[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 23.252776] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.094807] random: sshd: uninitialized urandom read (32 bytes read) [ 28.383469] random: sshd: uninitialized urandom read (32 bytes read) [ 29.118920] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. [ 34.774629] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/20 22:19:38 fuzzer started [ 36.155300] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/20 22:19:40 dialing manager at 10.128.0.26:46093 2018/08/20 22:19:48 syscalls: 1 2018/08/20 22:19:48 code coverage: enabled 2018/08/20 22:19:48 comparison tracing: enabled 2018/08/20 22:19:48 setuid sandbox: enabled 2018/08/20 22:19:48 namespace sandbox: enabled 2018/08/20 22:19:48 fault injection: enabled 2018/08/20 22:19:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/20 22:19:48 net packed injection: enabled 2018/08/20 22:19:48 net device setup: enabled [ 62.605150] random: crng init done 22:23:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) recvmmsg(r1, &(0x7f0000002900)=[{{&(0x7f0000002400)=@nfc, 0x80, &(0x7f0000002880)}}], 0x1, 0x20, &(0x7f0000002980)={0x77359400}) 22:23:02 executing program 1: syz_emit_ethernet(0x32, &(0x7f000018f000)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 22:23:02 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x1000000}, 0x6) 22:23:02 executing program 4: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000b42d87402e5286dd6006f52600303a00fe8000000000000000000000000000ffff0200000000000000000000000000018300907800000000600a07ec00000000fe80"], &(0x7f00000016c0)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp6\x00') ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000280)=0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 22:23:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082) fchmod(r0, 0x8aa986104932b1a) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @random="d91035478a81"}) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0100000300000000ffffffffffffffe3000000000000000e01000000000000000000000000000100000001000000768e0000c155ad7dc6947c573e5a69244e76"], 0x41) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) 22:23:02 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 22:23:02 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x0) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 22:23:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 239.074852] IPVS: ftp: loaded support on port[0] = 21 [ 239.076886] IPVS: ftp: loaded support on port[0] = 21 [ 239.084802] IPVS: ftp: loaded support on port[0] = 21 [ 239.098788] IPVS: ftp: loaded support on port[0] = 21 [ 239.115484] IPVS: ftp: loaded support on port[0] = 21 [ 239.143849] IPVS: ftp: loaded support on port[0] = 21 [ 239.152531] IPVS: ftp: loaded support on port[0] = 21 [ 239.153327] IPVS: ftp: loaded support on port[0] = 21 [ 241.701995] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.708951] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.751710] device bridge_slave_0 entered promiscuous mode [ 241.761929] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.768366] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.776289] device bridge_slave_0 entered promiscuous mode [ 241.785985] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.792423] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.801723] device bridge_slave_0 entered promiscuous mode [ 241.816265] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.822665] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.844981] device bridge_slave_0 entered promiscuous mode [ 241.860317] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.866724] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.876336] device bridge_slave_0 entered promiscuous mode [ 241.885938] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.892369] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.912416] device bridge_slave_1 entered promiscuous mode [ 241.928037] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.934503] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.944158] device bridge_slave_0 entered promiscuous mode [ 241.955566] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.961978] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.978353] device bridge_slave_1 entered promiscuous mode [ 241.987870] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.994282] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.002261] device bridge_slave_1 entered promiscuous mode [ 242.011614] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.018019] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.033206] device bridge_slave_1 entered promiscuous mode [ 242.040506] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.046932] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.054537] device bridge_slave_0 entered promiscuous mode [ 242.064605] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.071084] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.081738] device bridge_slave_0 entered promiscuous mode [ 242.091517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.108273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.117990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.127018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.134481] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.140942] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.173556] device bridge_slave_1 entered promiscuous mode [ 242.199645] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.206129] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.228806] device bridge_slave_1 entered promiscuous mode [ 242.239522] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.245920] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.260477] device bridge_slave_1 entered promiscuous mode [ 242.269159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.280559] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.286981] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.307311] device bridge_slave_1 entered promiscuous mode [ 242.323113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.333029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.340725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.349582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.358481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.373295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.463926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.499822] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.521820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.549727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.623566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.756988] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.811476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.834447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.854517] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.927476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.987575] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.997367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.006967] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.018869] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.040427] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.066638] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.086587] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 243.109357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.116320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.156376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.163722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.184103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.191133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.202932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.210904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.220895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.229112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.243512] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.255654] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 243.272275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.280579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.318343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.325362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.354863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.361778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.381896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.389541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.424500] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.434336] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.457801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.484145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.507015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.549156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.564313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.571423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.582578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.589490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.599744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.635665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.690276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.697438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.740379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.747909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.808386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.844647] team0: Port device team_slave_0 added [ 243.900860] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.910765] team0: Port device team_slave_0 added [ 243.949891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.963301] team0: Port device team_slave_0 added [ 243.982653] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.996759] team0: Port device team_slave_0 added [ 244.013806] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.028093] team0: Port device team_slave_1 added [ 244.039219] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.048909] team0: Port device team_slave_0 added [ 244.066293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.075490] team0: Port device team_slave_1 added [ 244.093649] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.110419] team0: Port device team_slave_1 added [ 244.140112] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.151132] team0: Port device team_slave_1 added [ 244.173028] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.190536] team0: Port device team_slave_0 added [ 244.207233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.214440] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.239577] team0: Port device team_slave_1 added [ 244.254546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.262248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.282079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.301566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.318759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.329745] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.336972] team0: Port device team_slave_0 added [ 244.344741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.354030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.365089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 244.375972] team0: Port device team_slave_0 added [ 244.395135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.419818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.434414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.442377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.452556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.459857] team0: Port device team_slave_1 added [ 244.465649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.472585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.488496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.504917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.515357] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.529765] team0: Port device team_slave_1 added [ 244.535462] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.545723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.552942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.570737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.587747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.601694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.609819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.623603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.632417] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 244.639689] team0: Port device team_slave_1 added [ 244.649343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.662511] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.672755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.681659] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.690205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.700747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.736566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.751540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.765393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.773409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.781385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.789219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.799167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.806516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.813862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.822243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.841786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.856480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.867314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 244.877208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.884969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.894802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.902828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.927891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.944752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.961686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.975392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.987307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.994751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.002650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.010796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 