[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.879777] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.929753] random: sshd: uninitialized urandom read (32 bytes read) [ 21.270032] random: sshd: uninitialized urandom read (32 bytes read) [ 21.764441] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. [ 27.182362] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/04 03:47:44 fuzzer started [ 28.362365] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/04 03:47:47 dialing manager at 10.128.0.26:46743 2018/08/04 03:47:51 syscalls: 1 2018/08/04 03:47:51 code coverage: enabled 2018/08/04 03:47:51 comparison tracing: enabled 2018/08/04 03:47:51 setuid sandbox: enabled 2018/08/04 03:47:51 namespace sandbox: enabled 2018/08/04 03:47:51 fault injection: enabled 2018/08/04 03:47:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/04 03:47:51 net packed injection: enabled 2018/08/04 03:47:51 net device setup: enabled [ 34.901138] random: crng init done 03:48:57 executing program 0: r0 = socket$inet6(0xa, 0x800080000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8) 03:48:57 executing program 1: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f00003efff0)={0x0, 0x0, 0x10000}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffdb0}, 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000950000)=""/128, 0x80) 03:48:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 03:48:57 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") read(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46) recvmmsg(r1, &(0x7f0000007600)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000540)=""/8, 0xa}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x2, &(0x7f0000003b00)=""/82, 0xffffffffffffffe5}}], 0x3a0, 0x0, &(0x7f00000077c0)={0x77359400}) 03:48:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) 03:48:57 executing program 4: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50fb1}]}) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 03:48:57 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) seccomp(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50fb1}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='reno\x00', 0x5) 03:48:57 executing program 6: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50f8c}]}) perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 99.990807] IPVS: ftp: loaded support on port[0] = 21 [ 99.992813] IPVS: ftp: loaded support on port[0] = 21 [ 100.014175] IPVS: ftp: loaded support on port[0] = 21 [ 100.033623] IPVS: ftp: loaded support on port[0] = 21 [ 100.055243] IPVS: ftp: loaded support on port[0] = 21 [ 100.079173] IPVS: ftp: loaded support on port[0] = 21 [ 100.087518] IPVS: ftp: loaded support on port[0] = 21 [ 100.103369] IPVS: ftp: loaded support on port[0] = 21 [ 101.662015] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.668417] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.700723] device bridge_slave_0 entered promiscuous mode [ 101.716723] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.723098] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.731711] device bridge_slave_0 entered promiscuous mode [ 101.740248] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.746618] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.761608] device bridge_slave_0 entered promiscuous mode [ 101.782144] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.788559] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.804654] device bridge_slave_0 entered promiscuous mode [ 101.821099] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.827449] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.837861] device bridge_slave_1 entered promiscuous mode [ 101.845781] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.852194] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.859500] device bridge_slave_0 entered promiscuous mode [ 101.866824] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.873265] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.883600] device bridge_slave_0 entered promiscuous mode [ 101.890509] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.896864] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.904151] device bridge_slave_1 entered promiscuous mode [ 101.912186] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.918550] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.933804] device bridge_slave_1 entered promiscuous mode [ 101.942227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 101.949566] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.955925] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.974845] device bridge_slave_0 entered promiscuous mode [ 101.982227] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.988583] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.996478] device bridge_slave_1 entered promiscuous mode [ 102.003638] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.010034] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.017940] device bridge_slave_1 entered promiscuous mode [ 102.025843] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.032218] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.050220] device bridge_slave_0 entered promiscuous mode [ 102.058231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.066406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.074854] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.081232] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.091113] device bridge_slave_1 entered promiscuous mode [ 102.102617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.111033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.119514] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.125960] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.135067] device bridge_slave_1 entered promiscuous mode [ 102.142459] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.148839] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.173730] device bridge_slave_1 entered promiscuous mode [ 102.183654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.197473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.205800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.213069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.231023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.239619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.273349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 102.281818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.344115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.358641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.390971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.404687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 102.517097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.525757] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.544268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.586573] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.596529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.634660] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.660028] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.682472] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.693007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.705620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.721238] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 102.732554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.792103] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.805767] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 102.841245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 103.044651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.063539] team0: Port device team_slave_0 added [ 103.105167] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.133480] team0: Port device team_slave_0 added [ 103.154495] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.171567] team0: Port device team_slave_0 added [ 103.188641] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.198846] team0: Port device team_slave_1 added [ 103.216386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.229716] team0: Port device team_slave_1 added [ 103.250670] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.266444] team0: Port device team_slave_0 added [ 103.274676] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.283235] team0: Port device team_slave_0 added [ 103.295707] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.310642] team0: Port device team_slave_1 added [ 103.320078] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.332484] team0: Port device team_slave_0 added [ 103.351430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.360330] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.376418] team0: Port device team_slave_1 added [ 103.386929] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.397703] team0: Port device team_slave_1 added [ 103.402919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.409998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.417899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.429893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.438674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.452558] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.459754] team0: Port device team_slave_0 added [ 