x20) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000a00)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000a40)=0x5) accept4$unix(r1, &(0x7f0000000a80), &(0x7f0000000b00)=0x6e, 0x80800) mmap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1000000, 0x14010, r8, 0x0) [ 153.407606] IPVS: ftp: loaded support on port[0] = 21 [ 153.527643] IPVS: ftp: loaded support on port[0] = 21 [ 153.576496] IPVS: ftp: loaded support on port[0] = 21 [ 153.611324] IPVS: ftp: loaded support on port[0] = 21 [ 153.626746] IPVS: ftp: loaded support on port[0] = 21 [ 153.642514] IPVS: ftp: loaded support on port[0] = 21 [ 153.673213] IPVS: ftp: loaded support on port[0] = 21 [ 153.678293] IPVS: ftp: loaded support on port[0] = 21 [ 155.921224] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.927768] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.951161] device bridge_slave_0 entered promiscuous mode [ 156.089356] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.095836] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.119764] device bridge_slave_1 entered promiscuous mode [ 156.185630] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.192078] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.207367] device bridge_slave_0 entered promiscuous mode [ 156.228809] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.235250] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.251131] device bridge_slave_0 entered promiscuous mode [ 156.260676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.268177] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.274602] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.299158] device bridge_slave_0 entered promiscuous mode [ 156.309316] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.315733] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.323507] device bridge_slave_0 entered promiscuous mode [ 156.332837] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.339387] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.356873] device bridge_slave_0 entered promiscuous mode [ 156.364740] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.371168] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.378514] device bridge_slave_0 entered promiscuous mode [ 156.391380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.401695] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.408075] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.426491] device bridge_slave_1 entered promiscuous mode [ 156.447872] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.454389] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.462583] device bridge_slave_1 entered promiscuous mode [ 156.469259] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.475699] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.486430] device bridge_slave_0 entered promiscuous mode [ 156.493921] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.500468] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.518133] device bridge_slave_1 entered promiscuous mode [ 156.525938] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.532409] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.540276] device bridge_slave_1 entered promiscuous mode [ 156.563418] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.569830] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.584600] device bridge_slave_1 entered promiscuous mode [ 156.595448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.604562] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.610974] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.633212] device bridge_slave_1 entered promiscuous mode [ 156.642876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.650267] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.656717] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.673503] device bridge_slave_1 entered promiscuous mode [ 156.689137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.698091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.710514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.718952] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.751469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.770822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.833346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.840792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.851270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.859376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 156.878595] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 156.934535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.035407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 157.091487] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.219106] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.230902] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.240497] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.249915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.256970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.302272] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.314332] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.327297] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.389014] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.400454] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.410390] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.418663] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.426351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.447310] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.464930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.490444] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.530264] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.538278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.554821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.564887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.583216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.603837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.610700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.625243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.632108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.658052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.666395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.678792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 157.685696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.700777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.763604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.770565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.784933] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.795947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.805980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.816728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.847783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 157.856301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.874222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.911508] team0: Port device team_slave_0 added [ 158.082276] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.106131] team0: Port device team_slave_1 added [ 158.189619] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.203905] team0: Port device team_slave_0 added [ 158.232240] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.248316] team0: Port device team_slave_0 added [ 158.269198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.281111] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.293755] team0: Port device team_slave_0 added [ 158.318593] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.332974] team0: Port device team_slave_0 added [ 158.338467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.354318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.374511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.389139] team0: Port device team_slave_0 added [ 158.397322] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.405424] team0: Port device team_slave_1 added [ 158.411070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.421812] team0: Port device team_slave_1 added [ 158.437329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.454403] team0: Port device team_slave_0 added [ 158.465851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.473130] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.484341] team0: Port device team_slave_1 added [ 158.497697] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.516703] team0: Port device team_slave_1 added [ 158.525183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.538501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.557631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.569139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.578636] team0: Port device team_slave_1 added [ 158.584221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.596536] team0: Port device team_slave_0 added [ 158.601959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.616854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.634593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.643996] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.658213] team0: Port device team_slave_1 added [ 158.666725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.675504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.682816] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.695168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.710306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.742613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.759770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.768251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.776119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.783590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.791480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.801337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.809516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.818751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.830834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 