[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 17.009277] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.731689] random: sshd: uninitialized urandom read (32 bytes read) [ 19.973577] random: sshd: uninitialized urandom read (32 bytes read) [ 20.796619] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. [ 26.206198] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/01 09:30:22 fuzzer started [ 27.567092] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/01 09:30:24 dialing manager at 10.128.0.26:46293 2018/08/01 09:30:28 syscalls: 1808 2018/08/01 09:30:28 code coverage: enabled 2018/08/01 09:30:28 comparison tracing: enabled 2018/08/01 09:30:28 setuid sandbox: enabled 2018/08/01 09:30:28 namespace sandbox: enabled 2018/08/01 09:30:28 fault injection: enabled 2018/08/01 09:30:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/01 09:30:28 net packed injection: enabled 2018/08/01 09:30:28 net device setup: enabled [ 35.763427] random: crng init done 09:31:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 09:31:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000008912, &(0x7f0000000240)="025cc80700145f8f764070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ffffffff007917a8"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 09:31:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f00000000c0)=""/45, 0x2d}}], 0x4000000000001a6, 0x0, &(0x7f0000000100)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 09:31:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) dup3(r1, r0, 0x0) 09:31:26 executing program 5: unshare(0x2060400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x3}) 09:31:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 90.643055] IPVS: ftp: loaded support on port[0] = 21 [ 90.661885] IPVS: ftp: loaded support on port[0] = 21 [ 90.681204] IPVS: ftp: loaded support on port[0] = 21 [ 90.722872] IPVS: ftp: loaded support on port[0] = 21 [ 90.740494] IPVS: ftp: loaded support on port[0] = 21 [ 90.771424] IPVS: ftp: loaded support on port[0] = 21 [ 90.789656] IPVS: ftp: loaded support on port[0] = 21 [ 90.800399] IPVS: ftp: loaded support on port[0] = 21 [ 92.398621] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.405135] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.434407] device bridge_slave_0 entered promiscuous mode [ 92.472064] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.478508] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.506477] device bridge_slave_0 entered promiscuous mode [ 92.514284] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.520697] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.528862] device bridge_slave_0 entered promiscuous mode [ 92.548186] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.554570] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.564491] device bridge_slave_1 entered promiscuous mode [ 92.571998] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.578369] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.586251] device bridge_slave_0 entered promiscuous mode [ 92.595009] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.601372] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.609461] device bridge_slave_0 entered promiscuous mode [ 92.622918] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.629285] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.636712] device bridge_slave_0 entered promiscuous mode [ 92.645736] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.652095] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.665575] device bridge_slave_1 entered promiscuous mode [ 92.678735] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.685140] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.696133] device bridge_slave_1 entered promiscuous mode [ 92.705886] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.712337] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.730298] device bridge_slave_0 entered promiscuous mode [ 92.739460] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.745860] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.753541] device bridge_slave_1 entered promiscuous mode [ 92.761156] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.767514] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.777366] device bridge_slave_1 entered promiscuous mode [ 92.783995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.791205] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.797581] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.805082] device bridge_slave_1 entered promiscuous mode [ 92.818191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.826377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.833494] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.839931] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.854635] device bridge_slave_0 entered promiscuous mode [ 92.867008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.875835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.882209] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.904627] device bridge_slave_1 entered promiscuous mode [ 92.918579] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.927378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.935109] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.941527] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.950839] device bridge_slave_1 entered promiscuous mode [ 92.958198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.966290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.974855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.988283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.045662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.054078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.061383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 93.104967] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.127568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.146988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 93.191244] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.272357] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.291572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.308168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.361007] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.402863] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.414095] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.424833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.441290] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.451958] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.466142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 93.482924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.508632] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.537465] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.581581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.590459] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 93.816042] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.835314] team0: Port device team_slave_0 added [ 93.899580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.920389] team0: Port device team_slave_0 added [ 93.958498] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.972156] team0: Port device team_slave_0 added [ 93.983025] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.001231] team0: Port device team_slave_1 added [ 94.012998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.022032] team0: Port device team_slave_1 added [ 