103.466324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.473142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.484200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.493776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 103.501394] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 103.510457] team0: Port device team_slave_0 added [ 103.525029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.533093] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.539899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.556916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.565900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.581437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.588859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.596689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.605274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 103.614080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 103.621129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.629982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.647369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.655086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.664530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 103.671614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.679803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.687554] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.695573] team0: Port device team_slave_1 added [ 103.701011] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.708467] team0: Port device team_slave_1 added [ 103.714989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.723663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.731328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.739387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.763396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.771600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.779464] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.786511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.795178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.804872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 103.812120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.820189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.829468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 103.836777] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 103.844678] team0: Port device team_slave_1 added [ 103.851314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 103.860713] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.869409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.876721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.891227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.913275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.929385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.936930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.944877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.952603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.960329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.968429] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 103.975848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.983611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.993446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.000488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.014421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.029243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 104.037039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 104.046836] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.055205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.067570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.081566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.108490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.117230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.124879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.134428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 104.141867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.150513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.174301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.183351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.203820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.232356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.249383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.262012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.271738] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.285403] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 104.302490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.332458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.359308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.371873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.379501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.387363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.401408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.414907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.423069] ip (4941) used greatest stack depth: 16832 bytes left [ 104.431879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 104.444446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.456827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.487813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.504577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.512253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.520011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.135421] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.141832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.148476] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.154905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.173410] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.183927] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.190347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.196973] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.203322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.210849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.268290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.288343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.330286] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.336778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.343401] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.349771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.379762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.391442] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.397822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.404442] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.410876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.419717] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.434178] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.440551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.447182] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.453538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.506633] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.516871] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.523246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.529831] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.536166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.543906] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.641964] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.648355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.654972] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.661317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.669013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 105.682100] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.688481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.695110] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.701469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.709697] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 106.285018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.296396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.326398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.333538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.340803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.348580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.169820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.244428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.286186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.417279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.476843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.502969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.520738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.534014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.585665] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.624385] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.634192] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.821430] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.855518] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.867335] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.876090] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.907749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 