158.840671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.849661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.857179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 158.865189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.885925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.916530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.930982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.938625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.946817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.954559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.962436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.970777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.978399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.986352] team0: Port device team_slave_1 added [ 158.993527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.005484] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.014825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.027305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.039704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.063513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.087346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.110506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.122853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.130614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.138447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.145946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.154591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.162193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.169393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.178139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.185786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.194716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.209641] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.226313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.248509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.268327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.276193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.283904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.292720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.318391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.334602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.350693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.366220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.374227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.384835] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.395185] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.404401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.416466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.424592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.454736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.471719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.489731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.505817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.519470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.527641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.535532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.544281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.551568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.560088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.571717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.589823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.599918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.614997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.651606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.672407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.686290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.704979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.741722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.835461] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.842960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.853769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.273917] ip (5058) used greatest stack depth: 16472 bytes left [ 160.781857] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.788391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.795388] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.801795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.835390] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 160.856194] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.862619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.869307] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.875708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.908247] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.030654] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.037112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.043804] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.050194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.068264] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.094180] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.100594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.107330] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.113745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.161877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.171303] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.177700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.184389] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.190781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.213829] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.226311] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.232712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.239460] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.245891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.282167] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.296344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.309654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.330309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.338980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.356097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.363457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.387100] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.393488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.400191] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.406599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.443948] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.573901] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.580335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.587074] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.593503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.662838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 162.336419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.359356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.631447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.658906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.792983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.832815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.866344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.092184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.133143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.151098] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.173854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.333896] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.353185] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.361962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.426741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.520331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.605790] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.612173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.625640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.691306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.697510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.710563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.803385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.864338] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.870658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.879757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.907506] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 167.916678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 167.923959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.935635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.085213] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.092481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.108134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.128622] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.141133] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.161068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.179940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.326413] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.352497] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.364106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.379580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.478184] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.522308] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.548134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 