245.017805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.026716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.035220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 245.042361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.057323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.067121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.084808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.094826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.103844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.113496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.127502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.140508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.154279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.169991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.188310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.196288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.204297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.212844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.219978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.227925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.239828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 245.254204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.261519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.272973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.299758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.321936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.339135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.348185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.362941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.374800] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.383442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.406815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.430361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 245.440883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.466434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.486379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.521353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.536670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.575574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.584570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.612704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.819438] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.825960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.832952] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.839358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.862742] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 246.869426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.911505] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.917936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.924650] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.931093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.978915] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 246.991083] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.997486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.004222] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.010623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.028787] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.041463] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.047871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.054575] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.060983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.108194] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.122934] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.129341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.136087] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.142490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.155671] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.177987] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.184414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.191156] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.197563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.212828] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.231120] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.237529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.244235] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.250650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.314662] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.349671] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.356107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.362830] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.369232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.423673] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 247.898248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.916609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.949612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.974578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.983001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.990799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.998959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.820431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.039972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.067161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.090971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.139646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.399211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.428422] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.455087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.520356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.552197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.607707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.701732] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.753942] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 253.998163] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.009124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.025358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.054108] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.069982] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.083670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 254.117168] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.123425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.134652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.231996] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.238742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.250966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.312659] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.319323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.331706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.370228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.385133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.399873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.644927] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.660299] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.668523] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.674852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.713975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.737604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.744779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.765108] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.798648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 254.812308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.832716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.892283] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.934747] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.018367] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.231001] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.321467] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.410283] 8021q: adding VLAN 0 to HW filter on device team0 22:23:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:21 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000004c0), 0x1000) 22:23:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xca, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) 22:23:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0xf000}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in6}, {0x0, 0x0, 0x0, 0x200}, {}, 0x0, 0x6e6bb2}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, 0xe8) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) dup2(r2, r1) 22:23:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, &(0x7f0000000d40)) [ 258.524561] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 22:23:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) shmctl$SHM_LOCK(0x0, 0xb) 22:23:22 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x0, 0x3}) 22:23:22 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x0, 0x2}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 22:23:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d00)=@filter={'filter\x00', 0xe, 0x2, 0x138, [0x0, 0x20001940, 0x20001b48, 0x20001b78], 0x0, &(0x7f0000001900), &(0x7f0000001940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'bridge0\x00', 'team_slave_0\x00', 'yam0\x00', 'veth0_to_team\x00', @dev, [], @random="5f2d61e1e479", [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x1b0) [ 258.924172] kernel msg: ebtables bug: please report to author: Valid hook without chain 22:23:22 executing program 4: 22:23:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) shmctl$SHM_LOCK(0x0, 0xb) 22:23:22 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 22:23:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x300, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r4 = dup2(r0, r2) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) tkill(r1, 0x1000000000016) 22:23:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x100082) fchmod(r0, 0x8aa986104932b1a) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bridge0\x00', @random="d91035478a81"}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007) 22:23:22 executing program 5: 22:23:22 executing program 0: 22:23:22 executing program 5: 22:23:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$void(0x4000000000000020) shmctl$SHM_LOCK(0x0, 0xb) 22:23:22 executing program 6: 22:23:22 executing program 4: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x6003fffffe) 22:23:22 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) socket$unix(0x1, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6, 0x0) 22:23:22 executing program 5: socket(0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ptmx\x00', 0x103002, 0x0) write$P9_RLCREATE(r0, &(0x7f0000001740)={0x18}, 0x18) 22:23:22 executing program 6: 22:23:22 executing program 2: 22:23:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x300, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r4 = dup2(r0, r2) getpeername$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) tkill(r1, 0x1000000000016) 22:23:22 executing program 0: 22:23:22 executing program 4: 22:23:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:22 executing program 1: 22:23:22 executing program 6: 22:23:22 executing program 5: 22:23:23 executing program 4: 22:23:23 executing program 1: 22:23:23 executing program 5: 22:23:23 executing program 0: 22:23:23 executing program 6: 22:23:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:23 executing program 2: 22:23:23 executing program 1: 22:23:23 executing program 4: 22:23:23 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) read$eventfd(r0, &(0x7f0000000080), 0x8) 22:23:23 executing program 5: 22:23:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 22:23:23 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x37, 0x6, 0x0, {0x0, 0x0, 0xe, 0x0, 'oom_score_adj\x00'}}, 0x37) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000200)="73797374656d706f7369785f61636c5f616363657373c000", 0x0) 22:23:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x200, 0x101006) 22:23:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 22:23:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5406, 0x0) [ 260.157191] binder: 6702:6705 transaction failed 29189/-22, size 0-0 line 2855 22:23:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000100)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 22:23:23 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 260.208654] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 260.237626] binder: 6702:6705 transaction failed 29189/-22, size 0-0 line 2855 [ 260.248508] binder: undelivered TRANSACTION_ERROR: 29189 22:23:23 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_open(&(0x7f0000000080)="2ee12b5c70726f632362646576707070314000", 0x0, 0x0, &(0x7f00000000c0)) 22:23:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r1, 0x0, 0x1, 0x4}}, 0x20) [ 260.277190] binder: undelivered TRANSACTION_ERROR: 29189 22:23:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x200, 0x101006) 22:23:23 executing program 6: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)) timerfd_create(0x0, 0x0) r0 = inotify_init1(0x0) close(r0) creat(&(0x7f00000011c0)='./file0\x00', 0x0) write$P9_RCREATE(r0, &(0x7f0000000100)={0x18}, 0x18) 22:23:23 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 22:23:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000100)="2f0409004bddd9de91be10eebf000ee9a90f798058439ed554af1f02acc7edbcd7a071fb35331ce39c5a0000000000000000080000000000000000000aaad955a3c93f9d248b46a7c99eb35b406bf918ff01739e56187b2db8f1074424745271062042fb3808186e0a837132f9108c583073a4ca94b3e4e58717fe2b659fa3903c7b73bd66b83f5ecc0a7361257896883f1b43ff4ec0a1e336b92f705461af0b60825a7834ffd0a7339d85c51b8db7b4c0e4f40953dd2d9f2110f04c9fdf8489eaa996", 0xc3, 0x0) 22:23:23 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:23 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x10, &(0x7f0000810000)={0x0, 