109.941460] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 109.947683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.961307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.006929] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.013288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.026359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.070890] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.082660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.101482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.179679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.185861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.194798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.237889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.244157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.251719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.288283] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.295027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.306523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.340346] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.358397] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.364776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.377370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.395464] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.401800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.414737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.529968] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.556504] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.599415] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.700899] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.714670] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.737773] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.757710] 8021q: adding VLAN 0 to HW filter on device team0 03:49:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0xd, 0x8080a, 0x5, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_ROPEN(r2, &(0x7f0000000300)={0x18, 0x71, 0x1, {{0x1, 0x4, 0x7}, 0x1f}}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='wlan1-ppp1posix_acl_accesseth1ppp0eth0\x00') ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000200)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getpeername$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="dda8243fac1f29aab6595eb253849a000261fffffffedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x1410c2, 0x0) open_by_handle_at(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000025aa34906f22fc96d124535fbae8ac95e392c176e6725ff8451e660994d2e0f1000000000"], 0x7ffd) 03:49:10 executing program 6: ioctl(0xffffffffffffffff, 0x1, &(0x7f00000002c0)="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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc4ab) syz_read_part_table(0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="0200eeffffff01000000ff070000b177e0167fffffff", 0x16, 0x1c0}]) 03:49:10 executing program 0: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x41f7267ae7be09e5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) 03:49:10 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0xfffffffffffffffe, 0x0) write$eventfd(r2, &(0x7f0000000040), 0x28ccfc94) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r4+30000000}}, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0x20) tkill(r3, 0x4000000000015) 03:49:10 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x1000004040fe, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) ioctl$BLKPG(r0, 0x40480923, &(0x7f00000000c0)={0x200000000000, 0x0, 0x0, &(0x7f0000000100)}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x1000) [ 112.762165] Dev loop6: unable to read RDB block 1 [ 112.767214] loop6: AHDI p1 p2 [ 112.770443] loop6: partition table partially beyond EOD, truncated 03:49:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x100, 0x0) fsetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000040122185d5df10d6f28ab62480"], &(0x7f0000000140)='nat\x00', 0x4, 0x1) r1 = socket$inet6(0xa, 0x801, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x318, [0x20000540, 0x0, 0x0, 0x20000640, 0x20000780], 0x0, &(0x7f0000000000), &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]}, 0x3d4) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000001c0)="045b61ddf08e69fb4eed0bea827deae0123f0ed49608cb199d9336090098c27ce1de41461770c43068f4b976c5f77ad34d90c14403ba6a36e37d0531e493189f5776cff83776fb14feb463f57c", 0x4d, 0x4000, 0x0, 0x0) [ 112.831977] loop6: p1 start 4278648832 is beyond EOD, truncated 03:49:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = msgget$private(0x0, 0x15) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/4096) pselect6(0x40, &(0x7f0000000000)={0x7fffffff, 0x4, 0x2, 0x5, 0x3, 0x81, 0x2, 0x100}, &(0x7f0000000080)={0x0, 0x6d4f, 0x6, 0x1f, 0x2, 0x20, 0xfff, 0x8572}, &(0x7f00000000c0)={0x1, 0xfffffffffffffff8, 0x9, 0x3, 0x1, 0x68, 0x0, 0x1}, &(0x7f0000001140)={0x77359400}, &(0x7f00000011c0)={&(0x7f0000001180)={0x7}, 0x8}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x75, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) 03:49:10 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x80000000, 0x4) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) r7 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x1, r2, r3, r4, r5, 0xa0, 0x4}, 0x9, 0x8, 0x5, 0x100, r6, r7, 0x6}) r8 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2049, 0x511401) ioctl$KVM_DEASSIGN_DEV_IRQ(r8, 0x4040ae75, &(0x7f0000000080)={0x58, 0xfffffffeffffffff, 0x2, 0x204}) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) [ 112.923196] kernel msg: ebtables bug: please report to author: Wrong len argument 03:49:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 03:49:10 executing program 6: r0 = socket$inet6(0xa, 0x806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') ioctl$RTC_AIE_ON(r2, 0x7001) setsockopt$packet_fanout(r1, 0x107, 0xe, &(0x7f000007affc), 0x4) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x7}) [ 112.979129] kernel msg: ebtables bug: please report to author: Wrong len argument 03:49:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x8203, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x79, "58aa462c53ebf21894659c992ccffe867be82c82ecd0be7d3c8b85ebb26bb36102feace0fd7d9f1f01200b968f5a8a97d66fdf080f39be0416044d87e5ca6f20022e0f835c908adc1e992448ba0306a6789a8b6760ba809980f0bc7e3ef10fe90890f3c71baec8195d19befc07806b342c8651430b242fa439"}, &(0x7f0000000580)=0x81) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r2, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0x4}}}, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x2, 0x2, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000280)=r4, 0x4) connect$inet(r0, &(0x7f0000000040), 0x10) sendto$inet(r0, &(0x7f0000000000)='_', 0x1, 0x0, &(0x7f0000000b00)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), 0x14) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x20, 0x840) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000140)=0xba2, 0x4) recvfrom$inet(r0, &(0x7f0000002b40)=""/4096, 0x1000, 0x618d44d16d10c176, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000180), 0x4) 03:49:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x1, 0x0) sendmsg$unix(r2, &(0x7f0000000700)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)="e25c636f089dfa2129d31229d394c373ff98415e8a01e433b75943157e633fc0da708749b1a7a4957ef1c9914a5101fda40dd50e2b56ceace5ba23b9930b937596267cc5eb17e713ae04ff9c57ce7f79089ff68946dc13c797cd9a814acbcaa1b439de33e67485cb48", 0x69}, {&(0x7f0000000580)="3e878fd6ad230f216d9c8879b18b106743609a2e9b1d0bbec42160fc39c51d4b265ac5cec05c851227a71d54e2667d76aa3917444a9a6d088e091429936e5a594199963bb3efc4c07fccbf5489091859892e9a5af2dcbc3a661bd457edd7c45e1c083e9723216dbfd7bfc2d9b877794e050b736b2dc43223d9692e10b7f154a39c306ea87dc2cf4f0305fa4143af0b92d0f172daf0bb3c1d465091153630efdc4beee8e192425675ba1b422285f4b0ee3f321a795716391d549629bd07729e8f", 0xc0}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000640)="a24a2c6378feb921e6391f7ef27a4dbac1d0652caa277161439a752fbc1ca1a6c0c11cc437a5a1b7f63b0526a71adebea80a61e32f9a8d7fea964f1ece6bb342739316bda6934fe1a1302ce597357539741b00559f8f58218daf496be44ca90815f7e74994e7b828926af7904c893b9fc55ddae375add4d4433b9851", 0x7c}], 0x4, 0x0, 0x0, 0x20000000}, 0x4000001) sendmmsg$alg(r1, &(0x7f0000005100)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001300)='7', 0x1}], 0x1}, {0x0, 0x0, &(0x7f0000000140)}, {0x0, 0x0, &(0x7f00000029c0), 0x0, &(0x7f0000002a00)=[@op={0x18}], 0x18}], 0x3, 0xc080) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000000c0)='net/ip_mr_vif\x00') r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x8440) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000040)) 03:49:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 03:49:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x50000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x8, 0x7e94, 0x1000, 0x1, 0x7, 0x8, 0xffffffff, 0x9, 0x4, 0x7f}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x7) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@rand_addr=0x7, @rand_addr=0x1, 0x0, 0x3, [@remote, @multicast1, @empty]}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @icmp=@timestamp}}}}, &(0x7f0000ea3000)) 