168.554673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.576453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.615218] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.644147] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.933431] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.110694] 8021q: adding VLAN 0 to HW filter on device team0 20:35:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ff8)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2, r2}) fcntl$lock(r1, 0x26, &(0x7f000001d000)={0x8000000000000001}) dup3(r0, r1, 0x0) 20:35:54 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @loopback}, 0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) [ 171.928790] JFS: discard option not supported on device 20:35:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000007baa00ff0000000000000000000000029500000000000000af976ef52102f6c05ef334e24c3de265ab6be6272c60f98f134f249ab02d7498584f6576a7272d2c05fce6d9f05166beaf3489b5852f0ad78b778e495049986a59938c326e8932400d19580367d1edda04f89474a5322bfdbbd9f9fef57533e504e19118db8c46099018fe55b960dfe892979ca70c3844b73ebda3b976445e17ef1695b8ae993c6dbdd54d97b64a387ca67078de04caad72c536b0764305d07ca47efa40f7ba2b1e633e99bba62bba77b10313ccd8"], &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xffe3, &(0x7f0000000140)=""/251}, 0x2a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x6, 0x2, 0x10001, 0x8, r1, 0x100}, 0x2c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) fchmod(r2, 0x1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080)) 20:35:54 executing program 3: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0xffffffffffffff70, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0xfffffda6) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfffffffffffffff9, @mcast1, 0x3}, {0xa, 0x4e22, 0x5, @local, 0x2}, r1, 0x9}}, 0x48) 20:35:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f00000000c0), &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x222) 20:35:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000140)={'HL\x00'}, &(0x7f00000001c0)=0x1e) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x28200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85714070") sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000140)={0x18ea446a6fa39546}) [ 172.108497] QAT: Invalid ioctl 20:35:54 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 172.197956] kernel msg: ebtables bug: please report to author: Wrong len argument 20:35:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x3e5, &(0x7f00000000c0)=0x2) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000220001040000000000eda80322fd8f0cf7d500000000000000"], 0x1}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="005e1800000000008cc1b048436aacaa6cdba008fa6b3cf6fa8c24fcaeabb6939e80928022588b897fbd166a62af7a29f3bc7d1c04355d2f3f9c0944c1a91931a53f5c210f63700151c8d8fa8e588bb5599747f17109bd86df632dd33476f7ddf80d484b6f1b8850e7a3c4a4988b3bbe8798"], 0x1}, 0x8}, 0x400000000000000) [ 172.247948] kernel msg: ebtables bug: please report to author: Wrong len argument [ 172.319399] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 20:35:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x2c) r1 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x208000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x1, 0x27c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xff, 0x30}, &(0x7f0000000100)=0xc) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl(r0, 0x5, &(0x7f0000000180)="01af08bf294abfd129307abc1ff5fcdc07f368b05a130d485c68827a8780dc76d2cd539f92fd5778627e68153dc1af00a3d93e8d5eb9a25ee4e717d21bfe1cfefa8f011d9b3358219e5a52bf47838d44d20a") setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0xa51, 0x5}, 0xc) 20:35:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffeffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x7, 0x4) r2 = socket$inet6(0xa, 0x0, 0x3) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="9c"], 0x1) sendto$inet6(r1, &(0x7f0000000000)="a7", 0x1, 0x0, 0x0, 0x37) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RLERRORu(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="13000000070100060067584c"], 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) umount2(&(0x7f0000000500)='./file0\x00', 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfb5, 0x2900) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000080)={0x8001, 0x1000, 0x124a, 0x9, 0x0, 0x8}) shutdown(r1, 0x1) 20:35:54 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = gettid() sched_setattr(r1, &(0x7f0000000080)={0x30, 0x1, 0x1, 0x67, 0x3, 0x2e, 0x3, 0x3}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x7) 20:35:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x192) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x80000000) [ 172.561365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.579243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:55 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x400, 0x0) write$P9_RSTAT(r0, &(0x7f0000000100)={0x57, 0x7d, 0x1, {0x0, 0x50, 0x401, 0x1f, {0x8c, 0x4, 0x5}, 0x30000000, 0x3, 0xb282, 0xa44e, 0x1, '*', 0x17, ')$eth1bdev]cgroupem1!*&', 0x5, 'nodev'}}, 0x57) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x6, 0x8}) r1 = getpid() fcntl$setown(r0, 0x8, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000380)={0xa4, 0x7d, 0x2, {{0x0, 0x62, 0x2, 0x2, {0x84, 0x2, 0x3}, 0x8000000, 0x1ff, 0x6, 0xd5, 0x12, '/dev/snd/pcmC#D#p\x00', 0x1, '*', 0x17, ')$eth1bdev]cgroupem1!*&', 0x5, 'nodev'}, 0x2d, 'bdevcpuset/GPLvmnet0-GPL(vboxnet1#em0+,+{~GPL', r2, r3, r4}}, 0xa4) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000004c0)) lremovexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@random={'btrfs.', "d22d00"}) socket$kcm(0x29, 0x2, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x80000001, 0x1, 0x5}) 20:35:55 executing program 6: r0 = socket$inet(0x10, 0xa, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002091f001cfffd946fa2830020200a000400010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 20:35:55 executing program 0: r0 = getpgrp(0xffffffffffffffff) getpgid(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x56) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1652, 0x1, 0x7}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r2, 0x10000}, 0x8) 20:35:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffff447) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") 20:35:55 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x1b, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="2ee8c8b8c63a71142471e56ba086797b1bb3eda46366d1a805048e264d2777a7de91c78f2c3950f0cf6b21a3e4bd5f94d2fd6bb3fa9cbe04e3c74ed6285e38e90dd53fe3") 20:35:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x12, &(0x7f0000000080), 0x4) r2 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630200"], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba884645449e9158a728f045ffd9ecc9b2662539500d7df7d1802"}) msgget$private(0x0, 0x70) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000080)}) [ 172.733158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:55 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x219, 0x208080) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xe9, @mcast1, 0x7fff}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x800008912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket(0x10, 0x802, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) write(r2, &(0x7f00000004c0)="240000001a00255aff7f000000000780cc080003b607000000000000fc94dbd3cfa25dac", 0x24) 20:35:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x9) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000080)=@nl, 0x80, &(0x7f00000015c0), 0x0, 0x0, 0xffffff84}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x353, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x101000) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) recvfrom$packet(r1, &(0x7f0000000040)=""/28, 0x1c, 0x2040, 0x0, 0x0) 20:35:55 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x485) read$FUSE(r0, &(0x7f0000002000), 0x1000) rename(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000180)='./file1\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x10000}}, 0x50) fcntl$getflags(r0, 0x40a) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c004000000000002b7379737465746a48be1b31486dcc6370757365dee8f7206f75b87c3183726f000000000000000000000000000000000044f3a79b931bce"], 0x90) 20:35:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x8001, 0x5, 0x400, 0x402}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="df1f3e650f01c80f51152eef26a850a50f090f20e06635000040000f22e00f71d227267300", 0x25}], 0x1, 0x72, &(0x7f0000000380), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x8000000000070004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 172.876385] binder: 6568:6569 transaction failed 29189/-22, size 24-8 line 2852 20:35:55 executing program 7: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000080)="ff02040000eeff0000000000000000000000000000020205", 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendto$inet6(r0, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0xe]}, 0x9}, 0x1c) 20:35:55 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xce, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) [ 172.972237] binder: 6568:6580 unknown command 156428 20:35:55 executing program 0: r0 = socket$inet6(0xa, 0x1000002000005, 0x20006) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") add_key(&(0x7f0000000500)='id_resolver\x00', &(0x7f0000001340), &(0x7f0000001380), 0xffffffffffffff31, 0xfffffffffffffffd) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x101000) recvfrom$inet(r1, &(0x7f0000000040)=""/194, 0xc2, 0x2040, 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0x6, 0x7, 0x1, 0xfffffffffffffffe, 0xd3, 0x8000}) [ 173.005798] binder: 6568:6580 ioctl c0306201 200000c0 returned -22 [ 173.017840] binder: 6568:6569 got transaction to invalid