94.043815] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.051438] team0: Port device team_slave_0 added [ 94.072695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.085270] team0: Port device team_slave_0 added [ 94.095511] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.107366] team0: Port device team_slave_1 added [ 94.113905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.120871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.129012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.144089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.152852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.160401] team0: Port device team_slave_1 added [ 94.167799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.180221] team0: Port device team_slave_0 added [ 94.189415] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.198223] team0: Port device team_slave_0 added [ 94.207250] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 94.220481] team0: Port device team_slave_0 added [ 94.228018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.236910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.255122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.263683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.272904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.281028] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.292492] team0: Port device team_slave_1 added [ 94.303602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.311402] team0: Port device team_slave_1 added [ 94.317569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.327617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.342486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.352969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.360652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.368117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.375626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.383032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.390532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.399396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.406712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.415872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.425106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.432063] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.439377] team0: Port device team_slave_1 added [ 94.446140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.454639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.462850] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 94.472218] team0: Port device team_slave_1 added [ 94.485930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.498440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.508862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.520005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.527426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.535059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.542610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.549445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.557920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.566978] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.575781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.582902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.590864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.598647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.613427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.622614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.629444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.637170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.646295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 94.653382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.661115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.672473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.684913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.691773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.699498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.718086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.730649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.743215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.751813] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 94.760528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 94.773009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.782524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.806360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.835231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.848166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.856082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.863810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.871321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.878832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.886148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.893856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.903754] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.912958] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.928438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 94.936741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.944661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.970057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.984886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.992749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.000466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.009689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 95.016815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.024792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.037328] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.048143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.058225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.087624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.096074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.104281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.111456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.130761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.149558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.161137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.168878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.176511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.192817] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 95.213314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.232618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.946217] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.952628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.959273] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.965636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.981500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 