03:49:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r0, 0x84, 0x4, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r1, r2, r3}, 0xc) 03:49:10 executing program 7: rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80, 0x12800) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) r1 = memfd_create(&(0x7f0000000000)='dev ', 0x4) ftruncate(r1, 0x10000040001) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "0ef07458bda0f2c2cb9184329ccf57432e934a41f4ba7c370e44594b298ce9cba2dbb3ac639bf60b7c2f786b3460edb820182b073696985d531a328a0abd8254862788c493bcc1f8e2c4c0ba24009388874bb9743bd3ec386c84eaf88f9705aea49aba8c282ca3fa64dc7347fe000aedadd6d76292dade23825c9d79a501da122e99ed31e699af71f0b307d306ac2e066999a4f367cf51d7fd58c393d1df7e43f2177d2b455e73cfaa972960a10212f90092f2cb291812189911785356d995a1b5699381781bec868076bc75de17631942f8"}, 0xd6) 03:49:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xf06}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x80000000}, 0x8) 03:49:10 executing program 6: r0 = socket$packet(0x11, 0x800006, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x18, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 03:49:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = gettid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x80200, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000008, 0x2010, r2, 0x0) select(0xb, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000180)={0x77359400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r4, 0x100) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendto$unix(r2, &(0x7f00000002c0)="c7c7e66480132e610597c619b4162b37dfb340f2f8b614314158630c128c9b280982beb5c0934970eef940d2222efa016edf51fb814a4414aab3f17eeee2c90a8413ef63c1146fc1816ad1ee8a361439930aa92316c68d3916b217272f75d7b5388314cc036baa0e79046cf87a7bb03250e7df4764e9", 0x76, 0x40, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 03:49:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000006140)=@hci, 0x80, &(0x7f00000064c0)}}, {{&(0x7f0000006500)=@pppol2tpv3, 0x80, &(0x7f0000006640), 0x0, &(0x7f0000006680)=""/19, 0x13}}], 0x2, 0x0, &(0x7f00000068c0)={0x0, 0x1c9c380}) 03:49:11 executing program 6: socket$kcm(0x2, 0x5, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000180), &(0x7f0000000040)=0x4) 03:49:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="f74d4345d8902ccc503fbaa0206d96cc3babebede556e02f5ade7dcafb891f0f873230b112c15ab96054191687c5395ed0c112c2926d0c1be38f0c52dbc64e8780407171658994f728e800e45372459ad0ec1d8ef44d9d5d178e512a1f9d60aca920926ab0", @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="3cbc3887e3cafee26384306e0f98cd9cffcce54ef3db2dcec4aaa2ae79b9e891c32a15b74971430faa81060ca4f7fa91f4813be2ac1944ad6cb5a407843184ef232d388182f2add9cc05c910b69f458b87385e299cb23bdf14994632ec17917488d1a7b3a66aae34dbd97b482fa656148cfd8eb579f72ba45abcfe3867e9ab5ba9216bd3ba687f584e2c73b949ec362c16db2af9eacbafdabfff9cdcb37864", @ANYRES32=r0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES64=r1, @ANYRES16, @ANYBLOB="3133146e8bbaac43a7351507d5267a8894a8994bdd0107da5da2df673519b59d5f8dce4d9311f38f6d3316d15eb97a3ea4375a5658288169a86cae90cd99aa2b2f267ec582dc3e536f75b2179c4cbb31609ec12510cd8095d74b0191d20c57e8ad065fe41b7233c4a87bfb5eb9273c1a86e4c3ceb6b04f80ef17444841532fc66431a88fd137b3bb8ad646fc9cd019d736f4015e7bc004712890b12379118ab28870a0849ddecbe886ec15d2709bb246ccc2701d957ff16f980b2e442d4b6b88470a73697a153f06", @ANYBLOB="96887fa359aac455a32cceb8fd33a67a2e668c47fd9b4044f1e58f4aa9fcc073535a8bcec1d3bf928fa8dd90760a92f2681b9ba43bc8532139db805cb74afa701007916605e2732ce9793801bd082e65c0fbf9624459d5a7de91bcbd4a83f26a5f3f0734950190f836b5eb77eaddb078ee618a85ca7d5ed87ac4eef5bd15945993e7aec80509adf17a4fa2ecc685a027c5d8f7051c8679b449eb492b5156ea0d93ffde273a78ba583aaa69fab30419ed61", @ANYRES32=r1]]]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x486]}) 03:49:11 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x7f}, 0x8) ioctl(r1, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x80003, 0x1) ioctl(r4, 0x8000000000008912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a040007000000000013002d54036205001a00000ce600001000e0c90002000000000000000000000000000000f0ffffff000b02000000"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x20, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f890b87921dc9ca1b23809d41d03ab8300"]) 03:49:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) 03:49:11 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) write$cgroup_int(r1, &(0x7f0000000440), 0x12) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x3, 0x8f, [], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/143}, &(0x7f0000000140)=0x78) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x200) vmsplice(r0, &(0x7f0000000000), 0xcec, 0x0) 03:49:11 executing program 6: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @remote, [], {@generic={0x88f5}}}, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xffffffffffffa505, 0x4) 03:49:11 executing program 2: unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000080), 0x3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) r2 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user'}, {@posixacl='posixacl'}, {@uname={'uname'}}, {@cache_loose='cache=loose'}, {@cache_loose='cache=loose'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@loose='loose'}, {@posixacl='posixacl'}, {@access_user='access=user'}]}}) 03:49:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000071, 0x7fffffff]}) 03:49:11 executing program 1: r0 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in6=@local}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) setreuid(r0, r0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000000180), 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f0000cc3ff0)={0x77359400}, &(0x7f000044b000), 0x0) 03:49:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4(r1, &(0x7f0000000180)=@generic, &(0x7f0000000040)=0x11d, 0x80007) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000300)=0xd8f1, 0x17c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000002c0), &(0x7f0000000280)="c8", 0x1, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) sendmsg(r2, &(0x7f00000020c0)={&(0x7f0000000780)=@hci={0x1f, r5, 0x1}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000800)="17dced8bacf517099ee67a7f591e72f1622c82c318f2df121333560093e40604a11d5c843442ff21bedaa9b11815", 0x2e}, {&(0x7f0000000840)="1ef1e1c515fbda2992712244ba3def921c5f14bafe3cd12ec338983fab97deff1f5e1380cda6e4ac2fd343d8dcb459c01350dc455225c84f8e531dacb7cb13c8cc15d6267ec268b0", 0x48}, {&(0x7f00000008c0)="8f1e4427d245700823ac79492a021f8253b6a06beaf39562f6630ad753e3876f81fe9b1b1b6161e6c87706a191ddcc93b91f9f411d22b70bac68bc9fc4b415e32b3c5f638b97", 0x46}, {&(0x7f0000000940)="3021a99f3b50fa1c33c07f8622bd1d58b85a38bc3c172a05e73f581c24a15b45d919f4ae9bc3c0bcad8bab46c0033a745e3cd3bb9af80ca5b32fa84505790c68a4b45f83d224971c8f125d4eb8c94c29a36651dc6ebd2c0e6cf13a2e443f31373d64a014a42c9b21463bd641c3d565eccd0c3ab74ca25d6e48a3d0c98a2ffceea831aa392059f18a1afdb1b4d7266d2361f8cef6efac484a7039f6581b39", 0x9e}, {&(0x7f0000000a00)="4eede47f43e79ef57666c0bf4ef297a3b25c2d41b31478fccf1e88f241f2b70e00ba9f42016d91f924cce49c374fa3c8ce33d789bc5a898e75dc82a34c72476ff4245e147e2724672e", 0x49}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="de7c46cc24cc8876451604948c9ece95b419101d9ee4116f34a2ad20db7e2ce758dfe4250c8e030af2f6d6ccc91a30b7230ce2499d018dfbb3abf42c5ec235da4d7b9636e6a1", 0x46}, {&(0x7f0000001b00)="f74ac64138570fda7d6b985db4a5f8b47db9b34d6ed064c9dc59f559d6c035ef6696d4375f6156f9c80bb85c1134857bc6daabcc18fd64fbbc30fbdf37eb63c4cf851e5cecafa93956fc92be38716b980c33fab777828cd71e8ec9b62e0a18fd232b59f66d4ab460fda8e5fab1b0e76a1ab9ba30e1ad728df033505770de676bc7cb00ef4571b82c5d3130b5f1c5d86f36", 0x91}], 0x8, &(0x7f0000001c40)=[{0x60, 0x13f, 0xffffffff, "faefc4a710a5df6a6872e7f598bac1833bcd95bc99db80d31f60f3c086fe6a58d38a165aa659f524fe590972c8fc9d2c15348ba2c20ad591be23afc348e1ae010f6cbfbbb2a0808e2cceb37bbced67"}, {0xb8, 0x1ff, 0x7, "3ac067be089fff66424f022715a723399f4b45d98c39fb5ede3cc2b32957c90214665c5e7d308d5781915f53408a9e439e2bf713b178e303168bc7f94aecccb77f974420769494d4e43e268cb9f24b7e7132f19e4f176ae1d0e81d65be9891e1e5f7f8bbdaa25f48608196837a318be642076370ad62b3e7a830a93b8a06a0d36d06fc14368fbe3d88be1bdc48015b6b9112ee918c15a564411051d5cbe3f64cfc"}, {0xf0, 0x112, 0x8, "8da6527b622138ffc7b3239eb0e1900379432bfc859ed733d85ee5cf34ba4b6b853d835039f2acabb5a1a8549012ec4780025b7b0fb37cac864cbaa085415f1675305c5f18148fb914c7f55c9ecd416c28c7a7195a5026875cb9ab0fadb770c7eeda412cff8139374177fc99b0ecbf4b95e0a35c73470527c28aef90ce87fdadd276cc397467e625d590012b5069d6ad78b73224b0abd1a135ea098745ac1d4643ea052c356ab80d92f7cb6ac0f3971a1973074f29311ff0c3e9e81559a339dfc29bd056f64686deac76748df0cd19c44b72dc6f8b62a777f6ca"}, {0xc8, 0x116, 0xa83, "08f382c2eee15cd73aecb9d80c44e19356f5d6bd17aa729213ea49a7d15da22ebd67b525691c1b276329b1ab341b31902b50fdebdf7c951e2c446476eb10f6364ebf9ef2179fff1668bdf97670d4a8a9d114167c6da943d584a473de348b300079541cbda2f24df7ed0df533053273fac62902f516ef4b6374511107310f8b4146be421d3de6dd43730aa26fad608cf241bf36accfd023c64666a58b05a1b67db9cd245fb605c55a2ac0b7a7078b5c242b"}, {0x78, 0x10d, 0x5, "268e8e9c910b3bf27107e57e9a06cd702b20cb9a97cad1024299412e1b2a88c97c64c94f23e37438dffb93ecf299590bace23d29a601e4725f78188bfd7bb22a8d9e8ba742eb84b09e10f8735e13fae2484c13f85783b54015607872ca58c252c5489425"}, {0x50, 0x101, 0x4, "633e8726b6228fc8c8657ba9f9ac2cddbf0173978fc0aa4d92633d4ed580ee7d8be4643c4bd3d481d6dc88d483994278cc3f3abcbfa6a391130e84e5d5793fc1"}, {0x68, 0x6, 0x3, "d2e9d17ab347ae6753abfa8edd2593c7d1db66ed953c04b6ad63751e1d27ed71a128aff94726c0e653389df761de0060e2100ec76900071455322a4019deff3c462570a0f0140720a0ecde3ff6fce030dfd9"}, {0x58, 0x111, 0x3, "3aac3fc2acb960e126aa998806a86d97c73347b6904ed87ae58b8f718ef13eefb9e0f16b72e5b172602567003f3181723f55f66bba1fd82f4aafae2684ccc288942f8897a2f7e1"}], 0x458, 0x4000}, 0x800) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000540)={0x14, 0x88, 0xfa00, {r4, 0x3c, 0x0, @in6={0xa, 0x4e21, 0x8f, @mcast2, 0x7}}}, 0x90) sendmsg(r2, &(0x7f0000000480)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x2, 0x6, 0x7, 0x7fffffff, "e7d5299b22205dd7073f3a4ae6d7af3f37cb1d12c678c62f78a622708576bad425cc3fd410e2ddfbb24c890d12e5d6aedfcf604aafafb5820aa33baf6dfa1e", 0x2c}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="c7f7a9db6dfa9a36da0701e313f8b2da1a8637a0b6ac845bcf29efd964b29c03f2c5a323e8e39a98d690627fe7ef8e4c286d7c01dc3a75deef42eae379c33e04e09dde3cc557107d5d57c50f2b10732f876ef389cb03e08753d9922dfb09a7d341dfbf8173482bc0c35ed9d2b170d93a33e666239679cba2235335306352", 0x7e}], 0x1, 0x0, 0x0, 0x890}, 0x4000000) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000240), &(0x7f0000000200)='em1wlan1\x00', r3) fchmodat(r0, &(0x7f0000000600)='.