0x2}, 0x8) 22:23:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000012d80)=[{{&(0x7f000000f2c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f000000f4c0), 0x0, &(0x7f000000f500)=""/172, 0xac}}], 0x40000000000011f, 0x0, 0x0) 22:23:23 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:23:23 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x200, 0x101006) 22:23:24 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x7fff) creat(&(0x7f0000000380)='./bus\x00', 0x0) 22:23:24 executing program 6: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000000c0)}, 0x0) 22:23:24 executing program 5: 22:23:24 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 260.769265] sctp: [Deprecated]: syz-executor7 (pid 6759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.769265] Use struct sctp_sack_info instead 22:23:24 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x200, 0x101006) [ 260.802459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:23:24 executing program 0: 22:23:24 executing program 5: 22:23:24 executing program 0: 22:23:24 executing program 4: 22:23:24 executing program 6: 22:23:24 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:24 executing program 7: 22:23:24 executing program 2: 22:23:24 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') close(r0) 22:23:24 executing program 0: 22:23:24 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 22:23:24 executing program 4: 22:23:24 executing program 6: 22:23:24 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 261.459688] sctp: [Deprecated]: syz-executor7 (pid 6814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.459688] Use struct sctp_sack_info instead 22:23:24 executing program 4: 22:23:24 executing program 2: 22:23:24 executing program 6: 22:23:24 executing program 0: 22:23:24 executing program 5: 22:23:24 executing program 7: 22:23:25 executing program 4: 22:23:25 executing program 2: 22:23:25 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:25 executing program 6: 22:23:25 executing program 5: 22:23:25 executing program 0: 22:23:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/116, 0x75}, {&(0x7f0000000500)=""/245, 0x19b}, {&(0x7f00000002c0)=""/22, 0x13}, {&(0x7f00000013c0)=""/4096, 0x1350}], 0x4, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 22:23:25 executing program 7: 22:23:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 22:23:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha3-224-generic,cbc-des3_ede-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) 22:23:25 executing program 6: open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)="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", 0x0, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/150, 0x96, 0x0, &(0x7f0000000180)=@abs, 0x6e) 22:23:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) 22:23:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet(r2, &(0x7f00000000c0), 0x366, 0xe00, 0x0, 0x4e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') recvmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=""/216, 0xd8}}], 0x1, 0x20, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000004e00)={@local, @local}, &(0x7f0000004e40)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004f80)={0x0, @multicast1, @multicast1}, &(0x7f0000004fc0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000005080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000050c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f000000f9c0)={@loopback, @multicast2}, &(0x7f000000fa00)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000fa40)={'vcan0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000012880)=[{{&(0x7f000000fa80)=@alg, 0x80, &(0x7f0000010c00)=[{&(0x7f000000fb00)=""/242, 0xf2}, {&(0x7f000000fc00)=""/4096, 0x1000}], 0x2, &(0x7f0000010c40)=""/46, 0x2e, 0xfff}, 0x7fff}, {{&(0x7f0000012280)=@alg, 0x80, &(0x7f0000012380)=[{&(0x7f0000012300)=""/67, 0x43}], 0x1, &(0x7f00000123c0)=""/142, 0x8e}}, {{&(0x7f0000012480)=@ax25, 0x80, &(0x7f0000012540)=[{&(0x7f0000012500)=""/47, 0x2f}], 0x1, &(0x7f0000012580)=""/149, 0x95, 0x100}, 0x8001}], 0x3, 0x1, &(0x7f00000129c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000001a780)={{{@in=@loopback, @in=@rand_addr}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f000001a880)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000001aa00)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f000001ab00)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000001ab40)={@multicast1, @multicast2}, &(0x7f000001ab80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000001abc0)={{{@in6=@mcast2, @in6=@mcast2}}, {{}, 0x0, @in=@local}}, &(0x7f0000000200)=0xffffffffffffff8f) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000001ad00)={0x0, @multicast2}, &(0x7f0000000180)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f000001adc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000001ae00)=0x14, 0x80000) 22:23:25 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:25 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000800080049, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") sendfile(r0, r1, &(0x7f0000000140), 0x2000000000008402) 22:23:25 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000007c0)=""/160, 0xa0}}], 0x1, 0x0, &(0x7f00000083c0)={0x77359400}) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 262.435042] bridge0: port 1(bridge_slave_0) entered disabled state 22:23:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000440)=@allocspi={0xf8, 0x16, 0x31d, 0x0, 0x0, {{{@in6, @in6=@ipv4={[], [], @multicast2}}, {@in6, 0x0, 0x33}, @in, {}, {}, {}, 0x70bd26}, 0x0, 0xfff}}, 0xf8}}, 0x0) 22:23:25 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000001a00fb034d564b00000000012b61b0ef"]) 22:23:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10cd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 22:23:25 executing program 7: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) r1 = epoll_create(0xbf) dup3(r0, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x95}, [{}]}, 0x78) 22:23:26 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/116, 0x75}, {&(0x7f0000000500)=""/245, 0x19b}, {&(0x7f00000002c0)=""/22, 0x13}, {&(0x7f00000013c0)=""/4096, 0x1350}], 0x4, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 22:23:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10cd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2, 0xe8030000}, [@ldst={0x7, 0x18d1fb, 0x74, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 22:23:26 executing program 0: getitimer(0x0, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000540)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000880), 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) futex(&(0x7f0000000400), 0x0, 0x2, &(0x7f0000000440)={0x77359400}, &(0x7f00000005c0), 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6100000000000000000000002f000000000100000000000000000000000000000300000000000000000000000000000000000062738d2722ce30398ba4546aa3000000000000000000000000"], 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[], 0xa37cf698) sendmsg(r2, &(0x7f0000000840)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000780)="fa08a5a81220539e81e0a4060357e713e800724b30e55d2b74278b1a69ae5a5dab7bf2270cb52a950bdbdd81ce70193a99558678039e6857b7804833293ebab0dd13afeb86ffb33a7507a915b720badd64ee153d3627c8b6536fb7f4d24188c53ae54666bec084042169e3171063005e3abb3f12c02fd994718bda1fa51c3ddef8b149ad36795be9aff58f835aa2a5c7d34025f25f7d18d964055254314af7", 0x9f}], 0x1}, 0x40040) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000480), 0x4) 22:23:26 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:26 executing program 7: dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:23:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) 22:23:26 executing program 7: 22:23:26 executing program 5: 22:23:26 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r1, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000007c0)=""/160, 0xa0}}], 0x1, 0x0, &(0x7f00000083c0)={0x77359400}) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 22:23:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:26 executing program 7: 22:23:26 executing program 5: 22:23:26 executing program 7: r0 = inotify_init1(0x800) readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000e40)=""/217, 0xd9}], 0x1) 22:23:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:27 executing program 1: 22:23:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)='w', 0x1}], 0x1, &(0x7f00000003c0)}, 0x0) 22:23:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") readv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 22:23:27 executing program 7: r0 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 22:23:27 executing program 1: 22:23:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:27 executing program 5: 22:23:27 executing program 6: 22:23:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:27 executing program 0: 22:23:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[]) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000240)=0x74, 0x316) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) 22:23:27 executing program 7: 22:23:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:27 executing program 5: 22:23:27 executing program 1: 22:23:27 executing program 0: 22:23:27 executing program 7: 22:23:27 executing program 6: 22:23:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:27 executing program 5: 22:23:27 executing program 7: 22:23:27 executing program 1: 22:23:27 executing program 0: 22:23:27 executing program 6: 22:23:28 executing program 5: 22:23:28 executing program 2: 22:23:28 executing program 7: 22:23:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:28 executing program 0: 22:23:28 executing program 1: 22:23:28 executing program 6: 22:23:28 executing program 5: 22:23:28 executing program 6: 22:23:28 executing program 5: 22:23:28 executing program 1: 22:23:28 executing program 0: 22:23:28 executing program 7: 22:23:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:28 executing program 5: 22:23:28 executing program 2: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x8a, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000200)=""/138}, &(0x7f0000000340)=0x78) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80740315fa3715070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 22:23:28 executing program 6: socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x400) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 22:23:28 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="02005500000001000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 22:23:28 executing program 0: 22:23:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:28 executing program 7: 22:23:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:28 executing program 5: [ 265.621283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 265.669356] loop1: p1[EZD] [ 265.672522] loop1: partition table partially beyond EOD, truncated 22:23:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:29 executing program 0: [ 265.715944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 265.721796] loop1: p1 start 1 is beyond EOD, truncated 22:23:29 executing program 7: 22:23:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:29 executing program 5: 22:23:29 executing program 6: [ 265.872219] loop1: p1[EZD] [ 265.875438] loop1: partition table partially beyond EOD, truncated 22:23:29 executing program 2: 22:23:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) 22:23:29 executing program 0: [ 265.934765] loop1: p1 start 1 is beyond EOD, truncated 22:23:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:29 executing program 1: 22:23:29 executing program 7: 22:23:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:29 executing program 6: 22:23:29 executing program 2: 22:23:29 executing program 0: 22:23:29 executing program 5: 22:23:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:29 executing program 6: 22:23:29 executing program 7: 22:23:29 executing program 5: 22:23:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:29 executing program 2: 22:23:29 executing program 1: 22:23:29 executing program 0: 22:23:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:29 executing program 7: 22:23:29 executing program 6: 22:23:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:29 executing program 2: 22:23:29 executing program 5: 22:23:29 executing program 0: 22:23:29 executing program 1: 22:23:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:29 executing program 7: 22:23:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:29 executing program 6: 22:23:30 executing program 5: 22:23:30 executing program 0: 22:23:30 executing program 2: 22:23:30 executing program 1: 22:23:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:30 executing program 7: 22:23:30 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) signalfd(r0, &(0x7f0000000040), 0x8) 22:23:30 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fc"], 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000810000)={0x0, 0x2}, 0x8) 22:23:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open$dir(&(0x7f0000000040)='./bus\x00', 0x40080, 0x14) fcntl$setstatus(r0, 0x4, 0x8d264d94b88cc547) ftruncate(r0, 0x8008200) write$evdev(r1, &(0x7f00000004c0)=[{{0x0, 0x2710}, 0x1, 0x9, 0x1}, {{0x0, 0x2710}, 0x1f, 0x2, 0x2}, {{}, 0x3, 0x7fff, 0x9}, {{0x0, 0x2710}, 0x11, 0x0, 0x1}], 0xfffffffffffffdca) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f00000001c0)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) lstat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)) fstat(0xffffffffffffffff, &(0x7f00000003c0)) mknodat(r0, &(0x7f0000000080)='./bus\x00', 0x11, 0x52c) sendmmsg(r1, &(0x7f000000a880)=[{{0x0, 0x0, &(0x7f0000007c00)=[{&(0x7f0000007b00)}], 0x1, 0x0, 0x0, 0x800}, 0x1000}, {{&(0x7f0000008fc0)=@ethernet={0x7, @link_local}, 0x80, &(0x7f000000a500)=[{&(0x7f000000a440)="afe8045c5caef3c18f8aeca6ea4cba5c5a4ba0442834e1ddf2cdbd4a803a89f9", 0x20}], 0x1, &(0x7f000000a580), 0x0, 0x24000040}, 0x1}], 0x2, 0x850) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='./bus\x00') vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="01add76e7837ad0e7a8a8051d945a7e58b152916ae76b4d7556a8a45ce949efbe3", 0x21}], 0x1, 0xb) 22:23:30 executing program 7: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa283000a200a0009000100041d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 