95.993112] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.999513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.006135] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.012488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.020304] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.052783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.071180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.114948] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.121354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.127965] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.134319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.143396] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.164768] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.171173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.177809] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.184169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.212587] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.222366] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.228748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.235377] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.241763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.252376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.269385] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.275770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.282404] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.288763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.306065] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.315938] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.322325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.328948] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.335314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.344336] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 96.472014] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.478424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.485051] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.491427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.517015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 97.098784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.111116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.133861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.142157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.149455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.156698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.864888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.021549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.058164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.149842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.229549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.251412] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.262502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.278863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.368245] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.472011] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.532750] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.560735] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.570656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.606968] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.628135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 100.648553] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 100.659832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.668369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.727126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 100.733297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.745095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.865561] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 100.879854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.890678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.936521] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 100.942927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.959215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.988495] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 100.994800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.006833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.025332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 101.041357] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.059868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.066963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.082422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.097684] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.104326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.115995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.131444] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.308701] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.411943] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.420869] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.437052] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 101.449229] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.469060] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.480327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.495102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.821585] 8021q: adding VLAN 0 to HW filter on device team0 09:31:39 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 103.193037] sctp: failed to load transform for md5: -2 09:31:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:39 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 09:31:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:39 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 09:31:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:39 executing program 5: unshare(0x2060400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x3}) 09:31:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:41 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 09:31:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:41 executing program 5: unshare(0x2060400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x3}) 09:31:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 09:31:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f00000000c0)=""/45, 0x2d}}], 0x4000000000001a6, 0x0, &(0x7f0000000100)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 09:31:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000008912, &(0x7f0000000240)="025cc80700145f8f764070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ffffffff007917a8"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 09:31:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) dup3(r1, r0, 0x0) 09:31:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000008912, &(0x7f0000000240)="025cc80700145f8f764070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ffffffff007917a8"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 09:31:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f00000000c0)=""/45, 0x2d}}], 0x4000000000001a6, 0x0, &(0x7f0000000100)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 09:31:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 09:31:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) dup3(r1, r0, 0x0) 09:31:41 executing program 5: unshare(0x2060400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x3}) 09:31:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="441f3708e30700000000840e00fe36ce73e20700000000000000db5851", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25) 09:31:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000008912, &(0x7f0000000240)="025cc80700145f8f764070") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ffffffff007917a8"], &(0x7f0000000640)="47504c00bc3047629662c71f3f5f26c0b48bec3e7ba6eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) 09:31:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f00000000c0)=""/45, 0x2d}}], 0x4000000000001a6, 0x0, &(0x7f0000000100)={0x77359400}) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 09:31:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 09:31:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 09:31:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000d00)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 09:31:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) dup3(r1, r0, 0x0) 09:31:41 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x59000, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b2000000000000b2000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}], 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 09:31:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 105.522110] isofs_fill_super: root inode is not a directory. Corrupted media? 09:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fcntl$notify(r1, 0x402, 0xc) unshare(0x400) fcntl$notify(r1, 0x402, 0x28) 09:31:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) 09:31:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 105.579453] isofs_fill_super: root inode is not a directory. Corrupted media? 09:31:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800190001000000", 0x24) 09:31:42 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x59000, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b2000000000000b2000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}], 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 09:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0xc) unshare(0x400) fcntl$notify(r1, 0x402, 0x28) 09:31:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) [ 105.763210] isofs_fill_super: root inode is not a directory. Corrupted media? 09:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0xc) unshare(0x400) fcntl$notify(r1, 0x402, 0x28) 09:31:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000d00)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 09:31:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800190001000000", 0x24) 09:31:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) 09:31:42 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x59000, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b2000000000000b2000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}], 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 09:31:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) 09:31:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) 09:31:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) 09:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0xc) unshare(0x400) fcntl$notify(r1, 0x402, 0x28) 09:31:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800190001000000", 0x24) [ 106.433450] isofs_fill_super: root inode is not a directory. Corrupted media? 09:31:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket(0x1e, 0x4, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="b6ba440f56733b5f2bc26d482443a4153395dc852219e34ffa10424a15f8c0cb5bccc370fc9d1641a4fd645d1e2de9ab949cfff47279e9ed92646a90ef5d4bb91099c7b36e8404d82c9f5eb396a30c9d338e862f7615b3a06bcb754009fd06b65dd98cc804bf818fbe45b6949417428a5a8a909fcc6522da3fcc6646f30c88925f68c98423afae9e3f3f2afa476fed440edff9f81be599c0b7b79eabd9c3d90e4169bc555e1c5cf87439", 0xaa}], 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r1, &(0x7f0000001240), 0x2d3, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x200000000000000, 0x0, 0x0, 0x0, @broadcast}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0xdd) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x8, 0xffffffff, 0x6, @dev={[], 0x13}}, 0x10) 09:31:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000014c0)="f9", 0x1}], 0x1) 09:31:42 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x59000, 0x1, &(0x7f0000000200)=[{&(0x7f00000003c0)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b2000000000000b2000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}], 0x0, &(0x7f0000000180)={[{@uid={'uid'}}]}) 09:31:42 executing program 2: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') mkdir(&(0x7f0000000180)='./control/file0\x00', 0x0) close(r0) 09:31:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000317000), 0xff8) unlink(&(0x7f0000000000)='./0ile/\x00') 09:31:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800190001000000", 0x24) [ 106.599317] isofs_fill_super: root inode is not a directory. Corrupted media? 09:31:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000317000), 0xff8) unlink(&(0x7f0000000000)='./0ile/\x00') 09:31:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000d00)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 09:31:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) 09:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xe, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 09:31:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 09:31:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:31:43 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e", 0x24}], 0x1}, 0x0) 09:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xe, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 09:31:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000d00)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 09:31:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) [ 107.227650] netlink: 'syz-executor2': attribute type 9 has an invalid length. 09:31:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x3}}) 09:31:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 09:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xe, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 09:31:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x47) close(r1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 09:31:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) 09:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xe, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) [ 107.427348] netlink: 'syz-executor2': attribute type 9 has an invalid length. 09:31:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000317000), 0xff8) unlink(&(0x7f0000000000)='./0ile/\x00') 09:31:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:31:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x28, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa}]}]}, 0x28}}, 0x0) 09:31:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 09:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x55) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)) 09:31:44 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0fc71c0fc71cf265266788d02e0fc72b0f01700abaf80c66b860a32d8a66efbafc0cb0fdee0f01cf66b9930000400f323e0f22e2bad104b09aee", 0x3a}], 0x1, 0x0, &(0x7f0000000340), 0x0) 09:31:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}]}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x80440, 0x0) 09:31:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x4d, 0x3ffc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x357}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x20000000040002}, 0xfffffffffffffcd0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x400000, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000940)=""/139) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="29000000d862af76b2a869b400b71fd475cb51887ca25d8c35f07c33ef4ddf3f71dbb3444130823a8e217eaf550301da7dfa57f49ef3f62872587f85c7dee514fbf628da41dbc7595cd66ff2662647ee91d9864ab6266b2c4f6ff26de669101e8625824e6e2942469f7e4740c84a7bec8415c37f9daa090a2770e839afb666c8d380e1d87d954328378653398d7ee08418a1b28c9a659d28726b537666a90ee71d13c52c8b30bc2024c2b3e940cc5862798368bb032ee8d8327cc2bdf305dab596ea1241b397f83a57152d049c15ae7c38454ce03947378a216afe61d781bf725926c31eddd71317ba02f1"], &(0x7f0000000400)=0x2) r6 = gettid() prlimit64(r6, 0xa, 0x0, &(0x7f0000000540)) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = getpgid(0xffffffffffffffff) getpriority(0x3, r8) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_int(r5, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r8, 0x2, &(0x7f0000000280)={0x30, 0x7, 0x8, 0x7f}) r10 = dup(r4) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000000340)=""/120) setgid(r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f0000000000)) setresuid(0x0, r12, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r12}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x299) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="5a0000003f159d7ae6d2babe426bb8bd735151601351306f0ff19c481e90f5646ac681aa21c945bd7867c5801615a269793f0aef8127ed1e4f72f9f2ecdee5f2d19e907408ccd6164118b11f8b35a2bfda24a15215c0af56413ac7d0a000"], &(0x7f0000000140)=0x2) syz_emit_ethernet(0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="ff1b00000100020000000000000000e000fa9f33b94e215808907800000000000000686c0000000000006d8c46ef9a92948752ec363691f0ed600623c048de8ef9c407881651e419ef69ca07fe865e9a36061577db76e9a82104130c407dcf090a541c75e644fd8df4e69c1336a636256d9bb2044a6e26ceea58538cb1127b411058c6"], 0x0) 09:31:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x3b, 's'}], 0x18}}], 0x1, 0x0) [ 107.694681] hugetlbfs: syz-executor4 (6747): Using mlock ulimits for SHM_HUGETLB is deprecated [ 107.708918] netlink: 'syz-executor2': attribute type 9 has an invalid length. 09:31:44 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0fc71c0fc71cf265266788d02e0fc72b0f01700abaf80c66b860a32d8a66efbafc0cb0fdee0f01cf66b9930000400f323e0f22e2bad104b09aee", 0x3a}], 0x1, 0x0, &(0x7f0000000340), 0x0) 09:31:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000100), &(0x7f0000000000)) 09:31:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x4d, 0x3ffc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x357}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x20000000040002}, 0xfffffffffffffcd0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x400000, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000940)=""/139) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="29000000d862af76b2a869b400b71fd475cb51887ca25d8c35f07c33ef4ddf3f71dbb3444130823a8e217eaf550301da7dfa57f49ef3f62872587f85c7dee514fbf628da41dbc7595cd66ff2662647ee91d9864ab6266b2c4f6ff26de669101e8625824e6e2942469f7e4740c84a7bec8415c37f9daa090a2770e839afb666c8d380e1d87d954328378653398d7ee08418a1b28c9a659d28726b537666a90ee71d13c52c8b30bc2024c2b3e940cc5862798368bb032ee8d8327cc2bdf305dab596ea1241b397f83a57152d049c15ae7c38454ce03947378a216afe61d781bf725926c31eddd71317ba02f1"], &(0x7f0000000400)=0x2) r6 = gettid() prlimit64(r6, 0xa, 0x0, &(0x7f0000000540)) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = getpgid(0xffffffffffffffff) getpriority(0x3, r8) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_int(r5, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r8, 0x2, &(0x7f0000000280)={0x30, 0x7, 0x8, 0x7f}) r10 = dup(r4) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000000340)=""/120) setgid(r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f0000000000)) setresuid(0x0, r12, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r12}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x299) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="5a0000003f159d7ae6d2babe426bb8bd735151601351306f0ff19c481e90f5646ac681aa21c945bd7867c5801615a269793f0aef8127ed1e4f72f9f2ecdee5f2d19e907408ccd6164118b11f8b35a2bfda24a15215c0af56413ac7d0a000"], &(0x7f0000000140)=0x2) syz_emit_ethernet(0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="ff1b00000100020000000000000000e000fa9f33b94e215808907800000000000000686c0000000000006d8c46ef9a92948752ec363691f0ed600623c048de8ef9c407881651e419ef69ca07fe865e9a36061577db76e9a82104130c407dcf090a541c75e644fd8df4e69c1336a636256d9bb2044a6e26ceea58538cb1127b411058c6"], 0x0) 09:31:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:31:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0) 09:31:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x3b, 's'}], 0x18}}], 0x1, 0x0) 09:31:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000100), &(0x7f0000000000)) [ 107.908882] netlink: 'syz-executor2': attribute type 9 has an invalid length. 09:31:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f0000317000), 0xff8) unlink(&(0x7f0000000000)='./0ile/\x00') 09:31:44 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0fc71c0fc71cf265266788d02e0fc72b0f01700abaf80c66b860a32d8a66efbafc0cb0fdee0f01cf66b9930000400f323e0f22e2bad104b09aee", 0x3a}], 0x1, 0x0, &(0x7f0000000340), 0x0) 09:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x55) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)) 09:31:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x4d, 0x3ffc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x357}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x20000000040002}, 0xfffffffffffffcd0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x400000, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000940)=""/139) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="29000000d862af76b2a869b400b71fd475cb51887ca25d8c35f07c33ef4ddf3f71dbb3444130823a8e217eaf550301da7dfa57f49ef3f62872587f85c7dee514fbf628da41dbc7595cd66ff2662647ee91d9864ab6266b2c4f6ff26de669101e8625824e6e2942469f7e4740c84a7bec8415c37f9daa090a2770e839afb666c8d380e1d87d954328378653398d7ee08418a1b28c9a659d28726b537666a90ee71d13c52c8b30bc2024c2b3e940cc5862798368bb032ee8d8327cc2bdf305dab596ea1241b397f83a57152d049c15ae7c38454ce03947378a216afe61d781bf725926c31eddd71317ba02f1"], &(0x7f0000000400)=0x2) r6 = gettid() prlimit64(r6, 0xa, 0x0, &(0x7f0000000540)) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = getpgid(0xffffffffffffffff) getpriority(0x3, r8) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_int(r5, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r8, 0x2, &(0x7f0000000280)={0x30, 0x7, 0x8, 0x7f}) r10 = dup(r4) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000000340)=""/120) setgid(r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f0000000000)) setresuid(0x0, r12, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r12}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x299) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="5a0000003f159d7ae6d2babe426bb8bd735151601351306f0ff19c481e90f5646ac681aa21c945bd7867c5801615a269793f0aef8127ed1e4f72f9f2ecdee5f2d19e907408ccd6164118b11f8b35a2bfda24a15215c0af56413ac7d0a000"], &(0x7f0000000140)=0x2) syz_emit_ethernet(0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="ff1b00000100020000000000000000e000fa9f33b94e215808907800000000000000686c0000000000006d8c46ef9a92948752ec363691f0ed600623c048de8ef9c407881651e419ef69ca07fe865e9a36061577db76e9a82104130c407dcf090a541c75e644fd8df4e69c1336a636256d9bb2044a6e26ceea58538cb1127b411058c6"], 0x0) 09:31:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000100), &(0x7f0000000000)) 09:31:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x3b, 's'}], 0x18}}], 0x1, 0x0) 09:31:44 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3}}) close(r2) close(r1) 09:31:44 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}]]}}}]}, 0x3c}}, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:31:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000100), &(0x7f0000000000)) 