handle [ 173.025787] binder: 6568:6569 transaction failed 29201/-22, size 0-0 line 2852 20:35:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e22}, 0xfffffffffffffc80) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "b441d632cdbbcb211363807aec73d3883762a61dc02d349bfa3ac974b987aa7fb97eb324d594fbbb77bab759418aa8d451d921e8f5d2cf2b08292111701192e97cac366dd3eb2e0fb039e58314ef4709c5f3556db6a1ab6b4fb2bdd83cdc26e8395ec4984ec3faf71a611d1569545d654cded93be827a85188b803c19c1b56aab522862a718b81e512b49690994d3425e33bd93f0e744c66a083c1f9f1bd7bb8f9e123c08f3f041ed3fdc058136cf0071a47cc0e38720a12e11e842a7b5b26dff07f578fdb9a7b14662a625c1ee76c41ccb2b1fc6376aa718e1067b9e4af511ef5b360dbfad326108bb033db193dab27974eb8c462739eaee51d87f31c516e7e391073770da3202e02c41a7277c847df24bd5b0a7ab6e252f3c8ebf00688cc55311d887e8bfd95a7f4c6a126af3fe26714ddb869c66d18f870631bbd497e8a06881b754ecdcdd0dcffc51cd52a6b560f8d64b63a1674745edc5f53b18a8ffcc5c2fbc4d2bbcc2faf3c189d9b36c0655d1394f5c127ec86b8a764a87b546c2b6ac37d0a8ec3edd7cda6f930570763dbdc0640d219749bd57c7c89eaadfdae41d654a46b17be069a32a7d94d29b612fbe61b8bd11a2d10ba5d4ac7014fc0465c3f144598bd1f913343e7293711040eee0ae8df1e49f04ed1037d4b742aed0e932116060aaf6b985238d2e10fb5b11d19d7801befed4833287d96a85a7cdd9e211a672760335655576fc0fa0336621c2b2b1018ef71bb5077c67ee5fa8d479d6776013363e98b1f1213712be7e47549b6035459008c509f0f983130a451531381ee3c1ab9e1cbb8e558b56ca1a70939389addc5f9632b37ff3f634abb504bb0be0a51649683f6e29588c15cda40255e173328681884ffef6729e9058c5623e1401fdcc7b8cb5623a8fd725fbeea05fc417c44e46500619218dff7c70aa068994c58883cada505a2aa85b6620dfe9c45b707c9aa1222b86972eae564b28a05ddfa3545df231fde2707d4bf67dc6ba41daba91dee8081e5c7e2bcfbebebd42d5ab8a32d6e098fd57233e3b813dc0d772134775def451823b7fef2bc93da01722cd613b9a3db7e2d4c51fb7b56006ee9cea53b62343599a56167388d45247f9289fb1cab67a7cb0c3665ddf1e1411875b4de3428b32fc6603691a023d8e4cb93c667acb7b535fb5f77af9a49640cbe8ffe3a193cf4df1b556a67cb753c60bdf978b871aa513c07074c6602037ebc32199290e3c7ac6f103ad9358951ad4de0c8f1b34951b0e6a48295975cf08b2c3c95064855fc95317e386f1c18608d1d08699003c998b93332cd316f17a5139d350cbfa9dabc3f77c4197a0186e50913978e980a7a028e7ccdeee718af028200e94a6b3a0ec93ba14b0c64dfaf3967e230d8cf876f26287d436ebc9588b52b43f2380836bfe3"}}}}}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x423, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}, "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"}}}}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x7, 0x20, 0x5, 0x7}) 20:35:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfc, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000300)={"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"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x2000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14e3ff00000000001c000000"], 0x14}}, 0x0) rt_sigaction(0x13, &(0x7f0000000080)={0x196c777c40, {0x1}, 0x8000000, 0xff}, &(0x7f0000000100), 0x8, &(0x7f0000000240)) 20:35:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x800000000b) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xb, 0x7, 0x6) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000200)='net/ip_vs_stats_percpu\x00') r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x104fe, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x3}, {0x1, @local}, 0x4, {0x2, 0x4e21, @local}, 'syzkaller0\x00'}) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000000c0)) name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x4d, 0x9, "50068cc621eda3109951bc3ef6cebafbbf62c8af07a17832f7defc230fdeb6cba6e1abf94df31adb696463361292ea4d640900967fb8184ae95cd256fe580d36554f2d3344"}, &(0x7f0000000180), 0x1400) sendfile(r1, r3, &(0x7f0000000000), 0x80000002) syz_init_net_socket$bt_l2cap(0x1f, 0x9, 0x0) 20:35:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x14, 0x0, 0xb, 0x800000001}, 0x14}}, 0x0) [ 173.115980] syz-executor7 (6593) used greatest stack depth: 13512 bytes left 20:35:55 executing program 7: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f0000000040)={0xcffe, &(0x7f00000000c0), 0xe, r0, 0x1}) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x7) [ 173.220104] binder: BINDER_SET_CONTEXT_MGR already set 20:35:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='bdevtrusted%systemselftrustedeth1vmnet1posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) ioctl$VT_RELDISP(r1, 0x5605) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f00000003c0), 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x20}, {0x5, 0x0, 0x6, 0x0, 0x45, 0x78, 0x45}, {0x0, 0x9d, 0x1}, 0x20, 0x6e6bba, 0x1, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x3500, 0x2, 0x0, 0x0, 0x800, 0x1, 0x1}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x6c, &(0x7f0000000400)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x0, 0x8, @local, 0x8}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @rand_addr=0x9}]}, &(0x7f00000000c0)=0x10) msgget$private(0x0, 0x0) sendto$inet(r2, &(0x7f0000000240), 0xf0ffffff00000000, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr}, 0x10) recvfrom(r2, &(0x7f00000001c0)=""/124, 0x7c, 0x0, &(0x7f0000000240)=@nfc, 0x70c000) 20:35:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendfile(r2, r1, &(0x7f00000000c0), 0x465) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/148, 0x94) [ 173.279446] binder: 6568:6600 transaction failed 29189/-22, size 24-8 line 2852 [ 173.317564] binder: 6568:6620 unknown command 156428 20:35:55 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x103001, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x18) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xffffffffffffffff, @dev={[], 0x1f}}}, 0x1e) syz_emit_ethernet(0x1f8, &(0x7f0000000080)={@empty, @empty, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x472]}) [ 173.332553] binder_alloc: binder_alloc_mmap_handler: 6568 20001000-20004000 already mapped failed -16 [ 173.360321] binder: 6568:6580 ioctl 40046207 0 returned -16 [ 173.422564] binder: 6568:6620 ioctl c0306201 200000c0 returned -22 [ 173.485374] binder: 6568:6569 got transaction to invalid handle [ 173.491833] binder: 6568:6569 transaction failed 29201/-22, size 0-0 line 2852 [ 173.520977] binder: undelivered TRANSACTION_ERROR: 29189 20:35:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000500)="56f83ec428929360821326402c04da84df1e346870e4807e0c41a21da931a5025587aae6b919afef") r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3f, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r1, 0x7e}}, 0x18) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) clone(0x8040000, &(0x7f0000000500), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000540)) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x10000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,port=0x?000000000004e21,loose,un\x00\x00e=proc\x00,cache=none,access=client,afid=0x00000000000000fb,uname=proc\x00,privport,\x00']) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) 20:35:55 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x8001, 0x5, 0x400, 0x402}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="48b801000000000000000f23c00f21f835020004000f23f8b9c70200000f32f0460fc78868cc0000b8010000000f01c166b8f8000f00d866bad00466b8c26266efc441adfedcc4c19855a804000000460f1a7d046436640f07", 0x59}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="df1f3e650f01c80f51152eef26a850a50f090f20e06635000040000f22e00f71d227267300", 0x25}], 0x1, 0x72, &(0x7f0000000380), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x8000000000070004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:35:55 executing program 4: r0 = memfd_create(&(0x7f0000000340)='^vmnet1posix_acl_access+vboxnet1\x00', 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000040)='\x00', 0x1, 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'security.', '^vmnet1posix_acl_access+vboxnet1\x00'}, &(0x7f0000000140)='trusted.syz\x00', 0xc, 0x3) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='^vmnet1posix_acl_access+vboxnet1\x00', 0x21, 0x1) 20:35:55 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x72109c5fef5d34d3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001880)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000018c0)=""/131) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) pipe2(&(0x7f0000000180), 0x80000) syz_mount_image$ceph(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)='./control/file0\x00', 0x0, 0x9, &(0x7f0000001740)=[{&(0x7f0000000280)="74c88f67afca32e4acdc4488b5c809240f43c8668e399870d4eb5a3569410c9bb4257ac08e09b4b9ca9731b0976a69bad787adae32011998ca78ad010b13792889a8e0f2234f2989ae67c5bbc5e1bbd46cda6da693390840f60d4e3479adfaa9e8d144", 0x63, 0x20}, {&(0x7f0000000300)="f9f98821f38c6421f97e2721dbab93b4b9dd6057bf226cd7a3078274dbfa0c37786dbe9140f16d0fe87ecc642b9724f83b116707fc46c081347d6b0543b7eacade48ca67e8a4e832cc906ebd760243a3a01fcad79e96f03e4820ccda866665fc35b8a459b067ea31d8e4f41ce268ade11f589d4a000eac900a0b", 0x7a, 0x74}, {&(0x7f0000000380)="aa57b3870395c5892e94a95d5306cc8c21f19b0a3f38171496cc263b296cd6b679a388c660d692187bcfe6195ff0a881528a7386dcd8296fc79ba92dba986863f135b80b56f2acdd751705ad10a18b2bd1c87d2793b3b94a7c11302da0419acba594547610ab97b8ff1b84b2e78fbd946eb5c608a6cc56a5193fa8fe1acc393bdf29fd90585d1874e98794b769f4e5866c95ee62cc3ea47b881c695b2cc241201a78e270cbc7b182d576089adcaa36d9fd9e269b564f2cf82d5a10b660a5b4715dfc320a0978e4eb56564291f2a80c469709", 0xd2, 0x101}, {&(0x7f0000000480)="609486ac09e3148f3bf8485ab7751427fda26201b8524dc5add169000fee9184b569d9a115a1570af18d91fb8290687589f7f01c7e44cc602a92dd1ce4b93cdfd36ee18405ddfd25b61b09270505956388f0085177943f1bec006719", 0x5c, 0x100000000}, {&(0x7f0000000500)="e669f624c0a90fa326e23da45fe82d088e65e839703272a2a94fc0651a671089121b81fcbbab06c70e9af930e504b7f474cbe108091c06785a61ebe4c760f66f44869e92c40ad0", 0x47, 0x10000}, {&(0x7f0000000580)="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", 0x1000, 0x7fff}, {&(0x7f0000001580)="3626a2916e52f510e158e1c0a6450b8c02f6af88b99fa64e6a03ad47d1e842e4db86f0c96b0689221965f7fdb1c9289d76c654fa136b0979a45d5cef73fbb8", 