\x00', 0x30) [ 113.757688] syz-executor3 (6445) used greatest stack depth: 15024 bytes left 03:49:11 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) ptrace$cont(0xf, r1, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8170, 0x40) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0xffffffffffff7fff}, 0xc) 03:49:11 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400100120000200008000f8", 0x16}], 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000011c0)="b5", 0x1}], 0x1) writev(r0, &(0x7f00000000c0), 0x10000000000000a4) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r0, 0x79, 0x1, r0}) 03:49:11 executing program 7: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") recvfrom(r1, &(0x7f0000000240)=""/180, 0xb4, 0x2000, &(0x7f0000000300)=@ethernet={0x307, @dev={[], 0x21}}, 0x80) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000180), 0x403) 03:49:11 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x7, &(0x7f0000000000)={&(0x7f0000000380)="823117fdb625479c3be7e793ab43011c590e25c2c2da42e70fd11d74d2a175bb66aa56f43e12f39f0e4b10e56ac9c902481552a177836c828e661b5c82a259bd20f060a8db4a5d6c10d1191248543fca417823d6c86d018a49c2116ac32fc05e4e9792d90790111cb5395d3a61834279e399d219f95fd93f69bcedfe1fff38e8b1", 0x81}) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="a4f83f0408ca66b6a724cf7a6fba05f6a10eeb6e0f840f4de4bb6204e6ab5ac1eab0e7428c4c4e1f13a663e7ccd0982d919002d0738be4dde1d7ad9e818e6565746249c0e97c8ce877e8d94d5f5d1376f8e2e1e27ba0c373e4467f0a1a9cb558d59036ed731fc021c11994de51e7f247b7b38a086f500963cf776717b4c78de63fce97a1bf680cb11e52e62fb34a4c0b0e58449a", 0x94}, {&(0x7f0000000040)="0f1e3aea0a29063e260e04e71bb3539cea1bf6", 0x13}, {&(0x7f0000000280)="1824ee1e4793e994825f4c101000f5d55e8fbd2bdfe4555c3e6096097229031de5a65180c9ea92129c607a385c8b2c4351fa3ae0e2b010942be30897400c3add3a6bf5f806e5c47a514a32b66716eb71ecd7eb452de5acb77b3bb2a1fb41a2163b78ae2307829e65f85b641502c977cace4d4e36972b638d601cc4bbe332bfe035b3300ea9ac0acd59dfd18d1cd84f715b49c4c84c3b1991cab8", 0x9a}], 0x3, 0x100002) 03:49:11 executing program 1: r0 = socket(0x40000000015, 0x80005, 0x0) getsockopt(r0, 0x10000000000114, 0x2720, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3, 0x20000) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000180)=""/4096) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0xe4ef, 0x2}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x89c}, 0x8) 03:49:11 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100000020000, 0x0) io_setup(0x1ff, &(0x7f0000000680)=0x0) io_getevents(r1, 0x6, 0x2, &(0x7f00000006c0)=[{}, {}], &(0x7f0000000700)) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000161a000002000000000000007f00000000000000725e000000000000000007000000cd00000002000000ff01000000000000ff0700000000000007000000000000000000000000000000000000000000"]) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0xc000000) ioctl(r3, 0x8004000008912, &(0x7f0000000100)="295ee1312c16f477671070") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000400)={0xffffffffffffffff}) syz_open_dev$dspn(&(0x7f0000000800)='/dev/dsp#\x00', 0x800, 0x20001) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000840)={'syz_tun\x00', {0x2, 0x404, @rand_addr=0x7}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000340)=0xc) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000440)) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x40000, &(0x7f0000000740)=ANY=[@ANYBLOB="9166f6e4f2ac304e1fc7d2db28274d71a9001170a7e6d648407f5e92fa2ce3b8864bef65eba58fcd022e29451b0befa9047a2ef9b8352a83482cdc16d0cbe2ee3d5b32dddd8423b1efede3f40f42"]) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000600)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000640)=r7, 0x4) mq_timedreceive(r6, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000480)=0x6530, 0x4) r8 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r8, 0x1000000000016) mq_timedsend(r6, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) fcntl$setstatus(r2, 0x4, 0x4bff) pwrite64(r2, &(0x7f0000001300)="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", 0x856, 0x1) 03:49:11 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x100000005) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/fib_trie\x00') sendfile(r0, r2, &(0x7f0000000040)=0x404f00, 0x8010) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x5) 03:49:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200096e, 0x4) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000680), 0x100000ce, &(0x7f0000000c40)=""/160, 0xa0, 0x6}, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000040)={0x7f, 0x80000000, 0x1, 0x4, 0x5, [{0x3b0e, 0x80000001, 0x1, 0x0, 0x0, 0x200}, {0x9, 0x2, 0x3f, 0x0, 0x0, 0x4}, {0x5, 0x2, 0xffffffffd28f22a9, 0x0, 0x0, 0x800}, {0x8, 0x906b, 0x8, 0x0, 0x0, 0x800}, {0x401, 0x6, 0x1, 0x0, 0x0, 0x200}]}) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x0) r1 = semget(0x1, 0x0, 0x220) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000180)=""/54) 03:49:11 executing program 5: r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001540)='/dev/zero\x00', 0xc8102, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000a7e97d715375ed492666e00fc09771547c592a43ce41b47c0703814945720f89f35a57a5670ccd0a753596875ec273a950d4274e11240acdd9358510f74e45dce79c2fdfc1e6e647de6e24183d865dbbac1a34bd401f9e4074644b057a64e5f9dc9f8a2f4d4779376df48ffeddd5a8cb18458bff908659fd10903d102e87ad65675cfe841f720de7267a0f9aef67e7c6faa995c411000000"], &(0x7f00000015c0)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001380)={{{@in6=@ipv4={[], [], @local}}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000001480)=0xe8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x10d, 0x10, &(0x7f0000019b50)=ANY=[@ANYBLOB="0f0000000000000000000000000000000000000000000000000000000000000009000000030000008802000000000000ffffffffffffffff80030000ffffffff80030000ffffffffffffffff80030000ffffffff03000000", @ANYPTR=&(0x7f0000024000)=ANY=[@ANYBLOB="00000000000000000000000000ffff000000000000000000000000000078f70000000000000000000000000000fb0000"], @ANYBLOB="fe8000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041dd197e63ed9ac599171f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800c8000000000000000000000000000000000000000000000000002000545241434500000000000000000000000000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8002efe000000000000000000000000000000000000000000000000eb9c4354000000000000000000000000000000000000000000000000000000000000000000000000000000006e657462696f732d6e730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800e9020000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0xfda0) sendto$inet6(r0, &(0x7f0000000280)="67d29471b9d906d1efa84b05e836ff9d11d17ff0f7d051886b00a6bfecb5cd0b84a178eb5b33caddb24917a57ece0c", 0x2f, 0xc0, &(0x7f0000001580)={0xa, 0x4e24, 0xb4e, @mcast1, 0x3f}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r3 = socket$inet(0x2, 0x4, 0x101) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f00000014c0)={{0x2d, @broadcast, 0x4e24, 0x2, 'nq\x00', 0x18, 0x4, 0x18}, {@remote, 0x401, 0x10007, 0x5, 0x0, 0x7ff}}, 0x44) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=0x1000) r4 = syz_open_dev$dspn(&(0x7f0000001300)='/dev/dsp#\x00', 0xcb4, 0x400) write$P9_RLOPEN(r4, &(0x7f0000001340)={0x18, 0xd, 0x1, {{0x20, 0x1, 0x6}, 0x9}}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) syz_init_net_socket$llc(0x1a, 0x3, 0x0) fchmodat(r4, &(0x7f0000001600)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001740)='tls\x00', 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x9, 0x4e20, 0x1, 0xa, 0x80, 0xa0, 0x6, r2, r5}, {0x3, 0xb15e, 0x1, 0x1ff, 0x2d61db3c, 0xff, 0x10001, 0xd5}, {0x0, 0x5, 0x4a, 0x6}, 0x80, 0x6e6bb0, 0x0, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@local, 0x0, 0x5, 0x0, 0x1200000000000000, 0x9, 0xfffffffffffffffa, 0xe8}}, 0xe8) 03:49:11 executing program 7: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x10080) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000200)={0xc0af, 0x4, 