09:31:44 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0fc71c0fc71cf265266788d02e0fc72b0f01700abaf80c66b860a32d8a66efbafc0cb0fdee0f01cf66b9930000400f323e0f22e2bad104b09aee", 0x3a}], 0x1, 0x0, &(0x7f0000000340), 0x0) 09:31:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x4d, 0x3ffc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x357}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x20000000040002}, 0xfffffffffffffcd0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x400000, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000940)=""/139) r4 = socket(0xa, 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="29000000d862af76b2a869b400b71fd475cb51887ca25d8c35f07c33ef4ddf3f71dbb3444130823a8e217eaf550301da7dfa57f49ef3f62872587f85c7dee514fbf628da41dbc7595cd66ff2662647ee91d9864ab6266b2c4f6ff26de669101e8625824e6e2942469f7e4740c84a7bec8415c37f9daa090a2770e839afb666c8d380e1d87d954328378653398d7ee08418a1b28c9a659d28726b537666a90ee71d13c52c8b30bc2024c2b3e940cc5862798368bb032ee8d8327cc2bdf305dab596ea1241b397f83a57152d049c15ae7c38454ce03947378a216afe61d781bf725926c31eddd71317ba02f1"], &(0x7f0000000400)=0x2) r6 = gettid() prlimit64(r6, 0xa, 0x0, &(0x7f0000000540)) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = getpgid(0xffffffffffffffff) getpriority(0x3, r8) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_int(r5, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r8, 0x2, &(0x7f0000000280)={0x30, 0x7, 0x8, 0x7f}) r10 = dup(r4) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000000340)=""/120) setgid(r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f0000000000)) setresuid(0x0, r12, 0x0) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r12}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x299) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="5a0000003f159d7ae6d2babe426bb8bd735151601351306f0ff19c481e90f5646ac681aa21c945bd7867c5801615a269793f0aef8127ed1e4f72f9f2ecdee5f2d19e907408ccd6164118b11f8b35a2bfda24a15215c0af56413ac7d0a000"], &(0x7f0000000140)=0x2) syz_emit_ethernet(0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="ff1b00000100020000000000000000e000fa9f33b94e215808907800000000000000686c0000000000006d8c46ef9a92948752ec363691f0ed600623c048de8ef9c407881651e419ef69ca07fe865e9a36061577db76e9a82104130c407dcf090a541c75e644fd8df4e69c1336a636256d9bb2044a6e26ceea58538cb1127b411058c6"], 0x0) 09:31:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x3b, 's'}], 0x18}}], 0x1, 0x0) 09:31:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/111, 0x6f) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getdents64(r0, &(0x7f0000000200)=""/182, 0xb6) 09:31:44 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)=[{0x10, 0x0, 0x8}], 0x10}}], 0x2, 0x0) 09:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x55) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)) 09:31:44 executing program 4: socketpair(0x15, 0x805, 0x0, &(0x7f0000000100)) [ 108.324172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x61) read(r0, &(0x7f0000000000)=""/11, 0x55) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)) 09:31:44 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000380)={0x1, {&(0x7f0000000000)=""/24, 0x49c971581a2f941c, &(0x7f00000004c0)=""/101, 0xffffffffffffffff, 0x2}}, 0x68) 09:31:44 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 09:31:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x1c}}) close(r2) close(r1) 09:31:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)="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", 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x0) 09:31:44 executing program 4: socketpair(0x15, 0x805, 0x0, &(0x7f0000000100)) 09:31:44 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)=[{0x10, 0x0, 0x8}], 0x10}}], 0x2, 0x0) 09:31:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), 0x4) 09:31:44 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)=[{0x10, 0x0, 0x8}], 0x10}}], 0x2, 0x0) 09:31:44 executing program 4: socketpair(0x15, 0x805, 0x0, &(0x7f0000000100)) 09:31:44 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000380)={0x1, {&(0x7f0000000000)=""/24, 0x49c971581a2f941c, &(0x7f00000004c0)=""/101, 0xffffffffffffffff, 0x2}}, 0x68) 09:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), 0x4) 09:31:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "437c0b070f7e628cc9fce06672d57c03d6f9d80ff17757c04ebd46bb0b5dbf11a87bc5671e6b03036ea20df401300562bff62efef0"}, 0x40) 09:31:45 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000380)={0x1, {&(0x7f0000000000)=""/24, 0x49c971581a2f941c, &(0x7f00000004c0)=""/101, 0xffffffffffffffff, 0x2}}, 0x68) 09:31:45 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000080), 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000002040)=[{0x10, 0x0, 0x8}], 0x10}}], 0x2, 0x0) 09:31:45 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 09:31:45 executing program 4: socketpair(0x15, 0x805, 0x0, &(0x7f0000000100)) 09:31:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000240), &(0x7f0000000280)=0x3ea) 09:31:45 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) 09:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), 0x4) 09:31:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "437c0b070f7e628cc9fce06672d57c03d6f9d80ff17757c04ebd46bb0b5dbf11a87bc5671e6b03036ea20df401300562bff62efef0"}, 0x40) 09:31:45 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000380)={0x1, {&(0x7f0000000000)=""/24, 0x49c971581a2f941c, &(0x7f00000004c0)=""/101, 0xffffffffffffffff, 0x2}}, 0x68) 09:31:45 executing program 7: socketpair$inet(0x1e, 0x80002, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) 09:31:45 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) 09:31:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "437c0b070f7e628cc9fce06672d57c03d6f9d80ff17757c04ebd46bb0b5dbf11a87bc5671e6b03036ea20df401300562bff62efef0"}, 0x40) 09:31:45 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="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", 0x481, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000003c80)=@l2, 0x80, &(0x7f0000004380)}}], 0x1, 0x0, &(0x7f0000004540)={0x0, 0x989680}) 09:31:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000240), &(0x7f0000000280)=0x3ea) 09:31:45 executing program 7: socketpair$inet(0x1e, 0x80002, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) 09:31:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="df28f2af0f94583cbaf80c66b8327f3c8b66efbafc0ced2e0f01c80f6a02ba4000b001ee0f060f01c80f07", 0x2b}], 0x1, 0x0, &(0x7f0000000180), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="66baa100ed2e0f0f7f5796670f35660f3a0911060f06c4c2899db3d70c0000c4e3e90d40f50fb8010000000f01c1c4c2fd246433f30f22e1", 0x38}], 0x1, 0x60, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0x8090ae81, 0x703000) 09:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040), 0x4) 09:31:45 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 09:31:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "437c0b070f7e628cc9fce06672d57c03d6f9d80ff17757c04ebd46bb0b5dbf11a87bc5671e6b03036ea20df401300562bff62efef0"}, 0x40) 09:31:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffe7) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{r2, r3/1000+30000}, 0x2, 0x0, 0x9}, {{0x0, 0x7530}, 0xde32, 0xff, 0x3}], 0x30) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x8, 0xe000, 0x0, 0x1, 0x0, 0x5, 0x4, 0x0, 0x7, 0x26, 0x0, 0x2ec2, 0xfffffffffffffffd, 0x4, 0x297, 0x8, 0x3ff, 0x7, 0x4, 0xffff, 0x7ff, 0x66, 