0x3f, 0x9}, {&(0x7f00000015c0)="2ef38d6b7c2ceac2675fc90c046f82d7ec5affdfdff9047d7515ff6a5230ef237e66943787c9cb4b713beb29d4994aa0ca1a439e10890b3daf06eab71d9de0305cd3ebb9a140aa5951d725917a351c5345c28aa744bbe914b36356d95417742ca3bc0b4952375b51cc27cb9bc0054538bc36bd4fa31f86ecc80bedd792e9faec7bfe7a57c57edd827ec588cab5811e6c315d841d704a170930436c7ad6bb05b0646ca33f9753ea37233384915f0b58a03d395fe21c8dfe2a59e84c3a57c9fbff9037614c919c2e0cbcb710b2e48230a159eb10970c1c1329035ef6ea694aa299f5ca62576cf91529ca898320ffc2f5b44117b3964b", 0xf5, 0x6a5}, {&(0x7f00000016c0)="96abfa292fd82987d84ae492abdeed0cadbe2e5f079a64faee6fbacf780b79e227da43acc09af917d3d5ca0e359507f4339aa47b97dc4fae8ef1903d846d54757c7d962870ecd64b3ff34272de5c157d258ea18724e33c9ae0176147c5f037aa24c3b0d7e16f19ee53292b1295f8f4cf1112e0803e", 0x75, 0x3}], 0x84080, &(0x7f0000001840)='\x00') fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f0000000140)='./control\x00', 0x0, 0x2) 20:35:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x100000000011, 0x4, 0x4, 0xf50a, 0x0, 0xffffffffffffff9c, 0x0, [0x4dbf]}, 0x2c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x8000000080000, 0x4) 20:35:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x437, 0x800) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) close(r0) 20:35:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x80500) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40000, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0xfffffffffffffffc}}, 0x18) write$evdev(r0, &(0x7f0000000000)=[{{}, 0x1, 0x1c, 0x40000000002}, {}], 0x38b) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x4, 0x8) r2 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$KDSETMODE(r2, 0x4b3a, 0x8) 20:35:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="ceeb2cb1fe99495d12b9f758c2c403af8063ecca64c2b1b6e2968db066b8695aa80c529539f0a17ae04be41b7c62889ef80c1d21038d2fe29f5eba32039c774a89543814cfc242cf686c1a9868b7113a771638049226a0a9d36743082255d2a8da6901980e1ac60503f6a80c1ce0e4e2e3726675ceb6bce16bf3027a5f62edd20d8237908e7f0fd5adc8d319b841b3c5bf3f762b4243feb6570cf2ab5c75792810dc5e4476cf7e1235eff7cabde3a87ca71fdeab42f3c93d4321823c48714a418112bf86441679f1f3b882aa"}, {&(0x7f00000001c0)="0ff0f57f9605877cdade6a4064dc5e2a115ff86fe94a76ac24213539f242d63c244a07f5dcb1697538b0dc3c17d8263fbd0d75542b506a98ab480ed752f5cf785785a1", 0xfffffffffffffd33}], 0x5e) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x181000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000400)={'nat\x00', 0x0, 0x4, 0x79, [], 0x3, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000380)=""/121}, &(0x7f0000000480)=0x78) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000240)=""/215) [ 173.539762] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.548193] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.557176] binder: undelivered TRANSACTION_ERROR: 29189 20:35:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'veth0\x00', 0x1}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, {0x7, 0x8, 0x6cf1, 0x1, 0x8, 0x2}}, 0xffffffffffffff2c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = memfd_create(&(0x7f00000001c0)='/dev/adsp#\x00', 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x9b, "d310e7510a94a39d30e4ed2fd99cc0bd4c213e8d5701cf30b1653cca71bff8e2c6eca9092bd32896d66908563afa39a8157dab1f4925c43eef9af8fcdcccae5bebfdc1d43a349589eb19e3c24e347935663cfb235b88b6e1d3ed42d8de766ab42e624c7392ba813000b7d50a3c3b30cb50f679ad404007c789d3cad4ec7a8aaa7373da1e1407255085bbfea72459ac1369d6252576cb3548b84fc4"}, &(0x7f0000000200)=0xa3) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000240)={r6, 0xfff, 0x56}, 0x8) r7 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xff, 0x181000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001840)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001940)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001980)={'vcan0\x00', r8}) io_submit(r2, 0x1de, &(0x7f0000000000)) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f00000000c0)={@broadcast, @rand_addr=0x9, @rand_addr=0x2}, 0xc) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x4000}]) memfd_create(&(0x7f0000000280)='/dev/adsp#\x00', 0x0) [ 173.686308] 9pnet: p9_fd_create_tcp (6675): problem connecting socket to 127.0.0.1 20:35:56 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), 0x4) fcntl$getflags(r0, 0x408) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4001, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x33, "a3719c176faf329653b1da85056c26c2943d6925d13f202719d2015042773788399fa783109a9da74da02e4cabf45ddcb75b8d"}, &(0x7f00000000c0)=0x57) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000140)={0x7, 0x9, 0x7fffffff}) 20:35:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10) keyctl$get_keyring_id(0xe000000, 0x0, 0x0) 20:35:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100008000000000000000130d4f"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x7b, 0x0, [0xc0010141]}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1c1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) 20:35:56 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x5) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0x7, &(0x7f0000000180)=0x2) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000200)=""/215, 0xd7}], 0x2, 0x0, 0x0, 0x7f}, 0x400}, {{&(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/178, 0xb2}, {&(0x7f0000001480)=""/155, 0x9b}, {&(0x7f0000001540)=""/4, 0x4}, {&(0x7f0000001580)=""/216, 0xd8}, {&(0x7f0000001680)=""/228, 0xe4}, {&(0x7f0000001780)=""/229, 0xe5}, {&(0x7f0000001880)=""/42, 0x2a}], 0x8, 0x0, 0x0, 0x9}, 0xfffffffffffffff9}, {{&(0x7f0000001940)=@alg, 0x80, &(0x7f0000001b80)=[{&(0x7f00000019c0)=""/174, 0xae}, {&(0x7f0000001a80)=""/252, 0xfc}], 0x2, &(0x7f0000001bc0)=""/154, 0x9a, 0xffffffffffffff89}, 0x80000000}, {{&(0x7f0000001c80)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/49, 0x31}], 0x1, &(0x7f0000001d80)=""/132, 0x84, 0x80000000}, 0x3f}, {{&(0x7f0000001e40)=@hci, 0x80, &(0x7f0000002080)=[{&(0x7f0000001ec0)=""/68, 0x44}, {&(0x7f0000001f40)=""/221, 0xdd}, {&(0x7f0000002040)=""/32, 0x20}], 0x3, &(0x7f00000020c0)=""/26, 0x1a, 0x4b4b}, 0xd64}, {{&(0x7f0000002100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002180)=""/144, 0x90}], 0x1, 0x0, 0x0, 0x7f}, 0x5}], 0x6, 0x40010000, &(0x7f0000002400)={0x77359400}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000002440)=0x236, 0x4) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) accept4(r0, &(0x7f0000000080)=@vsock, &(0x7f0000000000)=0x80, 0x0) 20:35:56 executing program 7: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='em1]eth1+system\x00', 0xffffffffffffff9c}, 0x10) accept4$packet(r0, 0x0, &(0x7f0000000240), 0x80000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) setrlimit(0x7, &(0x7f0000000080)) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', r2}) [ 173.861026] sctp: [Deprecated]: syz-executor5 (pid 6693) Use of int in max_burst socket option deprecated. [ 173.861026] Use struct sctp_assoc_value instead [ 173.906209] 9pnet: p9_fd_create_tcp (6682): problem connecting socket to 127.0.0.1 20:35:56 executing program 4: r0 = socket$inet(0x10, 0xa, 0xd) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a000900010000e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 20:35:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000300)=""/127}) accept$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000440)=""/115, &(0x7f0000000380)=""/156, &(0x7f0000000940)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) [ 173.965148] sctp: [Deprecated]: syz-executor5 (pid 6693) Use of int in max_burst socket option deprecated. [ 173.965148] Use struct sctp_assoc_value instead 20:35:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x13}, &(0x7f00000001c0)) clock_adjtime(0x2, &(0x7f0000001540)={0x80000001, 0x7, 0x1, 0x6, 0x5, 0x5, 0x8000, 0xf7, 0xe0, 0xe94b, 0x10001, 0x5, 0x8, 0x5, 0x1, 0xffffffffffffefa0, 0x4, 0x6, 0x7fff, 0x1f, 0x8, 0x5, 0x5, 0x8, 0x1, 0x4}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000300c6200000000000000000d3ff050007000800"], 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001700)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001780)={0xa, &(0x7f0000001740)=[{0x5436c4fc, 0x1ffe00}, {0x9, 0x4}, {0x101, 0x6}, {0x4, 0x2}, {0x4, 0xb5}, {0x8b14, 0x8}, {0xb9}, {0x8, 0x9}, {0x3, 0x5}, {0x80, 0xf1f}]}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0xd}, @remote, @dev={0xfe, 0x80, [], 0x16}, 0x5, 0x7fff, 0xc66, 0x500, 0x1fe, 0x100000, r3}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000017c0), &(0x7f0000001800)=0x30) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/255, 0xff}], 0x4) tkill(r1, 0x1002000000016) prctl$seccomp(0x16, 0x1, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) r5 = accept$inet(0xffffffffffffff9c, &(0x7f0000001640)={0x2, 0x0, @remote}, &(0x7f0000001680)=0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000016c0)=0x1, 0x4) 20:35:56 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x80}, 0xb) sendto$packet(r1, &(0x7f0000000080)="fc797da5d29f16d3c9f4f22ad75caf4c3f6213a9b7bd7cecc2edb2aa01ccd9aa053079b4f339ec942b46a53a68339c8addb41a308f59045553678dd0b9711010803971d9570ceb0cff189f2e8c8867d93cb218d463abf12b45a6eb3681d4a384337de7ef500e34b1afaa5cd62e7f748322a46f05c78acba885ac62063388af9b", 0x80, 0x800, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000100)={0x0, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x88) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00003e4000)={&(0x7f0000e87000), 0xc, &(0x7f0000a3bff8)={&(0x7f0000000400)=@getlink={0x24, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4}]}, 0x24}}, 0x0) 20:35:56 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x100ffe) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0xffffff, 0x2002012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x2e5a, 0x4) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x6, 0x4, 