0x6d5}) write$P9_RSTAT(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="4f0000007d000000007d0300000000000000000000000000000000000000000000000000000000000000000000000000000001002b0c002c5e5d2c3a262d2a707070083236c0c1e0ac93d22594abdf74021f310800766d6e657431ad5e0000"], 0x4f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x20, 0x161002) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*'], 0x1) [ 113.986212] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:49:11 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) ioctl$sock_bt(r0, 0xdd17, &(0x7f0000000080)="e4751ad2c9ae7681e7216c1095f19dc75f011447d3ee6e86ed829545f0190282ec314b385152fbb79e8ac1cad77d8009df7ed21f903379fc8f23d6516d3d97fc41") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x32, @multicast2, 0x100000001, 0x3, 'fo\x00', 0x9, 0x2, 0x7}, 0x2c) personality(0x20041fdfbe) uname(&(0x7f00000006c0)=""/176) 03:49:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="094a0000e01d00fbce0403d61eeb26e20c"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) 03:49:11 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x6, 0xffff, 0x1, 0x8000, 0x0, 0xdce, 0x40000, 0x1, 0x4, 0x5, 0x40, 0x200, 0x3ff, 0x100000000, 0x1, 0x1, 0x20d9, 0xfffffffffffffffd, 0x4800, 0x3, 0x4, 0x0, 0x2, 0x1000, 0x80, 0xfffffffffffff801, 0x9, 0x7ff, 0x3f, 0x5, 0x2, 0xfffffffffffffffe, 0x80, 0x1, 0x3, 0x6, 0x0, 0x180, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x2080, 0xfffffffffffffff9, 0x2, 0x2, 0x4, 0x9, 0x7fff}, r1, 0x6, r0, 0x1) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000001000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x19, &(0x7f00000001c0)="bcea4e2c9d484c15a14a53a76558", &(0x7f0000000000)=""/25, 0x3a1a}, 0x28) 03:49:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0xfffffffffffd, 0x0) syncfs(r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x5580}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001600)={0x0, 0xfffffffffffff24d}, &(0x7f0000001640)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000001680)={r4, 0x7e4}, 0x8) recvmmsg(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000003c80), 0x0, &(0x7f0000003d00)=""/205, 0xcd}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000500)=""/98, 0x11}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000004480)=""/178, 0xb2}}], 0x40000000000008a, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 03:49:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002080)={'tunl0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) close(r1) 03:49:11 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$netlink(0x10, 0x3, 0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23}}, 0x4, 0x1}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r1, 0x39}, 0x8) 03:49:11 executing program 6: readv(0xffffffffffffffff, &(0x7f0000001100), 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85714070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4), 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x0, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r3 = fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000011c0)=r3, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1b, 0x5}, &(0x7f00000000c0)=0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'lo\x00', {0x2, 0x4e24, @rand_addr=0x5}}) clock_gettime(0x0, &(0x7f0000001200)={0x0}) timer_settime(r5, 0x1, &(0x7f00000001c0)={{r6}, {0x77359400}}, &(0x7f0000000200)) arch_prctl(0x1001, &(0x7f0000000580)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) sendto$inet(r2, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) dup3(r1, r2, 0x80000) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x3, 0x9, 0xffffffffffff8001, 0xffffffffffff0000}, 0x10) 03:49:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0xd49, 0x8000, 0x8, 0x0, 0x800, 0x820, 0xd, 0x7f, 0x1f, 0x5, 0x80000001, 0x0, 0x8100000000000, 0x9, 0x7, 0x8, 0x2, 0x0, 0x8, 0x7ff, 0x0, 0x5, 0x2, 0x2, 0x7f, 0x5, 0x9, 0x4, 0x0, 0x1000, 0x8000, 0x1f, 0x5c, 0x9, 0x7fff, 0x0, 0x100000000, 0x2, @perf_config_ext={0x2, 0x2}, 0x2862, 0x3b, 0xb1c, 0x6, 0x7ff, 0x6, 0x80}, 0x0, 0xe, 0xffffffffffffff9c, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r1, 0x0) ioprio_set$uid(0x0, 0x0, 0x6) 03:49:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffd}], 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) [ 114.368392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:49:11 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)=""/4096, 0x1000) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 03:49:12 executing program 7: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x14, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r0}, 0x48) 03:49:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x100000006) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r2 = getegid() setgid(r2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="025c3f0a00145f8f764070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) dup2(r1, r0) [ 114.455237] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:49:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5c183589d63f8848c8a1aaf70700315f85714070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-aesni,hmac(md4-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) 03:49:12 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semctl$SETVAL(r0, 0x7, 0x10, &(0x7f0000000040)) semop(r0, &(0x7f000002efe2)=[{0x0, 0x6}], 0x1) semop(r0, &(0x7f000001a000)=[{}, {}], 0x2) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x4}, {0x1}], 0x2, &(0x7f0000036ff0)={0x77359400}) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x7f, 0x1800}, {0x5, 0x9, 0x1000}, {0x7, 0x7fffffff, 0x1800}, {0x1, 0x5, 0x1800}, {0x7, 0x8, 0x1800}, {0x3, 0x6, 0x1800}, {0x0, 0x8a8, 0x1000}, {0x1, 0x0, 0x800}], 0x8) 03:49:12 executing program 1: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x8000000000000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x8, 0x6, 0x200, 0x7, 0x0, 0x400, 0x11002, 0x4, 0x3, 0x2eb, 0x20, 0x20, 0x4, 0x1, 0x1, 0x4bb, 0x38e, 0x9, 0x80000000, 0x9, 0x9, 0x81, 0x9, 0x1, 0xfffffffffffffffd, 0x7290, 0x100, 0xe22, 0x200, 0xca66, 0x3, 0x4, 0xffffffffffffff09, 0x1, 0x4, 0x10000, 0x0, 0x1f, 0x4, @perf_config_ext={0xff, 0x100000000}, 0x0, 0x33, 0x9, 0x1, 0x0, 0x5c}, r1, 0x6, 0xffffffffffffff9c, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xc3, 0x1) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) setuid(0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000300)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) 03:49:12 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x7, 0x7ff, 0x80000001, 0x5, 0x9, 0x0, 0x59, 0x0, 0xfffffffffffffcba, 0x1f, 0x9, 0x400}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x9}) 03:49:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070") syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x101c02) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0xffffffffffffffe0, 0x1ffffff}, 0x2) [ 114.597075] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 03:49:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x800, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) getpid() getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xb, 0x0, 0x0, 0x2}, 0x10}, 0x8}, 0x0) 03:49:12 executing program 7: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @mcast1}, @in={0x2, 0x2, @remote}], 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) 03:49:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget(0x0, 0x4, 0xf2) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x7, 0x1800}, {0x2, 0x8001, 0x800}, {0x4, 0xd1, 0x1800}, {0x1, 0x8001}, {0x4, 0x21e, 0x800}, {0x1, 0x7, 0x1000}, {0x3, 0x2, 0x1000}], 0x7, &(0x7f0000000080)) 03:49:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x428000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) read(r0, &(0x7f0000000440)=""/206, 0xff1a) 03:49:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) r4 = dup2(r2, r1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000016c0)={0x0, @rand_addr, @dev}, &(0x7f0000001700)=0x3) bind$packet(r3, &(0x7f0000001740)={0x11, 0x11, r5, 0x1, 0x7, 0x6, @random="75f49de205cb"}, 0x14) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000200)=""/208) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) read(r3, &(0x7f0000000180)=""/116, 0x74) 03:49:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x2000000000040, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402201, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x165) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028087263ac7463d6d6cdb1fff"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x41}], &(0x7f0000000300)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0xdc, &(0x7f0000000280)="04bac16d15656fc30b46585fde1e", &(0x7f0000000380)=""/220}, 0x28) 03:49:12 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x100, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x3a) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) 03:49:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10100, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040), 0x10) 03:49:12 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) ioctl$void(r1, 0x10000000005451) read(r1, &(0x7f0000000040)=""/20, 0x14) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 03:49:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") io_setup(0x8, &(0x7f0000000380)=0x0) r2 = dup2(r0, r0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001480)='/dev/full\x00', 0x800, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001600)='/dev/input/mouse#\x00', 