0xfffffffffffffffa, 0x400, 0x8, 0x921, 0x7fffffff, 0x0, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffff9, 0x4, 0x20, 0x9, 0x8000, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0xa000, 0x5, 0x5, 0x1, 0xf, 0x400, 0x6}, r4, 0x2, r0, 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000018c0)={0x0, 0x0, 0x80000000, 0x10000020}) 09:31:45 executing program 7: socketpair$inet(0x1e, 0x80002, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) 09:31:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000240), &(0x7f0000000280)=0x3ea) 09:31:45 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) 09:31:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 09:31:45 executing program 4: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000002c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8) r3 = getpid() fcntl$setown(r1, 0x8, r3) process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/20, 0x14}], 0x1, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/10, 0x7ffff000}], 0x10, 0x0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 09:31:45 executing program 7: socketpair$inet(0x1e, 0x80002, 0x0, &(0x7f0000000000)={0x0, 0x0}) shutdown(r0, 0x2) 09:31:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1000, 0x4) 09:31:45 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) 09:31:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000240), &(0x7f0000000280)=0x3ea) [ 109.148472] syz-executor1 (6969) used greatest stack depth: 15968 bytes left 09:31:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) fcntl$dupfd(r1, 0x0, r1) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000000100)) tkill(r0, 0x1000000000016) 09:31:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_flags}) 09:31:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1000, 0x4) 09:31:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x200000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 09:31:45 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[], 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 09:31:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 09:31:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 09:31:45 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_flags}) 09:31:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1000, 0x4) 09:31:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x200000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 09:31:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 09:31:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 09:31:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) fcntl$dupfd(r1, 0x0, r1) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000000100)) tkill(r0, 0x1000000000016) 09:31:46 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_flags}) 09:31:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1000, 0x4) 09:31:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x200000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 09:31:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 09:31:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 09:31:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 09:31:46 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @ifru_flags}) 09:31:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x200000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 09:31:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) ioctl$TCGETA(r1, 0x8004552d, &(0x7f0000000180)) 09:31:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 09:31:46 executing program 2: syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 09:31:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) fcntl$dupfd(r1, 0x0, r1) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000000100)) tkill(r0, 0x1000000000016) 09:31:46 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x8000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 09:31:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 09:31:46 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@resize_size={'resize'}}]}) [ 110.193416] hfs: invalid gid -1 [ 110.196777] hfs: unable to parse mount options 09:31:46 executing program 5: syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000040)) 09:31:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 09:31:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) [ 110.245214] hfs: invalid gid -1 [ 110.248620] hfs: unable to parse mount options 09:31:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) fcntl$dupfd(r1, 0x0, r1) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, &(0x7f0000000100)) tkill(r0, 0x1000000000016) 09:31:46 executing program 2: syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 09:31:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 09:31:46 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@resize_size={'resize'}}]}) [ 110.326099] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 110.333200] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 09:31:46 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x8000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 110.424395] attempt to access beyond end of device [ 110.429464] loop5: rw=12288, want=8200, limit=20 09:31:46 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff0700"], 0x9) write$binfmt_aout(r1, &(0x7f0000000640)={{0x108, 0xa3f, 0x3, 0x387}}, 0x20) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 09:31:46 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0xa, &(0x7f0000000040), 0xc) 09:31:46 executing program 0: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@resize_size={'resize'}}]}) [ 110.489517] hfs: invalid gid -1 [ 110.492914] hfs: unable to parse mount options [ 110.513793] kasan: CONFIG_KASAN_INLINE enabled [ 110.518513] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 110.525917] general protection fault: 0000 [#1] SMP KASAN [ 110.531469] CPU: 0 PID: 7095 Comm: syz-executor5 Not tainted 4.18.0-rc7-next-20180801+ #29 09:31:46 executing program 2: syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) [ 110.539964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.549346] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 110.552237] 9pnet: p9_errstr2errno: server reported unknown error ?‡ [ 110.554548] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 110.554558] RSP: 0018:ffff8801917c6be8 EFLAGS: 00010246 09:31:46 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff0700"], 0x9) write$binfmt_aout(r1, &(0x7f0000000640)={{0x108, 0xa3f, 0x3, 0x387}}, 0x20) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 09:31:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="dff51f558e41647945"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c]}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000340)=""/197, &(0x7f0000000440)=0xc5) 09:31:47 executing program 6: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0xa, &(0x7f0000000040), 0xc) [ 110.554572] RAX: dffffc0000000000 RBX: ffff8801917c6f30 RCX: ffffc9000923e000 [ 110.554579] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 110.554593] RBP: ffff8801917c6f58 R08: ffff8801c9c0a6c0 R09: fffff94000e41556 [ 110.571932] 9pnet: p9_errstr2errno: server reported unknown error ?