0x8, 0x6, 0x1}) 20:35:56 executing program 1: unlink(&(0x7f0000000180)='./bus\x00') ioctl(0xffffffffffffffff, 0x6611, &(0x7f0000000040)="43cbcedbaeb3a9f3a2b76a0e045e09b8319dad07dc8b942cc98a9075c885f9c459411ea82d762250915f5d8c554de7b6523543bbb69180111a2d36c8e4cbefd72250238fb764ba7b829b0f2631b1fd85ed7ffef809396bd9622b462606d123f6c320b29a257b5fea94ea79624c27c3b731b025d56c4d7d8b6b9968e309c9ce0ec9b5200e440c2c9eb288f1bde4d3842fef48a865601628b99202c55ccf616531f24410e033db331aee25062e3fd174f2ec72054bd9e77258641aeb0852bdb3aa8363b648ae77a04de8f8b329a21583890f1325c1251183d5b5ab093a7fa233728dec2edf5b2969ced9bbebe9aa5adc15a1d615b758194ceb33a3e1ca58612676ff16a00e70d93275663b0433560fc10a0650a8b6c3e7214cbfed39f72b") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) setfsuid(r0) 20:35:56 executing program 7: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f000077ffe8)={0x0, 0x0, 0x0, 0x0, 0x8}) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001540)='./file0\x00', 0x0, r0) 20:35:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 20:35:56 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000200)={{0x7}, {}, 0x10000000000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000180)={{0x401, 0xea2}, {0x9, 0x9}, 0x0, 0x2, 0x800}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105800, 0x0) 20:35:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") recvfrom(r0, &(0x7f0000000040)=""/127, 0x7f, 0x3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x605c, @dev={0xfe, 0x80, [], 0x1d}, 0x10000}}}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4327, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 20:35:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") clone(0x200, &(0x7f0000b6b000), &(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000080)) mknod(&(0x7f0000000000)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f0000000480), &(0x7f0000001640)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)="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") ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xfffffffffffffffb) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000002c0)=""/184, 0x208000, 0x800, 0x5}, 0x18) read(r1, &(0x7f0000000640)=""/245, 0xfffffffffffffca7) write$FUSE_OPEN(r1, &(0x7f0000000200)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x3}}, 0x20) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000001600), &(0x7f0000000d80)) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x19b) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x72, 0x1ff, 0x200, 0xf96b, 0x6, 0x5f, 0x80000000, 0xa8a}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000740)=@assoc_value, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0xc}, 0x3}}, 0x0, 0xcd5, 0x2, 0x200, 0x24}, &(0x7f0000000900)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000009c0)=@assoc_id=r3, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4}, &(0x7f0000000100)=0x25e) 20:35:56 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read(r2, &(0x7f0000000140)=""/43, 0x2b) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000000)) dup2(r0, r2) r3 = syz_open_dev$audion(&(0x7f00000007c0)='/dev/audio#\x00', 0x0, 0x0) tkill(r1, 0x1000000000015) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0xffffffffffffff80, 0x80}, 0x1, 0x6, 0x8, {0x5, 0xfffffffffffffffb}, 0x1f, 0x3}) [ 174.501281] capability: warning: `syz-executor7' uses 32-bit capabilities (legacy support in use) 20:35:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x81, 0x200000) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendto$inet(r0, &(0x7f0000000600)="bfbffc9b6ca44f6ff7df1be8f692499790a434ffe1513f544c73677a40e2bdcee0a3b2f9d3c0be6c6ac2005a2f7f394a7bed0edd506cb729aa62ad67aceb800e0c295c5f98a2f484be7fe6b6c3f928b63ce211a1d286f52ee4ddce3375f57eaba53aac4165378057958c51d77504f9d6af518abde031bb385b15a2795785c7633e966be5ed6381a5d67df25c5fe6071411c5c8c76c3e026dea0ba91a8a8a0ac6349c41b8e49f44916535d00c325685e31fd967a4cd7ff0dd46793312c55c709762e58ed831de3270d992bab28c145f387aefe6b784abbb024d26e859bc6bec8b8580807a5c1a84e288c3e272a18b68a049204bd304abd08ad4f06e8888daa73979d58c5ae8412606cc8f9ce038914e21ed69f460d6d515a48bd0ec8059dd44a1ae8813b9ee77f207087851812ef17f806aeba9a2d177fc9000030fc12445ef4ba2ad9e008af08ddc9e2d51119a87a9740cc0bbfbf3da7da8f180565d7d2344bd6ffea422d1cb9bee7ea0aa9a4b395e926714b2e9cc4c1850e49d3073bf101cd009941e0ba439da408ae459e23affac40638e8bddf95f1e0c4461ebac58253bda8e3541a485775a2faf01d9278c229a9bcb18991ac1e1512fe708e6d75655d20c299a0266f1e01111e01a41b56b15e62a90930c20b8b5ed0a88a7efdc62d5a628f4f6d5d292b087aad68d72e670ab7747bd2f8328c19df4da409ca5265010b38c81f0008d2a4f0bb19e6cbdc6b0d042926a9580f0608c60db73012d9770e2f3b0f0329124283c9480ea960d4c5f255ca97be92dabbfca13d3f45311655bf16ab2e04720bb94446a216d9ad85b45b42a1d0a8af995fb6eebec390ce72de8e1096933095c279f424975870c694cf0c7bad462a3fe8574111fe761e61beb7d08073e351a0e86a98ab98313e5f75ff2f85b97be18726e785c6385a3384b05ceba0eb969c0ed2380ede4dd8b2a17aea680dc78bc9fd7132b7aa53e0d7e354f1d0bce40d6775aff514238e7bb39e05cdb502b825db358e298ad186d268294993a337824c0fc78f983395ac4877b044ec36aeab8edbdbd4110951d72b67fa8fc717b72abe3ffe868c7052e590f10a9d77dd5f4d365e895ce0d1b2d512ad17f82222167a578f96db1ce93fc396e2db4b9abd01a6d9fd6ea16cfe43fe2a6d2efcab84bb0e229fb648ac643ad9c97d7c5b2f1c391b4d32b1a246665ce3e11dc236036eceda3f397e5e1d62175b77cd5ec20be3703f7d3286932fdb5e6d545748cc32a3568695d755dedfc66182860b36749dcfc89722adfbddffda61bba8722a71ba5e244fe445c18fc5e053801b3f44ae68d782f1b7925bbe0fdfe95d55de18795d1ea3e4b7660c2a8dfc76823dfb81880887b9d36558961264c6a921c84ecac9f6df82134177bbefc1c73eea3518064ce99e773dcb24bd97258a2459e2673275c74fe4478ed2f6243b86ac5cd738fa6341f0c173ec47d19a94919341662f5e8ff2d50e21d6d674f86ae1e2c0d6c6c87ea98084bf838841a2566bc9d85e15d0a168f52f80f6474a87cc7568e156f19b95f762f926d12ac242627ba1ded393cfd16c3a44f12a5d4b8447472166daacfa2d430787f58397387466e36fde8b9a96d5c02b1e7f32a654c926e9136d16b52c1ece887dee4538a211cb8103a0c7c7118c23a47af69b94a9a512468c789555f7eeccfcfff4e893ef2146b49f2720d9b2232c797e16324d54d5b2347731de2c72e785d8cbfa0ef75e636b9feafca0afaa3968990bad350630f0ab105eea6027b4b9e98c88fdf4d8aea375980f891db9c863389a7a0dd9da06f5a603d7fd1c93e21cddd50760018c4438dbd5ea8d24ba8dfc43fee4dedb61f7c6beb8200f04f4252c35058d33fd0c54ae734c78c53900006c21d102c0cf4b17d9d5fc1802500e5accd81790ae6cd22b6b812e4c9449418152bdae8db766cfa15eb2c55142dfee2147becb778b5fb3aa2c55fa2c3403f2951c5f5971ef751a72455d96b706c166d63192d1d1f86c9147b1b76ae74dca35a1c7938986907dfb814e86066acd1e342240986cbfb8394d36f01b6f3a6d96578c0b4d8bd73f3e56e20c836e0016e48fabbe169ca8fb48c8e084a110a1cb8916f8a59adc5f61c164d63e39cd2270f7d724380931203e4b30d430db0ccbf75c9a997f080dcc7d43c6586483d9281ac86258313abb8c21a0259816c59f613ddb350d3f3b81b9ced61da6d22552681888a6429683fdd24a2761746c8d67e9e84dcfbe2bfbc728debbb8fc2665a226addd3f5ce9fa991eddf57ce24d640a560a698284120ccc5f1f8152f656f23d7b13cd43b4d3537f126a0f386a35e04606b7623e6e141ccced4e51d4ac051e48caf30adc614e9cd408f567b6ccd8b1177f051c92084f36b252c83fb7291427204c3e3f65dba92a9ca067bb403de3ba27d53e50ee158e7aed6dea0584d18e373cc6051a8084cf02d5716ac666cb48eff33c9ba18b557be9351beb919d82077dc47db880b525b72e08ca949a7386a1bf3d7dea38096347ec8437cbc2e4e5f6775785514d5479567c0802b50122e7af2922f048f48a8584aab8c1ce7f04fb4a4b4cc13f5a4e2c9318078bc8c634710272104f08c822efab2f9f9b174068621f7cec424a100289a7a884b51da75a5c61be653b4467a59285746496f8a7fc7288413c07629e4baf61e7142c50abc59bd23cdccaafde5b4ff8c2384dfddbf70f28fe10551bab875aa329a9f0ea4ab6732f51870df4030b38831fafa4c8408f8092c4c929cf13675ed056c750cfaa5b12ba3273c4858fc0c88957b84417375c9ef0a91b7ab52c8225d449e268bd9dbfb137885370d9f7afacd41884b4e68548ac28ef96f9fdf287cce84dbb2d788cd95f4962550247ee228cc930b4a938902bc20ca81a0a8c2e5a59fbb4ac4c611909e4f155a1c52bb8d95fb6d24337310bf32f7b0d3949e4c89048ac2153a40a875f89ac6aed185a5652e3b76f67794d3d9c62aadf949136efec6af8ec5fcdd64824994d2c48e3aee4a98191a574f208e40fcee03ad68003a6cfd6dd310096471e30034817a269d2a7ab8adaf3a0e3027e42a7c13494f5434610e1d3f6a472755f40539c80e7f8a2eb69a3466a4288ac9336ece8d17834eb235ff5232c3e8d9a4522cce4ad2ac3934197796baca5e6d22290b204e7bd9791d934941bf87a22435f91928f46bfc2dce38a9642913720ca8249b4cf7043567ba668ee49a8218a2cad42115d405eac16900ac6f39a90836d3fa5ed7679ae8341adc9dbb755e11c5488de0f8c348d586b6a43e8c4e9128641f5ea881c3e1bb6dfbc3da8629c53ae0d97d73c1f6e49d4fb701e0c21d13d4f35a81956f760e895991f8c0a11c02a0c13c0b43e21e84d8ec9404334577d142b90cb2e1b00a4b19a31035e0ffd99b82a032bcbaee8133b2f748e3c448185f2cf154c198a5e84e8d1c420c43e92e27f69a936ef4519d173adbd6635cc116391bbc2ddc15fd088d33218a565115bcb1f603ff6ffa8ab5e0ccc9c80c5d57997b3272596b7bb1e20a49d51dee0f9607fd90682a7be72eed1a25d65ed193d66544667fe4a5eca809f9bdb7e644e2dcffc92117b81057916568e375986deec0df95cf9cabc2dd4e6266a1dbf7dfedb2dcafb602dc842502fea3e3413026643236faa0853b127ceb897af3274ed901832b751d02401a712007faee5ae8f6901c0e7414a234644002ba66847c7734d0649ecfeb5cc1ef752c94c632083bb9c454ac66962ac3f92b0e64bf2c9ad23aa4ee8f3b985349aa02f70b269dd531a6314e240d0e936065b46bc115d2fe814c6d875e52a0d5664c5c5f53b9d433817048b9e0a6bcc9745999a14ae62ba8da9d12ea871317803f7770e8c197c8216b23706c6c0cd28444fb5efe381de00735c6793167a3e0a4565a9ffc2b08a87350d69cbed0162db74c54f7fa773d6f5a376deed340ac6bbc73eadfb4b78983eb6e807848802753eb4b26dee4a9e8b796ab97c02084c76f73eed89128210e9fd5f46f76a87d3a1dd82ce7a5747dd81c01d4796823bad91ed57f553a715786a7c260f83e2a969e81c627db6769253d62a9c077da2b9e2716de77567a1407a528ee7c24a4090ea705be5620c7ddc67dfa4de4d8753ab2be2cdfb7a4f1ee563946e33e11c6f280b8a0b7b2f22cc5d8c69498980b2c5a135fede810d326aa4f5f6489ff620f8a9a3246fb56fcbcd26ddd12652b421264bc8167f8d5b83bb72622d3c0ac0de289bcc9cd233221287a34db3ad8564b224907eead0441feeae031ea1528eafa0e929194943466efff884bb925ea7f93c0cae6c7b0c02641a69512b11846bd932f050c5c69999889e8e742eaaa0e42bf9635fa762b535b45b193c475b27fa209ee599cb63ac8df698973326ae4bdc304067ea50da348531315938fa2ae7bd2684fcd682159037b6bfe446a143e8d0642d53df4b8b53ad67e6dccd208b2fa16af37bac06dc4c1a154a5dd7ba88020cd6ad680b9c5a9e1437c22c681aabe2b74480bac34524368f134