22:23:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmsg$nl_generic(r0, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000010006908000000000000000003000000180001000000040000000000010000000000000000000000"], 0x1}}, 0x0) 22:23:30 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e627d741b939021}) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0xac, 0xc000) write$cgroup_pid(r0, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r0) io_setup(0xffffffff, &(0x7f0000000000)) 22:23:30 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000080)={0x3, 0x8, 0x1, @random="911d8ad31687", 'bond0\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xa05901) 22:23:30 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000004c0)={{0x2, 0x2, 0x0, 0x3, 0x7fffffff}, 0x100}) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, 0x0, 0x7fff, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f00000002c0)={@rand_addr, @broadcast, @local}, &(0x7f0000000400)=0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000300)={0x0, 'ip6_vti0\x00'}, 0x18) keyctl$link(0x8, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000340)) write$P9_RXATTRWALK(r3, &(0x7f00000003c0)={0xf, 0x1f, 0x0, 0x6}, 0xf) ftruncate(r4, 0x80080) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x470, 0x6, 0x6, 0x8000, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x2, 0x9}, &(0x7f0000000280)=0x8) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 22:23:30 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x338) 22:23:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:30 executing program 0: ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1f) [ 267.187972] mmap: syz-executor1 (7257) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 22:23:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x5000)=nil, 0x5000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) close(r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioprio_set$pid(0x1, r3, 0xfffffffffffffffd) 22:23:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 267.305952] hrtimer: interrupt took 58433 ns 22:23:30 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'\x00', 0x4000}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)={0x0, {{0xa, 0x0, 0x0, @local, 0x1000}}}, 0x90) 22:23:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000300)=0xdf53, 0x4) r2 = socket(0x2000000011, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x20008100, 0x5, @local}, 0x1c) getsockopt(r2, 0x9, 0x5, &(0x7f00000000c0)=""/229, &(0x7f0000000000)=0xe5) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r3, 0x0, 0xffffffff}, &(0x7f0000000240)=0xc) 22:23:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x1, 0x1, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x7, 0x4, 0xfff, 0x101, 0x1, r0, 0x2}, 0x2c) r3 = dup2(r1, r2) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) dup2(r5, r4) 22:23:31 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000140)={@local, @remote, @loopback}, &(0x7f00000001c0)=0xc) r5 = accept$alg(r2, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$P9_RWRITE(r6, &(0x7f0000000440)={0xb, 0x77, 0x1, 0x9}, 0xb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xeff0, @remote, 0x1}, {0xa, 0x4e22, 0x7, @mcast1, 0x6}, r7, 0x2}}, 0x48) recvmsg(r5, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000009f000)=""/87, 0x2009f057}], 0x1, &(0x7f0000590000)}, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x80000, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001a00)={0x0, @remote, @rand_addr}, &(0x7f0000001a40)=0xc) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001a80)={r9, @rand_addr, @local}, 0xc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x80000, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 22:23:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fstat(r0, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'sit0\x00', 0x101}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x8000}) 22:23:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x80000, 0x8) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) fcntl$getown(r0, 0x9) 22:23:31 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r1 = socket(0x17, 0x800, 0xfff) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffffffffffc}, 0xfffffffffffffc9f) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fadvise64(r0, 0x0, 0x1ff, 0x7) sendto$inet(r2, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$inet6(0xa, 0x80800, 0x1f) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000003c0)={'lo\x00', {0x2, 0x4e20, @loopback}}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) getpgrp(0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)=""/97, &(0x7f00000002c0)=0x61) stat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000740)) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000002600)}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) [ 267.947732] sit0: mtu less than device minimum 22:23:31 executing program 6: r0 = socket$inet6(0xa, 0x201000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) r2 = fcntl$dupfd(r1, 0xffffffffffffffff, r1) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000532000)=0x19) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x8000, 0x8eac, 0x4, 0x2, 0x0, 0x0, 0x8, 0xffffffffffffff04, 0x5, 0x7, 0x6, 0x4}) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/33) 22:23:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:31 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x82000, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000400)=""/195, &(0x7f0000000200)=0xc3) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000140), &(0x7f0000000280), 0x240, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff7d, 0x0) [ 268.032234] sit0: mtu less than device minimum 22:23:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:31 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x1, 0x1, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x7, 0x4, 0xfff, 0x101, 0x1, r0, 0x2}, 0x2c) r3 = dup2(r1, r2) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @multicast2}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) dup2(r5, r4) 22:23:31 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="b2", 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000001cc0), 0x0, 0x10102, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x14, 0x42, 0x201}, 0x14}}, 0x0) 22:23:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:31 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) bind$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x6, 0x100000000, 0xfffffffffffffffb, "4ca6b6b49dedcecfc2cec0bc180d1a1a4df25df6d101ef29f89cd91530b5f3c7965afa7247458d7569c0461648ecf4daa90aae9883b4688b9c872971b6bb6a", 0x6}, 0x60) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000000280)=""/244, &(0x7f0000000140)=0xf4) timerfd_create(0x2, 0x80800) 22:23:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:31 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)=""/29, &(0x7f0000000100)=0x1d) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 22:23:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x3f6541f3) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000002dc0)='./file0\x00', 0x3, 0x8, &(0x7f0000001540)=[{&(0x7f00000000c0)="11a8dfb8154e5027916447534e15ea27da09908585b8e78ca97dedb9518a00a7da3557c86e1245116c25b90183fcafa5cdfb0db5fbfbc7f07cc1055b42f9b5dca9918de8689d49abee9fa759a68b9d852b1ae415e26e0162343600410c663ed2a048ec", 0x63, 0x4800000000000}, {&(0x7f0000000140)="b7d60a48d0701518e1e6f9eee66c144aca216bdf5e471e26d42494186be343fe0d62f5b6ffa56b6672", 0x29, 0x101}, {&(0x7f0000000180)="a28d10dc1049b822344d4edc488d587a2b8045c3fbd67c3ce3acf37711052c1717c027e54883a80ed8d3b5c66f8561d85242bb2f7b87218739f6c250a597460a41c50bdea1c21bd64e28aef9c91fc270f44f80f2187e0f493a0114b5df7a8489ed3a1152d4b390896381505b197d1ebff1436ddb9b5777122ec145776edb71975f9a74a45acb661d2bf33db54e77a87c84d105828f8a58b8957a644155ef8076a21b252efd755d1985b583e77db45845109a9a49ad1f8c21ef21a182f03f5c640a3a8c5b136ed0e07a601dbfc3fe5f9a104cefccc56e9004b49379573d0505936316a71028308270a34347f6", 0xec, 0x1}, {&(0x7f0000000280)="0a7fedf1ede77eef0b8b8e89035e1b9faf4d46834413d3a8429561e2ba1dc904ba73904ebdd82989a307928cd2c7bf2f19fa4209b1a5518a2ebd55059e7e49c484071f05352dfaf0807ef9132e99e3e32e1eb0ce7c8b2e56c213493fca32e1b6721fafd2ee51904e2cc38428bb2219afb465988a07dfe10d0f97f0", 0x7b, 0x4}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000001300)="ede5550f6653a780e017e603244392360a795805ca581a48450ea50557d3032521da193598a3dd8829ab8be922e85940fc31540b237f7a8e498d5a178cd8f4a9bfc75db02439b8fae489fd5a8014ee1448acf86542a531b4283aee43358612bf4695bb5c3907571352596b3e4f96ed964fb98d5bd47c70b5bc87ff187dd3359c82bff562ad7da04cd096298acd2648f3ae719ababa1f12e09f1e2e99cd5fa4666e3d9f069650bd7f5afc85c68e49c3c97213", 0xb2, 0x8}, {&(0x7f0000002fc0)="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", 0x1ae, 0x2}, {&(0x7f00000014c0)="34c53dd30900000000000000ef7c4aec428f39e95b17f03c884a77b49288fc00bd89edd103027e6e4ba77427c492cf1b080f568e02ea18dad5148951b33157302997e95ee45e11b7a1f9e90650e14a79b78e4ade940350d529bc848880986bf76f947d7fa3c00433", 0x68, 0x4}], 0x1000, &(0x7f0000001600)={[{@barrier_none='barrier=none'}, {@jqfmt_vfsold='jqfmt=vfsold'}]}) socketpair$inet(0x2, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x320, 0xc0, 0x1a8, 0x1a8, 0x0, 0x1a8, 0x288, 0x288, 0x288, 0x288, 0x288, 0x4, &(0x7f0000000480), {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @empty, 0xffffffff, 0xffffffff, 'team0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001640)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001700)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000cf7ffc754f73872f000000480600006804000030020000200300001801000068040000780500007805000078050000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="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"], @ANYBLOB="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"], 0x6a8) 22:23:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:31 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x100000001, 0x7e5, @local, 0x9}], 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r1 = open$dir(&(0x7f0000000040)='.\x00', 0xfffffffffffffffc, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) futimesat(r1, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e21, @multicast1}}, 0x7, 0x1f, 0xffff, "e6be9d5e980d7f22ef85e48c42847bdc4a10ee49c463fd8543a147f6a3d3f9bf38df60781c57f44fe53f03207dcf44c46db13a4dbbde4451895a8b36e465be89ab900875173fc594e8ed524805f76d89"}, 0xd8) 22:23:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:31 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) [ 268.700949] syz-executor0 (7337) used greatest stack depth: 14360 bytes left 22:23:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xff, 0xc73e7460aabeef58) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x2, 0x7f, 0x1ff, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x8b]}) 22:23:32 executing program 7: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x3680, 0x2000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000680)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000380)=0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) ptrace$peek(0x2, r2, &(0x7f00000004c0)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000540)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000d08bf9518cd3b6db0000000000000000000000000000000007002e36666d6c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) umount2(&(0x7f0000000500)='./file0\x00', 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) 22:23:32 executing program 6: socketpair(0x1, 0x80003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000040)="256472b0eeb708339cf725b9b2c4bc20e22389fa72246e8f9706f877ffa1c85cd913303af9eeaece2cddeee3b37f47") eventfd2(0x8, 0x80800) 22:23:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a76"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x82000, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000400)=""/195, &(0x7f0000000200)=0xc3) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000140), &(0x7f0000000280), 0x240, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff7d, 0x0) 22:23:32 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x82000, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000400)=""/195, &(0x7f0000000200)=0xc3) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000140), &(0x7f0000000280), 0x240, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff7d, 0x0) 22:23:32 executing program 1: r0 = socket(0x10, 0x20000000000003, 0x0) write(r0, &(0x7f0000000000)="a659c6c386fa7e3d003fe11ad34f10f721f7ebd900000000003c02f7b8fad739a55c", 0x22) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x2, 0x7, 0xd7d, 0x0}, &(0x7f0000000300)=0x10) r2 = dup3(r0, r0, 0x80000) timerfd_settime(r2, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) write$UHID_CREATE(r2, &(0x7f0000000480)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/148, 0x94, 0x81, 0x77d, 0xffffffffffff0001, 0x10001, 0x9}, 0x120) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x4}, 0x8) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'syzkaller0\x00'}}) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@ax25, 0xffffffffffffff91, &(0x7f0000000180), 0x235, &(0x7f0000000340)=""/198, 0xc6}, 0x10001) [ 268.778507] syz-executor0 (7417) used greatest stack depth: 11992 bytes left 22:23:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a76"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:32 executing program 1: r0 = memfd_create(&(0x7f0000000080)="7b10", 0x3) fcntl$addseals(r0, 0x409, 0x1000000000009) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="7f801df3a43a69dd80713ba317893f304db9f3f6f587a663d5f2aa2f27e807d0adb65f8466f3928e9dff192bf08bf905186c311952bee5880823d3c1c0078908f2a3593b830c5677dfea65675fad5f97463b9fbd1d67a7aa0dc8034084718a1bda811de1c65102402137584acfe9ee63ab139bac469c9cb69118575325a1e874755673f4d92a019cf820891095ef90082d9796073df0f1719a6e7ac3fd0178c5a0d77e4349ef1ee2") io_setup(0x404, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="7f", 0x1}]) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 22:23:32 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04ebf20e4c2f24ee2f85049dc9ee5f15261267"]) 22:23:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000180)) r2 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x82000, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f0000000400)=""/195, &(0x7f0000000200)=0xc3) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000), 0x0, 0x0, r2) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00), &(0x7f00000000c0)="7f", 0x1, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x2c) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000140), &(0x7f0000000280), 0x240, r0) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff7d, 0x0) 22:23:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) pread64(r0, &(0x7f0000000000)=""/167, 0xa7, 0x0) r1 = msgget(0x3, 0x10) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x200800, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x800}}, {@common=@dfltuid={'dfltuid', 0x3d, r2}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffd}}, {@timeout={'timeout', 0x3d, 0x401}}]}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r6 = fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000300)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x5, r2, r3, r4, r5, 0x99, 0xffffffff80000001}, 0x9, 0x8dd, 0x400, 0x5, 0xc6, 0x8000, r6, r7}) sendmsg$inet_sctp(r0, &(0x7f0000001880)={&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x0, @empty, 0x1ff}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000100)="93", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="300000000000ff0084000017070001000000000000002700000000008ea804a455c16df7e430bc000000000000000000e1ff0000000000", @ANYRES32=0x0], 0x30}, 0x0) 22:23:32 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 269.049302] XFS (loop6): unknown mount option [ëòL/$î/…Éî_&g]. 