0x9, 0x0) io_submit(r1, 0x3, &(0x7f0000001680)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0xf4f2, r0, &(0x7f00000003c0)="03c729a628ff7b79a62001a780510cd299ab78267c0ddad432d39a6c51b5d502b93cdb9e78cbdc07de210f9973095127f3d2f8da0129bdad7cc82c9586d002958f6c2c2040935492709a843551d65f8777e47c66a5eebbae3b59dfb7313a60a918f8b7c8839042bcd97b62ebc66471825609dcff3082", 0x76, 0x0, 0x0, 0x1, r2}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x64f, r0, &(0x7f0000000480)="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", 0x1000, 0x401, 0x0, 0x0, r3}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x687, r0, &(0x7f0000001500)="14f03c59339c1dcace3598f8843709c4918fe0045dd6e82739aedf4957cf2587f25c4c1694c861ff11cba811ccf403d3a6b322f9663319bac502a88d60cd51dc404472b0c7a2b1384c73d19248ac1f8cdb30f58332fd8fb6925cde59875dadb18d78b446c9d00b989fe6d7bee91a91ab2ec85ab9a99155b2050b38ea7db837787cc53221631d30b822e05b955d15d3895271442db7e3c50ebd4a63984a9cb51eef49afcfa586faa20fcf56499b1542931d1b41380c74aeedb5a96c0092020b965751c5fd2f42bd3fe8a49b0b2c56045703f1f8efc8e9dbc2ecb15b7a50d8146158e4", 0xe2, 0x9, 0x0, 0x1, r4}]) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r5, 0x40) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x4c3, 0x80) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000240)) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) socketpair$inet(0x2, 0x0, 0x7de0bb4e, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r8, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) sendto$inet6(r6, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x98) 03:49:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x15, 0x80005, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)}, &(0x7f0000000240)) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001940)=0x14, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008ec0)=[{{&(0x7f0000007280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000007480)=[{&(0x7f0000007300)=""/244, 0xf4}, {&(0x7f0000007400)=""/116, 0x74}], 0x2, &(0x7f00000074c0)=""/54, 0x36, 0xffffffff80000000}}], 0x1, 0x0, &(0x7f0000009100)={0x0, 0x989680}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'team_slave_1\x00', {0x2, 0x4e22, @multicast1}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000009240)={{{@in=@broadcast, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000009340)=0xe8) clock_gettime(0x0, &(0x7f000000ac80)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc0fe}}, 0x1c) 03:49:12 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x125d, &(0x7f0000000140)) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x4, 0x3, 0x1}) 03:49:12 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x800, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000200)={0x2000000000000000, 0xf2, 0x1e94}) pipe2(&(0x7f00000002c0), 0x400000000080800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38010000180013070000000000000000fe8000000000000000e70000000000ff00000000000000000000ffffac14ffaa00000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002d76359b85c99a990be7000000000000000000000000000000f0ffffff00000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000ae32089d0b3a97400000016781c28fe0c9a10b97a2682ce8200000000000000000000000000010000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480001006d6435000000000000000000000000008502000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) 03:49:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="66baf80cb89cc35484ef66bafc0cb0d9eeeadfa36e063401662ef20f1b2366f20f011cc7dac20f0093be0000000f080f20c6c4c175f1d7660f66e4", 0x3b}], 0x1, 0x21, &(0x7f0000000180), 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)) lstat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)) fcntl$getown(r3, 0x9) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@mcast2}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000019c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004380)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000004480)=0xe8) gettid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpgid(0x0) getgroups(0x1, &(0x7f0000006080)=[0xee00]) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:49:12 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/248) socketpair(0x8, 0x6, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0xfffffffffffffffe, &(0x7f0000000540)="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") r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x10000fe) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x6, 0x2, 0x3ff}) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000006480)=[{{&(0x7f0000003780)=@xdp, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/193, 0xc1}], 0x1, &(0x7f0000003bc0)=""/73, 0x49}}], 0x1, 0x0, &(0x7f00000052c0)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 03:49:12 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setpipe(r3, 0x407, 0x9) dup2(r1, r0) dup2(r0, r3) 03:49:12 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x30) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) read$eventfd(r0, &(0x7f0000000100), 0x8) [ 115.313100] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 115.332145] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 03:49:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8913, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl(r0, 0x1, &(0x7f0000001240)="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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000001200), 0x4) sendto$inet(r1, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x1, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2e, &(0x7f0000001040)=0xb, 0x4) recvfrom$inet(r1, &(0x7f0000769f0f)=""/241, 0xfffffffffffffdd4, 0x0, &(0x7f0000497ff0)={0x2, 0x0, @broadcast}, 0x10) 03:49:12 executing program 3: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f0000000740)='\x00', 0x1, r2) add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0), &(0x7f0000000280), 0x10c, r1) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000280)=""/132, 0xe736a4920f22c0a, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0xc8, @mcast2, 0x9}]}, &(0x7f0000000680)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000006c0)={r5, 0x9}, 0x8) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000500)="c7d1f08543075b4a1eda2dd7283fd4611d3e0185db8ad62548998167837d03e054a174dbe8ceb7d740d89dafeda63ce725208b084fb49f1c221fd7a4f99cbb92a286e8b4c637959359902eceb58f0d9469de143c5f8b23b29eb383d37e5818bef07773e330be814c4d87bf70ad1dfb0790c625708917144fecc2090e43aa46fec26081630583fe6da5449d2a7b3d65b4d5d73de954d3f6725a7b98aaab98e216aa15443b91e47c9bc51f112d31e069bf3677", 0xb2, r0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x22000, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2090}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)={0x101c, 0xb, 0x4, 0x410, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x8}, [@generic="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", @typed={0x8, 0x48, @u32=0x5}]}, 0x101c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f00000003c0)=""/125) write$FUSE_OPEN(r6, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x0, 0x6}}, 0x20) [ 115.396829] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? 03:49:12 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r0}}, 0x18) symlinkat(&(0x7f0000008ff8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') io_submit(0x0, 0x1, &(0x7f0000002780)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001740)="ff", 0x1}]) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r1, r3, 0x0, 0xf1b2) 03:49:12 executing program 6: r0 = semget(0x1, 0x0, 0x322) semop(r0, &(0x7f0000000000)=[{0x1, 0x200, 0x1000}, {0x0, 0x1962, 0x800}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x37, &(0x7f0000000900)={@local, 0x0, 0x0, 0xffffffffffffffff}, 0x2fa) recvfrom$inet6(r1, &(0x7f0000000040)=""/220, 0xdc, 0x40000100, 0x0, 0x0) 03:49:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000280)={0x8000000000, {{0xa, 0x4e23, 0x7fffffff, @loopback, 0x1ff}}, {{0xa, 0x4e22, 0x320082ab, @local, 0xfffffffffffff801}}}, 0x108) epoll_create(0x1) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0), 0x4) 03:49:13 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101001, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340)=0x8, 0x4) r1 = accept(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x80) close(r0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xe129, 0x5, 0x4, 0x6, 0xffffffffffffff81}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, &(0x7f0000000280)=0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{0x3ff, 0x4a29, 0x0, 0x2}, {0x9, 0x9, 0x4b}, {0x2, 0x0, 0x7, 0xffffffff00000001}, {0x2, 0x1, 0x2, 0x7}, {0x12bc, 0x5, 0x400000, 0x1ff}, {0x8, 0xc85, 0x7, 0x7}]}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000140)=0x8) [ 115.530261] ================================================================== [ 115.537693] BUG: KASAN: slab-out-of-bounds in crypto_dh_encode_key+0x80e/0x830 [ 115.545081] Write of size 4 at addr ffff8801d57ace50 by task syz-executor3/6802 [ 115.552518] [ 115.554158] CPU: 0 PID: 6802 Comm: syz-executor3 Not tainted 4.18.0-rc7-next-20180803+ #31 [ 115.562561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 115.571911] Call Trace: [ 115.574617] dump_stack+0x1c9/0x2b4 03:49:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x7) rt_tgsigqueueinfo(r0, r0, 