907b684a6194bc4094f2679ebbe0d2241333c0c7217c8f28273bcf2802224c51d6e111d4dbdcbed0c7ad5a868e08eacc285199a0e64e1ff096becb53ab2bf100c69f7653bda6fa50fc71c5541d17ce341833a1d1b06b7f8899475615820d69f56aacf603e8977558816de4316afb81c24e53411feca65bc84da171a291251abfe3f07c3d5af2e3cf7eb61823dda9100872aa7f0a0b1631b22b0241ccfb6f4fba43e9b1a57ce7451b3a56fc7d5a91227e66b47cdadd35945fc3d694d2c5f09c4b0e8cd0fefde5e8c13b907ad3ddccee5a1fb5ceee00ad0e7e8b556548a40061b56316b5899e5e92d6d0bb822fe1b29a337dc6ec1a7e758f441353bbd69dd6c9e8f09f9e9dac93a4dd6cc5855228c2bd2ca6e702100cc18dfa6b2b90e964e2bc398e38702270e2f36954c563e5077979c765dd8639c2580062dad6546045e528b1aaefce93edcb27942a497df73363cfe3ef1dd9bd36fcb7c1427c2a650ccf09fbfaf1fa356a4976abe2ada744fe93e190a0ba0b5b8de8f984e31c9f2b2cc0f73d94bb31548518e96d2c0a23d89b66dd567709134ffd0600c5593a80e5470fca3883a685b9e2616254fc33f1eed13c6e3a9a75d3c7ce67e254aecbeb91b1c0812207b26ea2c55dc8542aa99e4593ec3142e0203ee944ba7918c648ede46c7656d642619f78fd426ca5b485cc919bff461249288b6709406781306d72bdf8c01c23a6b030d1d8417996c2b8615f1ef1eade7b7f424c187efcf4abd4e6de56a32ebb7011fc409e130462385fe345233b6129066041231d87912b24143327a7a9ce1fa4e08506598fc3d6e3939bfe4288624a772b9a8dbf621432405e9cc15f24985f5e57673b51f23c4cb3aa1ae546dff31d2fbab81bb2f9729ee7b1d5a9674be4b771b18ee7374bb8c0323ea22e33178d208e2e5c17a2a5087f2cf75dcf038d66a4f6ee5cd0f5f757fc371f8f9efc1644e26c2478362561eafb9c534973fb3b32d8e69079bc5e44c064c293fd558c3283cf7648d25b49202515f69c4b2f6aadac15335c5d99dc278af7cfdf6cca8d7d7ec980c16caa8f2ff598a7f552c800ebb98afbfacd084f4f5ca1d72deacc4e1b3f83d8238b0e066da13d6c568a274fbb3cf86b4c7d40320140388425a8c4ab44fe4d703efffcedac918fb89ea7884684f0c43fbbeadf81af5e62e7a64414da41dc4be590fb037be9d3d62a9e6a38d40b7052ea15c84621633f80f8c6b1c4841d503e47616874fddfeda77743937fc70218", 0x1000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) 20:35:56 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000080)={'veth1_to_bond\x00', @ifru_names='team_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x101, 0xb398}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x7, 0x5, [0x800, 0x100, 0x4, 0x6, 0x4]}, &(0x7f0000000100)=0x12) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x5, 0x7, 0xaae}) 20:35:57 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f00000026c0)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c95d9d47e4635c995b18ba766a818648cd01f2e3825bee3eb373769cb2c85d7f0bb3aff58d31b0352895601ee239883abfad45a0e8c0f59bf3b52edf3500bb"}, 0x60, &(0x7f0000002600), 0x5f}], 0x4924924924926b2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000080)=0x68) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast2, @multicast1}, &(0x7f0000000240)=0xc) close(r0) 20:35:57 executing program 7: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x100000000, 0x400) r1 = socket$inet6(0xa, 0x80f, 0x2) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x1, 0x80, 0x0, 0x9, 0x40}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="180000001e77921887208e2514c1e7b67efe0000e94d24425c12af5a"], &(0x7f00000001c0)=0x20) [ 174.646913] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:35:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) bind$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@mcast2}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x7e, 0x0, &(0x7f0000000100)="7bffb43e40607c25a0337a47d16eba019cc6809116c44741e9bb17afe9bb85d0603924c795fcd44d60571a2eb44ac14e88e88610cccd48c5be3bab3f49a271947354812ff2a010265c48762a53c95fb982101eb0b7c0691d6cc93e2a7ce828e4f3907875b8c5f7c3f87a92511ce205fd9ae5dd64b5aa1d0d1011f4f23928"}) 20:35:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000001075f1dfffd946fa2830020200a000a000100001d85680c1baba20400ff7e28000000110affffba0100", 0x2f}], 0x1}, 0x0) [ 174.726506] sctp: [Deprecated]: syz-executor6 (pid 6788) Use of int in maxseg socket option. [ 174.726506] Use struct sctp_assoc_value instead [ 174.812976] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. [ 174.847378] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. [ 174.849193] QAT: Invalid ioctl [ 174.882791] QAT: Invalid ioctl 20:35:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x11b841, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x1}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000400)={r2, 0x4}, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0xd63, @empty, 0x7fffffff}, {0xa, 0x4e22, 0x8, @local, 0x1}, 0x3, [0x0, 0x5, 0x800, 0x8, 0x1f, 0x20, 0x2, 0x8]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "700300743100", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x0, 'client0\x00', 0x0, "7cbc41658ebf5687", "d3f90599732e2de8c572ab6c12a8c30ba0f770ea43e6b5a603133f837de84c65"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000002c0)={0x200, 0x1, 'client0\x00', 0x1, "11eeb79923accf9c", "fcf7cf80906544cf47aba0f4543aacd46ecbcf249ea922b9c0975562faaa6426", 0x1, 0xd9e9}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 20:35:59 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfffffffffffffffe, 0x84000) accept$packet(0xffffffffffffff9c, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001900)=0x14) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001940)={r2, 0x100000000, 0x3, 0x53, 0xa4d, 0x3, 0xffffffffffffffff}) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 20:35:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) r1 = dup2(r0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x15, &(0x7f0000000100), &(0x7f0000000000)=0x4) 20:35:59 executing program 4: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0x200000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) unshare(0x24020400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x0, 0x4000000002, r2}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) 20:35:59 executing program 0: capset(&(0x7f0000000600), &(0x7f000047efe8)) r0 = semget$private(0x0, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40800) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/91) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 20:35:59 executing program 7: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000500), &(0x7f0000000540)=0x1c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='-4', 0x2}], 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev, 0x0}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1c, r2, 0x1, 0x4}, 0x14) 20:35:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x808, 0x0) ioctl$TIOCGPTPEER(r0, 0x5420, 0xfffffffffffffffe) 20:35:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)="b2f92fe208a9b060614bb87ec702b8212595cabcf9bd873639b2d181f7ea48ce51db06d6bab5608d4b7588ce94a270c161c12b183f703cd0f13df7ea732476130588d5172d4a60037861ab233355817c26", 0x51, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10002, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="1708000000000000000010000000140001000800019c0a0000000800050002000000"], 0x28}}, 0x0) [ 177.184148] syz-executor7 (6819): /proc/6817/oom_adj is deprecated, please use /proc/6817/oom_score_adj instead. 20:35:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in=@remote, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000300)={0x1, 0x1, 0x8, 0x9, 0x1}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="f3460f0f6f00a7c463fd6cd88626660f38800f0f08f33636410f01c8263e6466420f3834ef66ba4000b033eec4e2c1af991ae66db1f3420f23de66baa100b8d4000000ef", 0x44}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 20:35:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$inet(0x2, 0x2, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = userfaultfd(0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) clone(0x0, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000001000), &(0x7f0000000200)) read(r1, &(0x7f0000000400)=""/100, 0x64) 20:35:59 executing program 6: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x1, 0xfffffffffffffffc, 0x800) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0xfffffffffffffe98}, 0x30) pwritev(r0, &(0x7f0000003440)=[{&(0x7f0000001100)='I', 0x1}], 0x1, 0x40000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fallocate(r0, 0x20, 0xc000, 0x8000) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0810000000000000060000001b00000001000000090000000000000000000000"]) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0x2000000) 20:35:59 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote}, 0x1c, &(0x7f0000000540)}], 0x342, 0x0) 20:35:59 executing program 0: r0 = socket$inet(0x2, 0x0, 0xf07) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0xffffffffffffff8a) 20:35:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$netlink(0x10, 0x3, 0x400000000004) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000040)) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000004c0)="04", 0x1}], 0x1) write(r1, &(0x7f0000000240)="2300000015000707030f00c0f635c63f280f550b00120f0a0811000100f5fe0012ff00", 0x23) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") 20:35:59 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="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", 0x123) [ 177.416592] netlink: 180 bytes leftover after parsing attributes in process `syz-executor4'. 