22:23:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a76"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:32 executing program 1: mkdir(&(0x7f0000000b80)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0xc}}]}}) 22:23:32 executing program 7: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x3680, 0x2000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000680)) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000380)=0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) ptrace$peek(0x2, r2, &(0x7f00000004c0)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000540)) lstat(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0)) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000d08bf9518cd3b6db0000000000000000000000000000000007002e36666d6c6530"], 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) umount2(&(0x7f0000000500)='./file0\x00', 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) 22:23:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3ff, &(0x7f0000000000)="0a5cc807715070") syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8000000, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646973636172642c696e746567726974792c6572726f72733f636f6e74696e75652c646973636172643d30783030303030be78ccb9e6fc4d993030303030"]) 22:23:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:23:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x52000f) fchdir(r0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000023ff0)={&(0x7f0000000040)={0xffffffffffffffa7, 0x2d, 0xaff, 0x0, 0x25dfdbfd, {0x5}, [@typed={0x0, 0x69, @u32}]}, 0x14}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x10800) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 22:23:32 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @reserved}, 0x10) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$update(0x2, r1, &(0x7f0000000140)="ca5f917e08356d554e06c73ccce3c72625c59be1781407a65c51a9ef91ea1db226c94e14c5f0db21185739cd58a2268ffda9b94684ad75949a65fea00010642066f8d196c828b955d89b481c31eb308d6d6936cf4c7d14fe18c4e45f3b180d0248268b59702793e36b3630ececea329714db545689a7df1ef60bd6b75b140cf5a8a9fca2518897a58751817693fa80140b8dcc78944bba6620073d8f53975cea50a436cf4befe4fee44037ac52ab9809", 0xb0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x11, &(0x7f0000000100)={@mcast2}, 0x14) 22:23:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x20001, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x5bb}, &(0x7f00000000c0)=0x8) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @broadcast}, 0x3}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x89e}, @in6={0xa, 0x4e20, 0x0, @remote, 0x58d5}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x100, @local, 0x1ff}, @in={0x2, 0x4e22}], 0xb0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000450000580000000000009078ac141400000000000420880b00000000000008f9ffff85dd080088be00000000100000000100000000000000150022eb000000002000a4859b00000200000000000000000000000800655800000000e00fc116c2d99ee76ddcdbc5098c5bb1e93dc3d7665e7834dd5eff590c2cce07e582e725463b6d802f96d60668ba9b9417384abefe99c89cd7ffe60d49af9196ae4c0fa951f95419791ecd9d6b6e4d872c2ac237f692836f52a8"], 0x5c) 22:23:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x2) 22:23:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:32 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000000000510fef, 0x0) r1 = socket$inet6(0xa, 0xffffffffffff, 0xfffffffffffffffd) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="0bf5430f000319", 0x7}], 0x1) 22:23:32 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x1) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0xc, 0x0, 0x7edfb55d}}) 22:23:32 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000004c0)) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bind$inet(r1, &(0x7f0000000580)={0x2, 0x104e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2f0a, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x0, 0x3c000000]}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x200, 0x30}, &(0x7f0000000400)=0xc) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="0a5cc80700315f") socket$nl_netfilter(0x10, 0x3, 0xc) 22:23:32 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000000140)="7f19015ef20f1a4512fee31c5212a962bd5fd0e87a68f46e9e5a374ceb85eaf842e8016570fd5daa3ee4bcc62b71ec09118183fe7623524406a967d5300f8b560d0300c8594f47809916289f13e5630027ad6a123474e2739b9c9e6206e471b00366d02a4356f4e3", 0x68) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x9, 0x101c02) syncfs(r1) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d0, 0x80efff7f) [ 269.627810] jfs: Unrecognized mount option "nodiscar" or missing value 22:23:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x3) 22:23:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0x2) 22:23:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000240), &(0x7f00000002c0)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000140)="14c34de1a7975422558fd2ee36d37bda717da2af0d80b2fc0361fd9731bd7f5bfeb1a8176639bbee6d0ab528ded19cea4ee3c15802c2f8f829f9aa8e155b008c70e71ece9bf3bf7f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000300)}) 22:23:33 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) r1 = socket$inet6(0xa, 0x4000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000100)={"73697430008000", @ifru_names='ip6gretap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) 22:23:33 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:23:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c1267"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) [ 269.938266] binder: 7550:7554 got new transaction with bad transaction stack, transaction 4 has target 7550:7554 [ 269.948874] binder: 7550:7554 transaction failed 29201/-71, size 0-0 line 2882 22:23:33 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x4, &(0x7f0000000200)=@raw=[@alu={0x7, 0x4, 0xb, 0x5, 0x3, 0xfffffffffffffff0, 0x4}, @ldst={0x2, 0x3, 0x1, 0x0, 0x3, 0x1c, 0xfffffffffffffffd}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xfc, &(0x7f0000000280)=""/252, 0x41000, 0x1, [], 0x0, 0xd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, &(0x7f00000001c0)=r1, 0xfffffffffffffd83) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101200, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000740)="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", &(0x7f0000000040)=""/215}, 0x18) 22:23:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xc) [ 269.984033] binder_alloc: binder_alloc_mmap_handler: 7550 20001000-20004000 already mapped failed -16 [ 270.017359] binder: BINDER_SET_CONTEXT_MGR already set [ 270.023154] binder: 7550:7554 ioctl 40046207 0 returned -16 22:23:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f485ad5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0xfffffffffffffffd}, 0x48) [ 270.030631] binder_alloc: 7550: binder_alloc_buf, no vma [ 270.036354] binder: 7550:7557 transaction failed 29189/-3, size 0-0 line 2970 [ 270.077811] binder_alloc: 7550: binder_alloc_buf, no vma [ 270.083593] binder: 7550:7565 transaction failed 29189/-3, size 0-0 line 2970 22:23:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c1267"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:33 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8001, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='~'], 0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") ioctl$int_in(r0, 0xc000088010500c, &(0x7f0000000000)) 22:23:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)=""/239, 0xef}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/91, 0x5b}], 0x4, &(0x7f00000016c0)=[{&(0x7f0000001340)=""/35, 0x23}, {&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/18, 0x12}, {&(0x7f0000001480)=""/170, 0xaa}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/248, 0xf8}], 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) [ 270.125787] binder: release 7550:7554 transaction 4 in, still active [ 270.132726] binder: send failed reply for transaction 4 to 7550:7554 22:23:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xd) [ 270.182585] binder: undelivered TRANSACTION_COMPLETE [ 270.187899] binder: undelivered TRANSACTION_ERROR: 29201 [ 270.193435] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.323707] binder: undelivered TRANSACTION_ERROR: 29189 [ 270.329352] binder: undelivered TRANSACTION_ERROR: 29189 22:23:33 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) rt_sigreturn() 22:23:33 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7c, 0x8040) truncate(&(0x7f0000000140)='./file0\x00', 0xfff) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x18, 0x0, 0x80}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) 22:23:33 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c1267"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c1267"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x410a80) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x3, 0x9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087705, &(0x7f0000000380)="cedd99953588d1955d57a30740b3ea27c7d4c8a80bd0a473b1e9b4508b595ae26703e687ef0a05d1189d08120efb44360bfa6fbe48bd11810d1d7226c4b33f671ff66020df2e7e58fcc47905a6fe6dd3a1fcd7e210acf97d3a3a279cb2ba8e27f92a3ab3680390677607c9c53332811890962eb67a892e4b1a2ebfaf87d4aab4968b7dabcfb7c6b64f1058eaa9bcb8a3f5b9b3e42eb3a3c4b4628cf79e51bfc47d9304e13e61bfef55985bd5ba614bfc318d208ddf5b179b0ad7c3e8710fe9f7f6a0db1e2d") 22:23:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xe) 22:23:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x410a80) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x3, 0x9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087705, &(0x7f0000000380)="cedd99953588d1955d57a30740b3ea27c7d4c8a80bd0a473b1e9b4508b595ae26703e687ef0a05d1189d08120efb44360bfa6fbe48bd11810d1d7226c4b33f671ff66020df2e7e58fcc47905a6fe6dd3a1fcd7e210acf97d3a3a279cb2ba8e27f92a3ab3680390677607c9c53332811890962eb67a892e4b1a2ebfaf87d4aab4968b7dabcfb7c6b64f1058eaa9bcb8a3f5b9b3e42eb3a3c4b4628cf79e51bfc47d9304e13e61bfef55985bd5ba614bfc318d208ddf5b179b0ad7c3e8710fe9f7f6a0db1e2d") 22:23:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:34 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x8) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 22:23:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xf) 22:23:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:23:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x4, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4040000000000005, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @local}, 0x10) sendto$inet(r1, &(0x7f0000000300)='^', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 22:23:34 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:23:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000680)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)}], 0x7, &(0x7f0000000600)=""/126, 0x7e, 0x1}, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f00000006c0)="23f57da7486b5c551d015f137f38ec6f3a9c008771245e49d31c2fe9d225a8afdbed3acaaa9e880a4affe98623a4671451423123908b6bf93443585093df518e2e588ed68658184357c9d1071597a0f7125474c019376e1fb103bc4f0e6eddfd8b0e5352f2ec173d509e343a8487022673980198fa2e5d4a07ef0abf40ed66c62e49637580b0c5158baaa729a1bed61edf055eade3b1e93e414771aa07d592efb2d58e6ca2cf52b2db9b8007dc421e4e06f18dcd939930b8efb7d2285edfa3a33c66f02bea1e9197dbd88863c668ee6f60c5d34bb7e7e58ed3657561c8baf75f7bfd3baaadfc662f", 0xe8) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = socket(0xa, 0x2, 0xcb7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2000000003f, &(0x7f0000000140)=0xfffffffffffffffe, 0xfffffffffffffed4) 22:23:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:23:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x100) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 22:25:47 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 22:25:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x300, 0x2) r1 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000001c0)={r1, 0x6, 0x1, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) getpeername$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0xfffffd24) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r5, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e1f}, 0x10, &(0x7f000000d000), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="58008cc2539ab6c191cc5500000000000014010000080000000000000000000000", @ANYPTR=&(0x7f0000005ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001eff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580000000000000014010000060000000000000000000000", @ANYPTR=&(0x7f000001bff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000009ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000014000000000000000000000001000000480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f000000f000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000001e000)=ANY=[@ANYPTR=&(0x7f0000012000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000012ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001cff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x150}, 