0x34, &(0x7f0000000080)) capget(&(0x7f0000000340), &(0x7f0000000380)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 03:49:13 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000022000000020000000200000002000000020000001a0000c0a00100000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000140)) 03:49:13 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x0) ioctl$KDDISABIO(r3, 0x4b37) readahead(r1, 0xfffffffffffffffe, 0xa2) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) [ 115.578253] ? dump_stack_print_info.cold.2+0x52/0x52 [ 115.583452] ? printk+0xa7/0xcf [ 115.586740] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 115.591505] ? crypto_dh_encode_key+0x80e/0x830 [ 115.596205] print_address_description+0x6c/0x20b [ 115.601326] ? crypto_dh_encode_key+0x80e/0x830 [ 115.606003] kasan_report.cold.7+0x242/0x30d [ 115.610425] __asan_report_store_n_noabort+0x12/0x14 [ 115.615541] crypto_dh_encode_key+0x80e/0x830 [ 115.620044] ? crypto_dh_decode_key+0x820/0x820 [ 115.624724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 115.630392] ? __keyctl_dh_compute+0x6e1/0x1c00 [ 115.635067] __keyctl_dh_compute+0x707/0x1c00 [ 115.639573] ? __save_stack_trace+0x8d/0xf0 [ 115.643905] ? copy_overflow+0x30/0x30 [ 115.647871] ? save_stack+0x43/0xd0 [ 115.651499] ? __kasan_slab_free+0x11a/0x170 [ 115.655901] ? kasan_slab_free+0xe/0x10 [ 115.659866] ? kfree+0xd9/0x260 [ 115.663146] ? __x64_sys_add_key+0x2b7/0x4e0 [ 115.667549] ? do_syscall_64+0x1b9/0x820 [ 115.671622] ? kasan_check_read+0x11/0x20 [ 115.675756] ? do_raw_spin_unlock+0xa7/0x2f0 [ 115.680153] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 115.684750] ? kasan_check_write+0x14/0x20 [ 115.688979] ? trace_hardirqs_off+0xd/0x10 [ 115.693204] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 115.698297] ? debug_check_no_obj_freed+0x30b/0x595 [ 115.703394] ? trace_hardirqs_off+0xd/0x10 [ 115.707628] ? quarantine_put+0x10d/0x1b0 [ 115.711771] keyctl_dh_compute+0xc5/0x11f [ 115.715906] ? __keyctl_dh_compute+0x1c00/0x1c00 [ 115.720652] ? do_futex+0x27d0/0x27d0 [ 115.724444] ? key_get_type_from_user.constprop.7+0x110/0x110 [ 115.730317] ? syscall_slow_exit_work+0x500/0x500 [ 115.735151] __x64_sys_keyctl+0x12a/0x3b0 [ 115.739292] do_syscall_64+0x1b9/0x820 [ 115.743164] ? finish_task_switch+0x1d3/0x870 [ 115.747652] ? syscall_return_slowpath+0x5e0/0x5e0 [ 115.752570] ? syscall_return_slowpath+0x31d/0x5e0 [ 115.757496] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 115.762503] ? prepare_exit_to_usermode+0x291/0x3b0 [ 115.767505] ? perf_trace_sys_enter+0xb10/0xb10 [ 115.772178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 115.777013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.782193] RIP: 0033:0x456b29 [ 115.785376] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 115.804263] RSP: 002b:00007f54eb9dec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 115.811963] RAX: ffffffffffffffda RBX: 00007f54eb9df6d4 RCX: 0000000000456b29 [ 115.819217] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000017 [ 115.826469] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.833726] R10: 0e736a4920f22c0a R11: 0000000000000246 R12: 00000000ffffffff [ 115.842457] R13: 00000000004d16a0 R14: 00000000004c7069 R15: 0000000000000000 [ 115.849725] [ 115.851334] Allocated by task 6802: [ 115.854950] save_stack+0x43/0xd0 [ 115.858388] kasan_kmalloc+0xc4/0xe0 [ 115.862085] __kmalloc+0x14e/0x760 [ 115.865618] __keyctl_dh_compute+0x6e1/0x1c00 [ 115.870094] keyctl_dh_compute+0xc5/0x11f [ 115.874230] __x64_sys_keyctl+0x12a/0x3b0 [ 115.878363] do_syscall_64+0x1b9/0x820 [ 115.882236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.887411] [ 115.889030] Freed by task 2186: [ 115.892293] save_stack+0x43/0xd0 [ 115.895731] __kasan_slab_free+0x11a/0x170 [ 115.899969] kasan_slab_free+0xe/0x10 [ 115.903756] kfree+0xd9/0x260 [ 115.906846] kvfree+0x61/0x70 [ 115.909945] __vunmap+0x326/0x460 [ 115.913392] vfree+0x68/0x100 [ 115.916485] n_tty_close+0xc3/0x130 [ 115.920099] tty_ldisc_close.isra.0+0xb0/0xe0 [ 115.924578] tty_ldisc_kill+0x4b/0xc0 [ 115.928364] tty_ldisc_hangup+0x2dd/0x640 [ 115.932499] __tty_hangup.part.21+0x2da/0x6e0 [ 115.936977] tty_vhangup+0x21/0x30 [ 115.940515] pty_close+0x3bd/0x510 [ 115.944041] tty_release+0x4b3/0x1300 [ 115.947828] __fput+0x376/0x8a0 [ 115.951094] ____fput+0x15/0x20 [ 115.954360] task_work_run+0x1e8/0x2a0 [ 115.958231] exit_to_usermode_loop+0x318/0x380 [ 115.962795] do_syscall_64+0x6be/0x820 [ 115.966668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 115.971834] [ 115.973452] The buggy address belongs to the object at ffff8801d57ace40 [ 115.973452] which belongs to the cache kmalloc-32 of size 32 [ 115.985940] The buggy address is located 16 bytes inside of [ 115.985940] 32-byte region [ffff8801d57ace40, ffff8801d57ace60) [ 115.997631] The buggy address belongs to the page: [ 116.002548] page:ffffea000755eb00 count:1 mapcount:0 mapping:ffff8801dac001c0 index:0xffff8801d57acfc1 [ 116.011977] flags: 0x2fffc0000000100(slab) [ 116.016200] raw: 02fffc0000000100 ffffea000755e748 ffffea00075a3788 ffff8801dac001c0 [ 116.024068] raw: ffff8801d57acfc1 ffff8801d57ac000 000000010000003f 0000000000000000 [ 116.031926] page dumped because: kasan: bad access detected [ 116.037618] [ 116.039227] Memory state around the buggy address: [ 116.044142] ffff8801d57acd00: 05 fc fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 116.051498] ffff8801d57acd80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 116.058929] >ffff8801d57ace00: fb fb fb fb fc fc fc fc 00 00 03 fc fc fc fc fc [ 116.066285] ^ [ 116.072241] ffff8801d57ace80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 116.079584] ffff8801d57acf00: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 116.086923] ================================================================== [ 116.095431] Kernel panic - not syncing: panic_on_warn set ... [ 116.095431] [ 116.102820] CPU: 0 PID: 6802 Comm: syz-executor3 Tainted: G B 4.18.0-rc7-next-20180803+ #31 [ 116.112607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 116.122042] Call Trace: [ 116.124632] dump_stack+0x1c9/0x2b4 [ 116.128263] ? dump_stack_print_info.cold.2+0x52/0x52 [ 116.133458] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 116.138221] panic+0x238/0x4e7 [ 116.141414] ? add_taint.cold.5+0x16/0x16 [ 116.145569] ? do_raw_spin_unlock+0xa7/0x2f0 [ 116.149976] ? do_raw_spin_unlock+0xa7/0x2f0 [ 116.154391] ? crypto_dh_encode_key+0x80e/0x830 [ 116.159061] kasan_end_report+0x47/0x4f [ 116.163033] kasan_report.cold.7+0x76/0x30d [ 116.167359] __asan_report_store_n_noabort+0x12/0x14 [ 116.172465] crypto_dh_encode_key+0x80e/0x830 [ 116.176965] ? crypto_dh_decode_key+0x820/0x820 [ 116.181638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 116.187177] ? __keyctl_dh_compute+0x6e1/0x1c00 [ 116.191850] __keyctl_dh_compute+0x707/0x1c00 [ 116.196353] ? __save_stack_trace+0x8d/0xf0 [ 116.200692] ? copy_overflow+0x30/0x30 [ 116.204578] ? save_stack+0x43/0xd0 [ 116.208204] ? __kasan_slab_free+0x11a/0x170 [ 116.212614] ? kasan_slab_free+0xe/0x10 [ 116.216591] ? kfree+0xd9/0x260 [ 116.219872] ? __x64_sys_add_key+0x2b7/0x4e0 [ 116.224281] ? do_syscall_64+0x1b9/0x820 [ 116.228346] ? kasan_check_read+0x11/0x20 [ 116.232493] ? do_raw_spin_unlock+0xa7/0x2f0 [ 116.236903] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 116.241485] ? kasan_check_write+0x14/0x20 [ 116.245724] ? trace_hardirqs_off+0xd/0x10 [ 116.249963] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 116.255069] ? debug_check_no_obj_freed+0x30b/0x595 [ 116.260097] ? trace_hardirqs_off+0xd/0x10 [ 116.264336] ? quarantine_put+0x10d/0x1b0 [ 116.268491] keyctl_dh_compute+0xc5/0x11f [ 116.272641] ? __keyctl_dh_compute+0x1c00/0x1c00 [ 116.277399] ? do_futex+0x27d0/0x27d0 03:49:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @empty, 0xe2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xd}, 0x4}, 0x68, [0xe9e, 0x401, 0x81, 0x6, 0x5, 0x5, 0x3, 0x423]}, 0x5c) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') [ 116.281206] ? key_get_type_from_user.constprop.7+0x110/0x110 [ 116.287096] ? syscall_slow_exit_work+0x500/0x500 [ 116.291953] __x64_sys_keyctl+0x12a/0x3b0 [ 116.296110] do_syscall_64+0x1b9/0x820 [ 116.300009] ? finish_task_switch+0x1d3/0x870 [ 116.304510] ? syscall_return_slowpath+0x5e0/0x5e0 [ 116.309446] ? syscall_return_slowpath+0x31d/0x5e0 [ 116.311750] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 116.314406] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 116.314423] ? prepare_exit_to_usermode+0x291/0x3b0 [ 116.314438] ? perf_trace_sys_enter+0xb10/0xb10 [ 116.314454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 116.314477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 116.321494] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.326470] RIP: 0033:0x456b29 [ 116.326484] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 116.326497] RSP: 002b:00007f54eb9dec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 116.383325] RAX: ffffffffffffffda RBX: 00007f54eb9df6d4 RCX: 0000000000456b29 [ 116.390578] RDX: 0000000020000280 RSI: 0000000020000200 RDI: 0000000000000017 [ 116.397829] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.405103] R10: 0e736a4920f22c0a R11: 0000000000000246 R12: 00000000ffffffff [ 116.412362] R13: 00000000004d16a0 R14: 00000000004c7069 R15: 0000000000000000 [ 116.420142] Dumping ftrace buffer: [ 116.423667] (ftrace buffer empty) [ 116.427358] Kernel Offset: disabled [ 116.430971] Rebooting in 86400 seconds..