20:35:59 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f0000000080)={0x0, r3+10000000}, &(0x7f00000000c0)) ioctl(r0, 0x3, &(0x7f0000000100)="463dfe6016edacfdf8ed6cec95eb9807a0598717439a9ed851e6bf3c1e3d8ae684db8a97092c8f") timer_create(0xfffffffffffffffe, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') getrusage(0x0, &(0x7f0000000440)) listen(r1, 0x7) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000040008eaf586da3a5f1090478b66fe25fe8aa94b5ab543af30aa12b50f062d4b32c3ae2d69197b5e3fadc726afc3dd907f4e34c4788c4122538e3de02546ea010dfabe25c1c9bb1cdb90866b82c30c7c10c54ea138750ac97819f516532f375d07fe6c4648a59802ff310023c9bd99c4a1a9c726636ab40faeb30e18a367e5843c8f06bec613ad834f31b1888e75ce69eb98694b03d56f0f8b63e6b7897570eb6ab4af366746ab7f493c13fd6488ada58907da550cc95457", @ANYRES16=0x0, @ANYBLOB="0000000000000000000010000000ea"], 0x14}}, 0x0) tkill(r2, 0x1004000000016) [ 177.514509] ================================================================== [ 177.522024] BUG: KASAN: use-after-free in work_is_static_object+0x39/0x40 [ 177.528952] Read of size 8 at addr ffff8801bdb91960 by task kworker/0:4/4839 [ 177.536129] [ 177.537763] CPU: 0 PID: 4839 Comm: kworker/0:4 Not tainted 4.18.0+ #186 [ 177.544510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.553887] Workqueue: events p9_poll_workfn [ 177.558291] Call Trace: [ 177.560883] dump_stack+0x1c9/0x2b4 [ 177.564557] ? dump_stack_print_info.cold.2+0x52/0x52 [ 177.569785] ? printk+0xa7/0xcf [ 177.573066] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 177.577829] ? work_is_static_object+0x39/0x40 [ 177.582423] print_address_description+0x6c/0x20b [ 177.587277] ? work_is_static_object+0x39/0x40 [ 177.591857] kasan_report.cold.7+0x242/0x2fe [ 177.596282] __asan_report_load8_noabort+0x14/0x20 [ 177.601211] work_is_static_object+0x39/0x40 [ 177.605621] debug_object_activate+0x2fc/0x690 [ 177.610203] ? __wake_up_common+0x740/0x740 [ 177.614545] ? debug_object_assert_init+0x4b0/0x4b0 [ 177.619604] ? mark_held_locks+0xc9/0x160 [ 177.623762] __queue_work+0x1ca/0x1410 [ 177.627647] ? __wake_up+0xe/0x10 [ 177.631113] ? p9_client_cb+0x62/0x80 [ 177.634919] ? flush_rcu_work+0x90/0x90 [ 177.638895] ? p9_fd_cancelled+0x2f0/0x2f0 [ 177.643140] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 177.648349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.653910] ? userfaultfd_poll+0x22b/0x390 [ 177.658239] ? mark_held_locks+0xc9/0x160 [ 177.662389] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 177.666984] queue_work_on+0x19a/0x1e0 [ 177.670888] p9_poll_workfn+0x55e/0x6d0 [ 177.674910] ? p9_read_work+0x1060/0x1060 [ 177.679061] ? graph_lock+0x170/0x170 [ 177.682878] ? lock_acquire+0x1e4/0x540 [ 177.686855] ? process_one_work+0xb9b/0x1ba0 [ 177.691284] ? kasan_check_read+0x11/0x20 [ 177.695439] ? __lock_is_held+0xb5/0x140 [ 177.699631] process_one_work+0xc73/0x1ba0 [ 177.703864] ? trace_hardirqs_on+0x10/0x10 [ 177.708112] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 177.712782] ? lock_repin_lock+0x430/0x430 [ 177.717588] ? __sched_text_start+0x8/0x8 [ 177.721739] ? lock_downgrade+0x8f0/0x8f0 [ 177.725891] ? retint_kernel+0x10/0x10 [ 177.729793] ? graph_lock+0x170/0x170 [ 177.733617] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 177.738390] ? lock_acquire+0x1e4/0x540 [ 177.742374] ? worker_thread+0x3dc/0x13c0 [ 177.746544] ? lock_downgrade+0x8f0/0x8f0 [ 177.750707] ? lock_release+0xa30/0xa30 [ 177.754686] ? kasan_check_read+0x11/0x20 [ 177.758845] ? do_raw_spin_unlock+0xa7/0x2f0 [ 177.763252] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 177.767838] ? kasan_check_write+0x14/0x20 [ 177.772073] ? do_raw_spin_lock+0xc1/0x200 [ 177.776319] worker_thread+0x189/0x13c0 [ 177.780307] ? process_one_work+0x1ba0/0x1ba0 [ 177.784810] ? graph_lock+0x170/0x170 [ 177.788617] ? graph_lock+0x170/0x170 [ 177.792421] ? find_held_lock+0x36/0x1c0 [ 177.796491] ? find_held_lock+0x36/0x1c0 [ 177.800574] ? lock_downgrade+0x8f0/0x8f0 [ 177.804733] ? kasan_check_read+0x11/0x20 [ 177.808899] ? do_raw_spin_unlock+0xa7/0x2f0 [ 177.813314] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 177.818412] ? __kthread_parkme+0x58/0x1b0 [ 177.822876] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 177.827911] ? trace_hardirqs_on+0xd/0x10 [ 177.832064] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.837602] ? __kthread_parkme+0x106/0x1b0 [ 177.841927] kthread+0x345/0x410 [ 177.845295] ? process_one_work+0x1ba0/0x1ba0 [ 177.849788] ? kthread_bind+0x40/0x40 [ 177.853604] ret_from_fork+0x3a/0x50 [ 177.857340] [ 177.858961] Allocated by task 6866: [ 177.862589] save_stack+0x43/0xd0 [ 177.866046] kasan_kmalloc+0xc4/0xe0 [ 177.869765] kmem_cache_alloc_trace+0x152/0x780 [ 177.874457] p9_fd_create+0x1a7/0x3f0 [ 177.878261] p9_client_create+0x8ed/0x1770 [ 177.882497] v9fs_session_init+0x21a/0x1a80 [ 177.886816] v9fs_mount+0x7c/0x900 [ 177.890357] mount_fs+0xae/0x328 [ 177.893721] vfs_kern_mount.part.34+0xdc/0x4e0 [ 177.898311] do_mount+0x581/0x30e0 [ 177.901866] ksys_mount+0x12d/0x140 [ 177.905504] __x64_sys_mount+0xbe/0x150 [ 177.909489] do_syscall_64+0x1b9/0x820 [ 177.913378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.918574] [ 177.920196] Freed by task 6866: [ 177.923487] save_stack+0x43/0xd0 [ 177.926943] __kasan_slab_free+0x11a/0x170 [ 177.931176] kasan_slab_free+0xe/0x10 [ 177.934971] kfree+0xd9/0x260 [ 177.938080] p9_fd_close+0x416/0x5b0 [ 177.941795] p9_client_create+0xa9a/0x1770 [ 177.946032] v9fs_session_init+0x21a/0x1a80 [ 177.950375] v9fs_mount+0x7c/0x900 [ 177.953914] mount_fs+0xae/0x328 [ 177.957291] vfs_kern_mount.part.34+0xdc/0x4e0 [ 177.961878] do_mount+0x581/0x30e0 [ 177.965416] ksys_mount+0x12d/0x140 [ 177.969040] __x64_sys_mount+0xbe/0x150 [ 177.973029] do_syscall_64+0x1b9/0x820 [ 177.976933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 177.982114] [ 177.983744] The buggy address belongs to the object at ffff8801bdb91840 [ 177.983744] which belongs to the cache kmalloc-512 of size 512 [ 177.996400] The buggy address is located 288 bytes inside of [ 177.996400] 512-byte region [ffff8801bdb91840, ffff8801bdb91a40) [ 178.008268] The buggy address belongs to the page: [ 178.013218] page:ffffea0006f6e440 count:1 mapcount:0 mapping:ffff8801dac00940 index:0xffff8801bdb910c0 [ 178.022674] flags: 0x2fffc0000000100(slab) [ 178.026914] raw: 02fffc0000000100 ffffea00072f2048 ffffea0007098188 ffff8801dac00940 [ 178.034799] raw: ffff8801bdb910c0 ffff8801bdb910c0 0000000100000005 0000000000000000 [ 178.042675] page dumped because: kasan: bad access detected [ 178.048377] [ 178.050000] Memory state around the buggy address: [ 178.054929] ffff8801bdb91800: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 178.062286] ffff8801bdb91880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.069644] >ffff8801bdb91900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.077021] ^ [ 178.083525] ffff8801bdb91980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.090902] ffff8801bdb91a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 178.098341] ================================================================== [ 178.105695] Disabling lock debugging due to kernel taint [ 178.111149] Kernel panic - not syncing: panic_on_warn set ... [ 178.111149] [ 178.118516] CPU: 0 PID: 4839 Comm: kworker/0:4 Tainted: G B 4.18.0+ #186 [ 178.126661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.136018] Workqueue: events p9_poll_workfn [ 178.140426] Call Trace: [ 178.143015] dump_stack+0x1c9/0x2b4 [ 178.146648] ? dump_stack_print_info.cold.2+0x52/0x52 [ 178.151839] ? lock_downgrade+0x8f0/0x8f0 [ 178.155989] panic+0x238/0x4e7 [ 178.159198] ? add_taint.cold.5+0x16/0x16 [ 178.163364] ? add_taint.cold.5+0x5/0x16 [ 178.167447] ? do_raw_spin_unlock+0xa7/0x2f0 [ 178.171857] ? work_is_static_object+0x39/0x40 [ 178.176440] kasan_end_report+0x47/0x4f [ 178.180415] kasan_report.cold.7+0x76/0x2fe [ 178.184747] __asan_report_load8_noabort+0x14/0x20 [ 178.189678] work_is_static_object+0x39/0x40 [ 178.194085] debug_object_activate+0x2fc/0x690 [ 178.198677] ? __wake_up_common+0x740/0x740 [ 178.202998] ? debug_object_assert_init+0x4b0/0x4b0 [ 178.208022] ? mark_held_locks+0xc9/0x160 [ 178.212177] __queue_work+0x1ca/0x1410 [ 178.216080] ? __wake_up+0xe/0x10 [ 178.219560] ? p9_client_cb+0x62/0x80 [ 178.223365] ? flush_rcu_work+0x90/0x90 [ 178.227339] ? p9_fd_cancelled+0x2f0/0x2f0 [ 178.231597] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 178.236787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.242322] ? userfaultfd_poll+0x22b/0x390 [ 178.246647] ? mark_held_locks+0xc9/0x160 [ 178.250794] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 178.255406] queue_work_on+0x19a/0x1e0 [ 178.259329] p9_poll_workfn+0x55e/0x6d0 [ 178.263306] ? p9_read_work+0x1060/0x1060 [ 178.267452] ? graph_lock+0x170/0x170 [ 178.271277] ? lock_acquire+0x1e4/0x540 [ 178.275261] ? process_one_work+0xb9b/0x1ba0 [ 178.279687] ? kasan_check_read+0x11/0x20 [ 178.283849] ? __lock_is_held+0xb5/0x140 [ 178.287918] process_one_work+0xc73/0x1ba0 [ 178.292177] ? trace_hardirqs_on+0x10/0x10 [ 178.296443] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 178.301110] ? lock_repin_lock+0x430/0x430 [ 178.305354] ? __sched_text_start+0x8/0x8 [ 178.309518] ? lock_downgrade+0x8f0/0x8f0 [ 178.313681] ? retint_kernel+0x10/0x10 [ 178.317572] ? graph_lock+0x170/0x170 [ 178.321378] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 178.326146] ? lock_acquire+0x1e4/0x540 [ 178.330146] ? worker_thread+0x3dc/0x13c0 [ 178.334298] ? lock_downgrade+0x8f0/0x8f0 [ 178.338444] ? lock_release+0xa30/0xa30 [ 178.342429] ? kasan_check_read+0x11/0x20 [ 178.346589] ? do_raw_spin_unlock+0xa7/0x2f0 [ 178.350999] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 178.355597] ? kasan_check_write+0x14/0x20 [ 178.359826] ? do_raw_spin_lock+0xc1/0x200 [ 178.364061] worker_thread+0x189/0x13c0 [ 178.368042] ? process_one_work+0x1ba0/0x1ba0 [ 178.372555] ? graph_lock+0x170/0x170 [ 178.376367] ? graph_lock+0x170/0x170 [ 178.380167] ? find_held_lock+0x36/0x1c0 [ 178.384234] ? find_held_lock+0x36/0x1c0 [ 178.388303] ? lock_downgrade+0x8f0/0x8f0 [ 178.392453] ? kasan_check_read+0x11/0x20 [ 178.396600] ? do_raw_spin_unlock+0xa7/0x2f0 [ 178.401023] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 178.406134] ? __kthread_parkme+0x58/0x1b0 [ 178.410387] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 178.415426] ? trace_hardirqs_on+0xd/0x10 [ 178.419578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.425121] ? __kthread_parkme+0x106/0x1b0 [ 178.429444] kthread+0x345/0x410 [ 178.432808] ? process_one_work+0x1ba0/0x1ba0 [ 178.437300] ? kthread_bind+0x40/0x40 [ 178.441115] ret_from_fork+0x3a/0x50 [ 178.445161] Dumping ftrace buffer: [ 178.448713] (ftrace buffer empty) [ 178.452406] Kernel Offset: disabled [ 178.456015] Rebooting in 86400 seconds..