0x0) 22:25:47 executing program 1: r0 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='em1\x00', 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000380)=[{&(0x7f0000000240)="84cec876b9d551099bc0744c57cb756d298000acc01417257553c96e55e7272e77b4f0fbc7cc33a38c2746b4303d87f70143f7e3e935a848d8929f547c7823ed833624d01807eeab12899a97f1e1b5a9d3a222014c661c898c6f22a753cd0dda109fe877efe13ac129", 0x69}, {&(0x7f00000002c0)="618c7d467bb5800948dfcce2cffaa8b172d2e6047e703ae74e3e7e13eac04fef239fc70f73a89d9406c2d369df091c8cdba8379612222ff029af6d60eaa89c8e363dba751afc3dd17b6855687f58781a38adafd803569ccdf247402d23a8bd5e3a171b9aaf304d14e4a7c49422df003b365a0ad0b19cfd92b3f555a82c97658539e7345bba13205421df105b428e1855aa", 0x91}], 0x2, r1) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x800) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x6) r3 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x33, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000800)=ANY=[@ANYBLOB="060000002e6bb3434851e7118dfa307ac6703ab2c978f1a46ec281aeb8ebb88910b03effba39bd856452f9651de4bd837e463d7a2fea6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000d36b16bed5610bcd15bf01453cdd63", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000540)={r4, 0x80000001}, &(0x7f0000000580)=0x8) r6 = add_key$user(&(0x7f00000007c0)='user\x00', &(0x7f0000000100), &(0x7f0000000140), 0x0, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000006c0)=r3) keyctl$invalidate(0x15, r6) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_GET_VRING_BASE(r7, 0xc008af12, &(0x7f0000000180)) fchdir(r8) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r5, 0x4}, &(0x7f0000000680)=0x8) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) 22:25:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000080eb790100448b0600c4882f0780000004"], 0x16) socketpair(0x4, 0x7, 0x3c05, &(0x7f0000000400)={0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x4, 0x10202) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000440)=0x1) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x85013020}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x144, 0x42, 0x11, 0x70bd26, 0x25dfdbfb, {0x1a}, [@nested={0x130, 0x30, [@generic, @generic="f4e5bc92afef2883e002e9666378f29c1a59f1facedaeb916d9f5465dfa21b4fb9dab628bf06b8d3574c3835978fefd5905022c6c6810b311355a55862e6e40e0cd3d16811e31412c3d142310dc732ff4ece0f2cdb50b54b3a3a89a9cb9384c09c486222585b2c4cba9182c23425559abb1d77583fce1787a0e8", @typed={0x8, 0x18, @uid=r3}, @generic="5e04e90db4f8d4046c358428ada922cab8433fbc0717a81ca2393d0e884127ba3ff1e67057be27b3859076216d402013cb017888091ef1de6020fd61b16890fe25b97cd82b501a4b24c84d63f7652a51c32f348c6e07721096a9b7271f7526e663f1e3f8940180db9461ada0bb6841c2ad5f938f5e9d699343b19814d04d322ad84417fa6e4c19be0ca3c8cd0e89d871fa92e18e33eec026eeeaa1bc27228ca77971c6417973e0"]}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x2004c841) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e20, 0x8, @mcast2, 0x40}, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, [], 0xd}, 0x6}, 0x9, [0xffffffffffffffff, 0x6, 0x3, 0x4, 0x6, 0x80000000, 0x7fffffff, 0x1a9]}, 0x5c) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000380)={0x3, 0x0, [{0xd002, 0x87, &(0x7f0000000200)=""/135}, {0x103000, 0xbb, &(0x7f00000002c0)=""/187}, {0x2000, 0x66, &(0x7f0000000100)=""/102}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) sysfs$3(0x3) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000800), &(0x7f0000000840)=0x4) 22:25:47 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80a3d, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, 0x4, 'queue1\x00', 0x8}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000000)={0x8, 0x6, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x2}, 0x20) 22:25:47 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:25:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:25:48 executing program 0: prctl$intptr(0x100000000002c, 0x0) 22:25:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="021200001100000026bd7000bcdbdf250100140079000000080012002580eafa211903000000000000003800000006003200830800000900000000000000ac1414bb000000000000000000000000bc14140c00000000000000000000000004000400050000001f000000000700003f00000000000000030000000000000002000b000598000000090060acb1de6a45ac221e3065e5681778eb8dfb13533ffa9cc921580e862b54ab36911926b35da9b7639df8d76cf189ee9e87b2bc96fde4ab3b7509ee21f399bafdcc70ea1fd69d"], 0xcf}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 22:25:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="44c8cd02010023fbfc60c654d163c7722f332e721642479ceea8773916d7ec6cf54343ab4eabedbeed9680d4ffe142812c0f048fa73ab716cc1324cb225e6f2457f54dd97fe21b23779af4689a74fdd067a60b855e66d759fa8245da43bd0684fb5a73ee8bead3cbb522d29e510cb8ed83077446e2641baab5c3ced9147625140749c12b07c8fcbb3ba1ae5a4cd0cb9e78b156a3ad88f3747d1168eb056f9013c3f561a95dd4bc25b827d0"]) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="ce000000ba8bec3656a5f32a8ef33a6441c7bc9aa983d3b7830de840fd500955077d90dcfa861f95cfa20e0d1ed2e25b3eca30e483a950d4c0138481c8808442076a02a55048cc34b08612cc3c9e7f2eab6d060e3d7283158475ad955f275c909ba3e2737fb8fe6b538f3b920bf131df9b9c340c9e84f9618fe3e380d890bc4482ce248cd5eaa7bb103ba93e30d39dd99a97bfe29948e90f873c1a36636bc2a92fd708e0df27e11ac8229477a40271eed25140d77476933dc89fc49f31fdd3ba1a9f78d9e9e8225b14892429c4f47d734dd79df60e851096f943c3a325878876eb62"], &(0x7f0000000400)=0xd6) [ 405.144580] device bridge_slave_1 left promiscuous mode [ 405.150651] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.234441] device bridge_slave_0 left promiscuous mode [ 405.240160] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.358120] team0 (unregistering): Port device team_slave_1 removed [ 405.386047] team0 (unregistering): Port device team_slave_0 removed [ 405.417187] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 405.442131] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 405.532300] bond0 (unregistering): Released all slaves [ 406.850677] IPVS: ftp: loaded support on port[0] = 21 [ 407.195510] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.201896] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.209185] device bridge_slave_0 entered promiscuous mode [ 407.234210] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.240606] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.247875] device bridge_slave_1 entered promiscuous mode [ 407.273427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 407.297996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 407.364552] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 407.390878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 407.493623] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 407.500767] team0: Port device team_slave_0 added [ 407.526106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 407.533419] team0: Port device team_slave_1 added [ 407.557346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.582160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.607353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.631668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.864653] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.871101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.877786] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.884162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.702086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.787750] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 408.868138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 408.874316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.884885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.956994] 8021q: adding VLAN 0 to HW filter on device team0 22:25:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:25:52 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0xa1e, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xa06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000180)) 22:25:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0xfffffffffffffffd, {}, 'lo\x00'}) 22:25:52 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)) 22:25:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:52 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x40}, {r0, 0x2}], 0x4, 0xffffffffffff0000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000140)={0x1, "92"}, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x2, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0xc000, 0x8, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_LOCK(r1, 0xb) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000240)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x103000, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)) 22:25:52 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:25:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) [ 409.490545] x86/PAT: syz-executor0:8002 map pfn RAM range req write-combining for [mem 0x197150000-0x197153fff], got write-back 22:25:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:52 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) rt_sigreturn() 22:25:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:25:52 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, {0x100000000000000, 0x25, 0x2, 0x7, 0x40, 0x20}, 0x7, 0x4b04f6f8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000180), 0x10) bind$can_raw(r1, &(0x7f00000001c0), 0x10) [ 409.617612] x86/PAT: syz-executor0:8010 map pfn RAM range req write-combining for [mem 0x18f340000-0x18f343fff], got write-back 22:25:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:25:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:53 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x885, 0x101000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="1165b3a74513533214f7dff6533700000000000064fe3bde771d5481fff770d278f9524bd3ccf68372e738e67e1ae9919c0051703052e1bc4a54f22579101cc506eeb14fd201f1738994544a772d352ecb49307639d1ed0acf4787cbb6b3d7f89f8c6c0a9cca264d3fe28d64237479ca37e020b048ef1382a119f78dccd5fc2d763347693265e057cbeeca912308058a0f98fc9a6c2110e9c20bce2228be7e2f997a33708809484abdcb4c0f27074ab84dcc63e3"], &(0x7f0000000540)=0x21) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={r2, 0x1}, 0x8) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/165, 0xa5}, {&(0x7f0000000780)=""/147, 0x93}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/136, 0x88}], 0x6, &(0x7f0000000000)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000300)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000003980)=@l2, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)="f65366e80a16", 0x6}], 0x1, &(0x7f0000004b00)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x1ce) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x34000, 0x894f, 0x5, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 22:25:53 executing program 7: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) unshare(0x8000400) r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8000000008912, &(0x7f00000002c0)="00000000000054a41b4312") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200)=0x6, 0x4) 22:25:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:25:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ff"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:25:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x800, 0x0) accept$packet(r1, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001280)=0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0}, &(0x7f0000001300)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001340)={{{@in=@broadcast, @in6=@remote, 0x4e22, 0x0, 0x4e24, 0x3, 0xa, 0xa0, 0x80, 0x7d9296d7eda55632, r2, r3}, {0x101, 0x5, 0x1f, 0x1, 0x1, 0xd68, 0x0, 0x4}, {0x4, 0x6, 0xfff, 0x20}, 0x8, 0x6e6bbe, 0x1, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d2, 0x3f}, 0x2, @in=@multicast2, 0x0, 0x3, 0x0, 0x1f, 0x80000001, 0x0, 0x7}}, 0xe8) read$FUSE(r1, &(0x7f0000000200), 0x1000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) shmctl$SHM_LOCK(0x0, 0xb) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r4, 0x6, 0x10}, 0xc) 22:25:53 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:25:53 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:25:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000856fc6c2422c050000000000000000000000000000000000000008", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='keyring\\vmnet0selinuxppp0:vboxnet0\x00', 0xffffffffffffff9c}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4042000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=@deltaction={0xa4, 0x31, 0xb00, 0x70bd28, 0x25dfdbfc, {0x0, 0xffffffff, 0x6}, [@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x6, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x14, 0x9, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x15, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x5, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x18, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x6, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xa4}}, 0x40800) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000001c0)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 410.473508] binder_alloc: 8081: binder_alloc_buf size 306253570754224128 failed, no address space [ 410.482945] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 410.491873] binder: 8081:8082 transaction failed 29201/-28, size 144123984168878080-162129586585346048 line 2970 [ 410.522717] binder: 8081:8086 got transaction to invalid handle [ 410.529103] binder: 8081:8086 transaction failed 29201/-22, size 0-0 line 2855 [ 410.562121] binder: undelivered TRANSACTION_ERROR: 29201 [ 410.593336] binder: BINDER_SET_CONTEXT_MGR already set [ 410.599010] binder: 8081:8086 ioctl 40046207 0 returned -16 [ 410.612752] binder_alloc: 8081: binder_alloc_buf, no vma [ 410.618337] binder: 8081:8082 transaction failed 29189/-3, size 144123984168878080-162129586585346048 line 2970 [ 410.629564] binder: 8081:8086 got transaction to invalid handle [ 410.635753] binder: 8081:8086 transaction failed 29201/-22, size 0-0 line 2855 [ 410.643806] binder: undelivered TRANSACTION_ERROR: 29189 [ 410.649472] binder: undelivered TRANSACTION_ERROR: 29201 [ 410.684333] binder: undelivered TRANSACTION_ERROR: 29201 22:26:12 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) rt_sigreturn() 22:26:12 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2, 