‡ [ 110.580344] R10: fffff94000e41556 R11: ffffea000720aab7 R12: fffffffffffffffb [ 110.580354] R13: ffff8801917c6eb0 R14: 0000000000000003 R15: ffff880198d44180 [ 110.580368] FS: 00007f8ede166700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 110.580377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.580384] CR2: 00007fee24ce9518 CR3: 00000001ae248000 CR4: 00000000001406f0 [ 110.580398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.657510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.664770] Call Trace: [ 110.667352] ? get_checkpoint_version+0x620/0x620 [ 110.672185] ? save_stack+0xa9/0xd0 [ 110.675806] ? save_stack+0x43/0xd0 [ 110.679421] ? kasan_kmalloc+0xc4/0xe0 [ 110.683292] ? __kmalloc+0x14e/0x760 [ 110.686994] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 110.692170] ? f2fs_fill_super+0x2d42/0x8110 [ 110.696581] ? mount_bdev+0x314/0x3e0 [ 110.700373] ? f2fs_mount+0x3c/0x50 [ 110.703985] ? vfs_get_tree+0x1cb/0x5c0 [ 110.707953] ? do_mount+0x6f2/0x1e20 [ 110.711660] ? ksys_mount+0x12d/0x140 [ 110.715454] ? __x64_sys_mount+0xbe/0x150 [ 110.719596] ? do_syscall_64+0x1b9/0x820 [ 110.723644] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 110.728998] ? lock_acquire+0x1e4/0x540 [ 110.732960] ? cache_grow_end.part.37+0x95/0x170 [ 110.737703] ? lock_downgrade+0x8f0/0x8f0 [ 110.741850] ? kasan_check_read+0x11/0x20 [ 110.745984] ? do_raw_spin_unlock+0xa7/0x2f0 [ 110.750380] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 110.754952] ? kasan_check_write+0x14/0x20 [ 110.759174] ? do_raw_spin_lock+0xc1/0x200 [ 110.763400] ? kasan_unpoison_shadow+0x35/0x50 [ 110.767971] ? kasan_kmalloc+0xc4/0xe0 [ 110.771862] ? __kmalloc+0x315/0x760 [ 110.775580] ? f2fs_get_valid_checkpoint+0x390/0x1ec0 [ 110.780775] f2fs_get_valid_checkpoint+0x436/0x1ec0 [ 110.785784] ? _raw_spin_unlock+0x22/0x30 [ 110.789924] ? f2fs_recover_orphan_inodes+0x1180/0x1180 [ 110.795282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 110.800810] ? f2fs_iget+0x4f5/0x4fa0 [ 110.804605] ? lock_downgrade+0x8f0/0x8f0 [ 110.808751] ? lock_downgrade+0x8f0/0x8f0 [ 110.812898] ? f2fs_inode_chksum_set+0xf0/0xf0 [ 110.817478] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 110.822060] ? zap_class+0x740/0x740 [ 110.825776] ? trace_hardirqs_on+0xd/0x10 [ 110.829917] ? lock_acquire+0x1e4/0x540 [ 110.833880] ? debug_object_activate+0x41a/0x690 [ 110.838625] ? lock_downgrade+0x8f0/0x8f0 [ 110.842770] ? save_stack+0x43/0xd0 [ 110.846390] ? kasan_check_read+0x11/0x20 [ 110.850528] ? lock_acquire+0x1e4/0x540 [ 110.854491] ? __percpu_counter_init+0x2ad/0x370 [ 110.859239] ? lock_downgrade+0x8f0/0x8f0 [ 110.863377] ? kasan_check_read+0x11/0x20 [ 110.867512] ? do_raw_spin_unlock+0xa7/0x2f0 [ 110.871908] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 110.876474] ? kasan_check_write+0x14/0x20 [ 110.880696] ? do_raw_spin_lock+0xc1/0x200 [ 110.884923] ? trace_hardirqs_on+0xd/0x10 [ 110.889059] ? __percpu_counter_init+0x2b2/0x370 [ 110.893806] ? percpu_counter_cpu_dead+0x1c0/0x1c0 [ 110.898730] ? __init_waitqueue_head+0x9e/0x150 [ 110.903392] ? init_wait_entry+0x1c0/0x1c0 [ 110.907616] f2fs_fill_super+0x2d42/0x8110 [ 110.911839] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 110.916851] ? f2fs_commit_super+0x400/0x400 [ 110.921248] ? prealloc_shrinker+0x231/0x4a0 [ 110.925646] ? __init_waitqueue_head+0x9e/0x150 [ 110.930302] ? check_same_owner+0x340/0x340 [ 110.934612] ? __lockdep_init_map+0x105/0x590 [ 110.939104] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 110.944104] ? widen_string+0xe0/0x2e0 [ 110.947977] ? format_decode+0xaf0/0xaf0 [ 110.952023] ? string+0x225/0x2d0 [ 110.955462] ? widen_string+0x2e0/0x2e0 [ 110.959435] ? register_shrinker_prepared+0x15b/0x1c0 [ 110.964623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 110.970149] ? bdev_name.isra.8+0x1a1/0x1f0 [ 110.974459] ? pointer+0x157/0x990 [ 110.977985] ? netdev_bits+0xb0/0xb0 [ 110.981685] ? format_decode+0x1b1/0xaf0 [ 110.985738] ? set_precision+0xe0/0xe0 [ 110.989610] ? do_raw_spin_unlock+0xa7/0x2f0 [ 110.994020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 110.999544] ? vsnprintf+0x20d/0x1b60 [ 111.003335] ? vsprintf+0x40/0x40 [ 111.006779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 111.011788] ? set_blocksize+0x2c1/0x340 [ 111.015837] mount_bdev+0x314/0x3e0 [ 111.019450] ? mount_bdev+0x314/0x3e0 [ 111.023237] ? f2fs_commit_super+0x400/0x400 [ 111.027657] f2fs_mount+0x3c/0x50 [ 111.031109] ? kill_f2fs_super+0x330/0x330 [ 111.035346] legacy_get_tree+0x131/0x460 [ 111.039406] vfs_get_tree+0x1cb/0x5c0 [ 111.043202] ? vfs_set_fs_source+0x12c/0x180 [ 111.047609] do_mount+0x6f2/0x1e20 [ 111.051137] ? copy_mount_string+0x40/0x40 [ 111.055370] ? kasan_kmalloc+0xc4/0xe0 [ 111.059248] ? kmem_cache_alloc_trace+0x318/0x780 [ 111.064083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 111.069608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 111.075138] ? copy_mount_options+0x285/0x380 [ 111.079628] ksys_mount+0x12d/0x140 [ 111.083275] __x64_sys_mount+0xbe/0x150 [ 111.087244] do_syscall_64+0x1b9/0x820 [ 111.091121] ? finish_task_switch+0x1d3/0x870 [ 111.095606] ? syscall_return_slowpath+0x5e0/0x5e0 [ 111.100526] ? syscall_return_slowpath+0x31d/0x5e0 [ 111.105445] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 111.110452] ? __switch_to_asm+0x34/0x70 [ 111.114504] ? __switch_to_asm+0x34/0x70 [ 111.118555] ? __switch_to_asm+0x40/0x70 [ 111.122605] ? __switch_to_asm+0x34/0x70 [ 111.126654] ? __switch_to_asm+0x40/0x70 [ 111.130706] ? __switch_to_asm+0x34/0x70 [ 111.134759] ? __switch_to_asm+0x40/0x70 [ 111.138810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 111.143648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 111.148828] RIP: 0033:0x45943a [ 111.152014] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 111.170904] RSP: 002b:00007f8ede165a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 111.178602] RAX: ffffffffffffffda RBX: 00007f8ede165b30 RCX: 000000000045943a [ 111.185871] RDX: 00007f8ede165ad0 RSI: 00000000200000c0 RDI: 00007f8ede165af0 [ 111.193228] RBP: 00000000200000c0 R08: 00007f8ede165b30 R09: 00007f8ede165ad0 [ 111.200487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000013 [ 111.207756] R13: 0000000000000000 R14: 00000000004c8ea0 R15: 0000000000000000 [ 111.215018] Modules linked in: [ 111.218204] Dumping ftrace buffer: [ 111.221731] (ftrace buffer empty) [ 111.226752] ---[ end trace 53f654fe6eef227e ]--- [ 111.231607] RIP: 0010:validate_checkpoint+0x66d/0xec0 [ 111.236832] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00 [ 111.255763] RSP: 0018:ffff8801917c6be8 EFLAGS: 00010246 [ 111.261161] RAX: dffffc0000000000 RBX: ffff8801917c6f30 RCX: ffffc9000923e000 [ 111.268490] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005 [ 111.275788] RBP: ffff8801917c6f58 R08: ffff8801c9c0a6c0 R09: fffff94000e41556 [ 111.283074] R10: fffff94000e41556 R11: ffffea000720aab7 R12: fffffffffffffffb 09:31:47 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) mremap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) clock_gettime(0x0, &(0x7f00000029c0)) fallocate(r1, 0x0, 0x0, 0x5c0d) ioctl(r0, 0x1, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x8000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 111.290385] R13: ffff8801917c6eb0 R14: 0000000000000003 R15: ffff880198d44180 [ 111.297680] FS: 00007f8ede166700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 111.305940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.311859] CR2: 00007fee24ce9518 CR3: 00000001ae248000 CR4: 00000000001406f0 [ 111.319166] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.326461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 111.333759] Kernel panic - not syncing: Fatal exception [ 111.339568] Dumping ftrace buffer: [ 111.343094] (ftrace buffer empty) [ 111.346785] Kernel Offset: disabled [ 111.350394] Rebooting in 86400 seconds..