0xd101}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfbd) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x100, {{0xa, 0x4e23, 0x1, @mcast2, 0x5}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xf}, 0x1ff}}, {{0xa, 0x4e24, 0x6, @mcast1}}, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x1b}, 0x66e6}}]}, 0x210) getsockname$inet6(r1, &(0x7f00000007c0), &(0x7f0000000800)=0x1c) getsockname$inet6(r1, &(0x7f0000000740), &(0x7f0000000780)=0x1c) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x40000) mkdirat$cgroup(r3, &(0x7f0000000700)='syz0\x00', 0x1ff) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000002c0)="e348d382d2810a43d0f66958b49c0e4490a44eb11ada4544425c09bfa4fb9a688dead3ab16ced5c1dd25feb48ced023a383c527d31f31669d609e42d56e97d30da04d6c7fc184b676b4b84d23845dbc4b01396b3be0fe133eef6fcae649800b24c6e4c39bb11541fdb7f1431f745c9fd78aa29c359f93ca6be1f510d45075482c026a39bf0c2712b909cb9f288cf9ecac93487368ddc509fd94b05ae451fe19c3cc5afbfa23cd97d0b50f0f248b5", 0xae) r4 = socket$inet6(0xa, 0x2, 0x2) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x184, 0x10, 0x320, 0x70bd2c, 0x25dfdbff, {0x12}, [@generic="f8ecdef394e20cb6d84826a0d9e80e68215f8be3edfb40b6990f6ff287844c30f75be4cb866e8dd0e8ac1f167891210422f6615f4435b83d0123659c1e957309ec4602d86f8206af9d1e64f9562812ad91b6e865ddeab3e029bb97680a4a64f8d79f", @generic="9147d351fe0e3a54dcab414617ee4c", @nested={0xf4, 0xd, [@typed={0x8, 0x7, @uid=r5}, @typed={0xe8, 0x12, @binary="19daae8a0163d922ecdbc5a413bd83b8db9777c3d4670489dc436219fee5e40214851247cf5bd9618e352a90d744e7622d640d818231cea7bca0bcce43438aa8c7e0f3446ec676071f60bee13868f38d20cd9547b9c6381467fca34057f8d03d68a86cf8a6d2b2481b67bcb86aef79eeda5cf0a8eb3b86e9718c3829b856f2baa458bd138505f40ac046a54a5e41f379f8d5c54ba55cf8bc9c581a182358e8659cf14ca9c118131b2e58ca6d2e026645e3b3ec79ab264de8cd3e90bdceade869aab3c78930b53ad9d7dd4626fbfc9125c715028dcc089d56fa7a383156d9291f6dce49"}]}, @typed={0x8, 0x10, @fd=r4}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x801) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="040100001a000100000002000000000000acffffaa0000000000000000efffffffffffffff000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000008000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x104}}, 0x0) 22:26:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ff"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x80010, r0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x2c40000000000, 0x0, 0x3, 0xffffffffffffffff, 0x8001, 0x9, 0x7, 0x1f, 0x5, 0x3, 0x1, 0x3f}) 22:26:12 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:26:12 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:26:12 executing program 7: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000300)={0x4, r2}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_pgetevents(r0, 0x7f, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000100)={r3, r4+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={0x401}, 0x8}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0x0) 22:26:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00ff"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:12 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:26:12 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xffff, &(0x7f0000000040)="0a5cc80700106a549f315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:26:12 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:26:12 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) r2 = getegid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='F\v\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x10) r3 = getgid() getgroups(0x3, &(0x7f0000000040)=[r1, r2, r3]) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000003a40)=0xfffffffffffffe59) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x14, &(0x7f00000000c0)={r4}, 0x8) r5 = getpid() sched_getparam(r5, &(0x7f0000000280)) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x401, 0x4000) 22:26:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:12 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) rt_sigreturn() 22:26:27 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000b80)={{0x1}, 0x7ffffffe}) 22:26:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x1000, 0x78000800, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) 22:26:27 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 22:26:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xca, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001400974f00000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400020000000000000100000000003a46ebcff3eb0b5639d36492fc576446ddc24a0634000000009b65c5cb491806c26489209e83945b399794c36da681ca0b"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x6b7, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") 22:26:27 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000008912, &(0x7f0000000000)="0a5cc80700315f85715070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003380)={0x0, 0x0}, &(0x7f00000033c0)=0xc) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000003180), 0x0, &(0x7f0000003400)={[{@uid={'uid', 0x3d, r1}}]}) 22:26:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{}, 0x7ffffffe}) 22:26:27 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:27 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 444.028890] hfs: uid requires an argument [ 444.033309] hfs: unable to parse mount options 22:26:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:27 executing program 0: 22:26:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x3, {{0xa, 0x4e22, 0x80000000, @empty, 0x2}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040), &(0x7f0000000200)=0x4) 22:26:27 executing program 7: 22:26:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{}, 0x7ffffffe}) 22:26:31 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) rt_sigreturn() 22:26:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff60061"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:31 executing program 0: 22:26:31 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 22:26:31 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x7, 0x20000000000000, 0x4}) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x1, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)) fstatfs(r0, &(0x7f0000000200)=""/231) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4a0080, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000340)={0x7ff, 0xae, 0x1000, {r2, r3+10000000}, 0xffff, 0x1}) r4 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x492000, 0x0) 22:26:31 executing program 7: 22:26:31 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{}, 0x7ffffffe}) 22:26:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff60061"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:31 executing program 7: 22:26:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x300, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') dup2(r0, r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) tkill(r1, 0x1000000000016) 22:26:31 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:26:31 executing program 3: r0 = socket$inet6(0xa, 0xfffffffffffffffd, 0x3fffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) 22:26:31 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}}) 22:26:31 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:31 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/fuse\x00', 0x2, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x0, 0x41}, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000500)) r2 = open$dir(&(0x7f0000000580)='./file0\x00', 0x200000, 0x0) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x9) 22:26:58 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) rt_sigreturn() 22:26:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff60061"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x80000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000200)) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r3) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) shmctl$SHM_LOCK(0x0, 0xb) 22:26:58 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="e5", 0x1}], 0x1, &(0x7f0000000440)=[{0x10}], 0x10}, 0x0) 22:26:58 executing program 7 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}}) 22:26:58 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:58 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:26:58 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r0, 0x20000000, 0xfffffffffffffffe) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3, 0x4) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x10000000, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000440)={{0x2, 0x2, 0x0, 0x3, 0x7fffffff}, 0x100}) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key(&(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r4, r5) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000500)=0x2) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r0, &(0x7f0000000740)="b3f9b5146536eea59647c63c1d86f3e59cca8504b73ea956be00a85d4a650109934eaa9c74b5bf06e8fc99778d36292e37ab36636ebcf9aeab749f514f5b5a9749783087affe7b2eebcd3709f17f26f2787b161ba22c6889c011d0971a2ea7dc9fca6c3f08599fa586b65ea895f6d2cc13536c1eb07b9071ecb5198281de55be71e65953762a27e3275748ce6a4b248fc5aaace6339e8b084489864a0670848d64c0424d0facfd", 0xa7, 0xce, &(0x7f0000000200)={0x77359400}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller1\x00'}) ftruncate(r6, 0x80080) sendfile(r2, r6, &(0x7f0000d83ff8), 0x2008000fffffffe) 22:26:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:59 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000b80)={{0x1}}) 22:26:59 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) rt_sigreturn() 22:26:59 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfc, 0x80) sendto(r0, &(0x7f00000000c0)="7c8b8a4c44f77c22ebd94e612748a2eb67720740d320d8df4f87cf062da43daa905cb85112dca1f916c6b165976f67e973cb92ce9fa5a1e7d73b5480ed5c4140149ee4c343ef6439c3d5d7680f276cb1121967ce9d6c82df73ccb20bf2aecfa05f2f5a80122f0360e972f71a9b187b6e683013b916cd74a4ddcbd181716b4abce56e1c0d1cbe949b6d8a955fd2f02f7d55b40e6efb2438de8a7aa5621e5488ed0e25ce101ec8e20bfc21e7bae4de3f818c143dd0d0d9b6adb19c3517005e7deaac38ad4b2e57777abe75ee0a6e6d52398fb7b9e417a6d3821ca1080dd404acfd7adc", 0xe2, 0x8000, 0x0, 0x0) r1 = socket$inet6(0xa, 0x8000a, 0x81) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") shmctl$SHM_LOCK(0x0, 0xb) 22:26:59 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:26:59 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5422, &(0x7f0000000b80)={{0x1}}) 22:26:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:26:59 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5452, &(0x7f0000000b80)={{0x1}}) [ 552.935982] device bridge_slave_1 left promiscuous mode [ 552.941759] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.003411] device bridge_slave_0 left promiscuous mode [ 553.008948] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.177161] team0 (unregistering): Port device team_slave_1 removed [ 555.187147] team0 (unregistering): Port device team_slave_0 removed [ 555.196825] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 555.210038] bond0 (unregistering): Releasing backup interface bond_slave_0 22:28:18 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x92, 0x21ce00) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000140)=""/58, 0x3a}], 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$intptr(0xb, 0x9) shmctl$SHM_LOCK(0x0, 0xb) 22:28:18 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) rt_sigreturn() 22:28:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:28:18 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:28:18 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:28:18 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0045878, &(0x7f0000000b80)={{0x1}}) 22:28:18 executing program 0: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(r0, 0x20000000, 0xfffffffffffffffe) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3, 0x4) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(0xffffffffffffffff, 0x10000000, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000440)={{0x2, 0x2, 0x0, 0x3, 0x7fffffff}, 0x100}) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key(&(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r4, r5) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000240), 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340), 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000500)=0x2) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r0, &(0x7f0000000740)="b3f9b5146536eea59647c63c1d86f3e59cca8504b73ea956be00a85d4a650109934eaa9c74b5bf06e8fc99778d36292e37ab36636ebcf9aeab749f514f5b5a9749783087affe7b2eebcd3709f17f26f2787b161ba22c6889c011d0971a2ea7dc9fca6c3f08599fa586b65ea895f6d2cc13536c1eb07b9071ecb5198281de55be71e65953762a27e3275748ce6a4b248fc5aaace6339e8b084489864a0670848d64c0424d0facfd", 0xa7, 0xce, &(0x7f0000000200)={0x77359400}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller1\x00'}) ftruncate(r6, 0x80080) sendfile(r2, r6, &(0x7f0000d83ff8), 0x2008000fffffffe) 22:28:18 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) rt_sigreturn() [ 555.237011] bond0 (unregistering): Released all slaves 22:28:18 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:28:18 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0189436, &(0x7f0000000b80)={{0x1}}) 22:28:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x78000820, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x8a0, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x54001820, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget$private(0x0, 0x4000, 0x54000a03, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 22:28:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000040), &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:28:18 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:28:18 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x54a0, &(0x7f0000000b80)={{0x1}}) 22:28:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000040), &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:28:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000082, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x3, 0x400400) sendmsg$kcm(r1, &(0x7f0000001ac0)={&(0x7f00000000c0)=@l2={0x1f, 0x80000000, {0x6b, 0x7, 0x1, 0x2, 0xffffffffffff8000, 0x7f}, 0x4, 0x7fffffff}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="99f480d4cf227e15f4fe064110bf7bccc6d11e56e93beffb9f630c9ecb787112b711a14478f3ba28279d45f738923f566bc628457f876a608b94fba09c6c2ee534c9", 0x42}, {&(0x7f0000000300)="27b3134cd5e5f583f1785a3e96e89f95211682032362f7caeba046097dd571846e336e041059711c2799e4dabc51482cb8b0a03a8c498d505be48310224e331bf37402307895c50bbc56581493652bac25485a97d97e264bfd15cc99a7d9ddf6b184c51bbab7be15e88673e8043a6d6dd6a46f8fb0c018791f638320cdd7d2c15399efc987f038858ae23252a90bafab93fad51640e6679422e0111be4b77ebd02a80a212cf402", 0xa7}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="a7ca5b0497ceebfb5a6ed64d9e2a1e98bd5696ce2e6a55dc5adecd275c540c86e32e7e1976b19736a2a7aa671ffc458e6e69b02dc2a2ed1cd9c6516a26a9682af632001ee6d43460ad4dc997a64359c5fb2c84d638d14988ae07a49ad15ba48b253adb7a0c0e4850fdd5c9", 0x6b}, {&(0x7f0000001440)="840d38163efb12dfd1550c2b13e8ad818c2e951e324fe4145d657c9e121c84a934c2799339e86e46b1f801d7993a4174cef29159bd256b6194ee63cc42cfe5485d6834021d782f64a6c54f87dd54464b59507cefe9b6673d90e91c58c58b315db198580025ec947da8dc165204f243ceb269a342678bf7b5fc7e2c89e0ce6ea151c73f76ca558983be7d121c75b71468c204207b3d4cd1e5bd2c0005f6ffe3c07afe64f33f2453eb418a969032d7d9e66673a3191907a4ee8d16d69bc7c9ee458d72c62aab9aae7526abb36b49721a8f5063a63caf05f4", 0xd7}, {&(0x7f0000001540)="f8379682be922cdb63492556c4bf238765225b84f5e4ed6ebefdbc907e93e48e75415cc27d9adf0955b7f446ccd3a2a57e25e2c7061cf74bc0514a955d13b9298279b7323c54f0c3e701b441eeb01314ddacb924796eb96f8370481d38e2617881f04cd78dbcba6b799f6db3de90362639a6e25792637ea41719c13fb424cea0030d1a6bd2452044d83b97121eb6f988d815e5c3dd4456d1f3a9d98ee656418d23ef32c44e2ed68fba878c7ab4e738aa9ed846f01325d776c155f6be5e59057cd6b71ee70535d2206824efaac2cb03edb86b0a04499cbfe5130efd906438ebc43d51bb2bfc6cdcc2ff43a3dd713a096947d1c4c0b3", 0xf5}, {&(0x7f0000001640)="eb4e3358f94d4944ed940de38ff70b5f630e3c8610c5a65908565d9432a00450d8460b14805a5b8d0e82c09132d2940f0b077c54535fadfd3a6bcf1f29e9d9eeec8f38e6725f428439db21cd8d2f25183dd92ebbfac320b5a6455b3f", 0x5c}, {&(0x7f00000016c0)="63fe59eddd34b560d58448758bf982bb20b112347e9ccdf471b3aa002ff7f1725e175ef79ed9482deb9f7f76367cabc169e88cdd2d58bd5193f623ac2e20021954d14fdaf76de7f633145e04762802488679184a87e3c2fd2d083a8efb896c06c3fcc9201345b2e6157c270d6b1a15d65c8240abc4736feec2ffcbcb5e95722e508e229c570ea611ff5bec0910319635a74e573d1333e924e1e1c7da90", 0x9d}, {&(0x7f0000001780)="6ecb1f456642ab2fd426368796d0b2932f5489232ac4fead83d107c200b1829aa460ce63848979d2e1ab6386085c549415617f4f3c394a38d4469c18a512f3690bb9fa82ae20965cf74d3a14110797e8182f6761b3b9e48021d46930ed466a40a7be767be416ddc1efe315aededbdefd9bc93e61a31333f974845cea6bd00fee67a88f7010f00f1a60d90029ec5cf2748b52676c16ece4a51cd0901da559fd82c8b8b5a8de27c3b6d10bbc789d", 0xad}, {&(0x7f0000001840)="5d570a18b9508f385c980a47f10abe9aa27101f5fc8893a51ba45ea5892adbd21629c02f75698ec724431d3bb5cdf0c2ad785400995a6d032793bc6303d8e5c968b74f95675e346a2c5c0a883302efd40edb8c78420117a21a40666e04b70d54a4", 0x61}], 0xa, &(0x7f0000001980)=[{0x70, 0x103, 0x6, "ddc1c6b806cb4b7921835c06884ddd7a1e9987d07680368874343c9de4981bf213609e31d446925d3ac9af71bf0ada69603eefd5e77bfac652fd079600b781e5d6c74a21741ab5940bb331c965c2fd3dd0d5624c062284b86a26a36749eb6c0c"}, {0xa0, 0x103, 0x8, "540192dfaafc03e18376b496ed64436ec75e146bf90b86db4e7a3ef6a5fd5e44e8a1096c3e72e62ca7e0f68fd6992287d787b202d4dc6dffc055630696844499311c53bd7d034156c22313297b24609a8c5809a6b922cc4575411f261442d7f40fe29cb2ec499c831760e0dec7b22a55ba89e00f32f9e8e2bd899e705ecc1c615f70698da92bf11c9454a4c2c9e4"}], 0x110, 0x4008000}, 0x40004) shmctl$SHM_LOCK(0x0, 0xb) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3) 22:28:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) [ 557.386564] IPVS: ftp: loaded support on port[0] = 21 [ 557.792871] IPVS: ftp: loaded support on port[0] = 21 [ 558.763235] device bridge_slave_1 left promiscuous mode [ 558.768814] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.785324] device bridge_slave_0 left promiscuous mode [ 558.791214] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.992196] team0 (unregistering): Port device team_slave_1 removed [ 561.002191] team0 (unregistering): Port device team_slave_0 removed [ 561.011945] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 561.027607] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 561.054223] bond0 (unregistering): Released all slaves [ 561.322537] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.328982] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.349229] device bridge_slave_0 entered promiscuous mode [ 561.431282] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.437736] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.457136] device bridge_slave_1 entered promiscuous mode [ 561.507114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 561.571358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 561.611246] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.617666] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.625640] device bridge_slave_0 entered promiscuous mode [ 561.677567] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.683992] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.699609] device bridge_slave_1 entered promiscuous mode [ 561.752911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 561.789349] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 561.815269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 561.855134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 562.026299] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 562.097247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 562.141310] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 562.151325] team0: Port device team_slave_0 added [ 562.158704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 562.165622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 562.214208] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 562.221832] team0: Port device team_slave_1 added [ 562.245562] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 562.252508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 562.306980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 562.314589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 562.324695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.365584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 562.372523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 562.384983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.455272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 562.462527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.471234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.489918] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 562.497945] team0: Port device team_slave_0 added [ 562.538642] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 562.546263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.559708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.577633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 562.587863] team0: Port device team_slave_1 added [ 562.650964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 562.713582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 562.766724] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 562.774276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.782721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.827702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 562.835197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.846791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 563.171877] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.178588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.185346] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.191752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.199961] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 563.436387] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.442830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.449547] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.455967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.463416] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 564.122654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.134346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.730772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.875920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 564.955732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.017772] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 565.024568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.031788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.114122] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 565.166676] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.256646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 565.262935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.273444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.405959] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.739692] kworker/dying (7) used greatest stack depth: 8072 bytes left 22:29:06 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) rt_sigreturn() 22:29:06 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x80605414, &(0x7f0000000b80)={{0x1}}) 22:29:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x3, &(0x7f0000000040), &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:29:06 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 22:29:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:29:06 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:29:07 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x3) rt_sigreturn() 22:29:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) 22:29:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:29:07 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0145401, &(0x7f0000000b80)={{0x1}}) 22:29:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000200)="0a5cc80700315f85715070") socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:29:07 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) sched_getparam(r1, &(0x7f0000000100)) shmctl$SHM_LOCK(0x0, 0xb) pipe2(&(0x7f0000000040), 0x4000) 22:29:07 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) rt_sigreturn() 22:29:07 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0xfffffffffffffffc, 0x0) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:29:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) close(r0) 22:29:08 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x5420, &(0x7f0000000b80)={{0x1}}) 22:29:08 executing program 3: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x416000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000200)={0x100000001, 0x4, 0xaaa, 0xb78f}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000001c0)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x1, @remote, 'veth1_to_team\x00'}}, 0x1e) utimensat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0) 22:29:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:29:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:29:08 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f00000000c0)={0x0, 0x8, 0x2, &(0x7f0000000140)="11fc"}) 22:29:08 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) rt_sigreturn() 22:29:08 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x54a1, &(0x7f0000000b80)={{0x1}}) [ 604.947228] ================================================================== [ 604.954733] BUG: KASAN: use-after-free in __lock_acquire+0x3829/0x5020 [ 604.961411] Read of size 8 at addr ffff8801d53148b8 by task syz-executor0/9002 [ 604.968781] [ 604.970435] CPU: 1 PID: 9002 Comm: syz-executor0 Not tainted 4.18.0-next-20180820+ #43 [ 604.978540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.987945] Call Trace: [ 604.990606] dump_stack+0x1c9/0x2b4 [ 604.994252] ? dump_stack_print_info.cold.2+0x52/0x52 [ 604.999460] ? printk+0xa7/0xcf [ 605.002765] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 605.007538] ? __lock_acquire+0x3829/0x5020 [ 605.011881] print_address_description+0x6c/0x20b [ 605.016740] ? __lock_acquire+0x3829/0x5020 [ 605.021074] kasan_report.cold.7+0x242/0x30d [ 605.025508] __asan_report_load8_noabort+0x14/0x20 [ 605.030452] __lock_acquire+0x3829/0x5020 [ 605.034606] ? find_held_lock+0x36/0x1c0 [ 605.038683] ? mark_held_locks+0xc9/0x160 [ 605.042855] ? mark_held_locks+0x160/0x160 [ 605.047114] ? lockdep_hardirqs_on+0x421/0x5c0 [ 605.051710] ? trace_hardirqs_on+0xbd/0x2c0 [ 605.056096] ? kasan_check_read+0x11/0x20 [ 605.060257] ? finish_task_switch+0x1d3/0x870 [ 605.064761] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 605.069883] ? compat_start_thread+0x80/0x80 [ 605.074313] ? kasan_check_write+0x14/0x20 [ 605.078561] ? finish_task_switch+0x2ca/0x870 [ 605.083147] ? __switch_to_asm+0x40/0x70 [ 605.087228] ? preempt_notifier_register+0x200/0x200 [ 605.092339] ? __switch_to_asm+0x34/0x70 [ 605.096418] ? __switch_to_asm+0x34/0x70 [ 605.100488] ? __switch_to_asm+0x40/0x70 [ 605.104560] ? __switch_to_asm+0x34/0x70 [ 605.108629] ? __switch_to_asm+0x40/0x70 [ 605.112700] ? __switch_to_asm+0x34/0x70 [ 605.116773] ? __switch_to_asm+0x40/0x70 [ 605.120858] ? __switch_to_asm+0x34/0x70 [ 605.124950] ? __switch_to_asm+0x34/0x70 [ 605.129018] ? __switch_to_asm+0x40/0x70 [ 605.133104] ? __switch_to_asm+0x34/0x70 [ 605.137180] ? __switch_to_asm+0x40/0x70 [ 605.141252] ? __switch_to_asm+0x34/0x70 [ 605.145317] ? __switch_to_asm+0x40/0x70 [ 605.149382] ? __schedule+0x884/0x1df0 [ 605.153278] ? __sched_text_start+0x8/0x8 [ 605.157436] lock_acquire+0x1e4/0x4f0 [ 605.161243] ? blkdev_get+0x5f2/0xb50 [ 605.165052] ? destroy_inode+0x15e/0x200 [ 605.169128] ? lock_release+0x9f0/0x9f0 [ 605.173119] ? check_same_owner+0x340/0x340 [ 605.177454] ? blkdev_get+0x5f2/0xb50 [ 605.181266] __mutex_lock+0x171/0x1700 [ 605.185160] ? blkdev_get+0x5f2/0xb50 [ 605.188969] ? blkdev_get+0x5f2/0xb50 [ 605.192779] ? mutex_trylock+0x2b0/0x2b0 [ 605.196855] ? kasan_check_read+0x11/0x20 [ 605.201018] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 605.205608] ? mark_held_locks+0xc9/0x160 [ 605.209764] ? iput+0x5ff/0xa00 [ 605.213050] ? inode_add_lru+0x2a0/0x2a0 [ 605.217130] ? kasan_check_write+0x14/0x20 [ 605.221375] ? do_raw_spin_lock+0xc1/0x200 [ 605.225616] ? kobject_put+0x8e/0x280 [ 605.229428] ? __blkdev_get+0x4ab/0x13c0 [ 605.233503] ? blkdev_get_block+0xc0/0xc0 [ 605.237657] ? kasan_check_write+0x14/0x20 [ 605.241903] mutex_lock_nested+0x16/0x20 [ 605.245965] ? mutex_lock_nested+0x16/0x20 [ 605.250207] blkdev_get+0x5f2/0xb50 [ 605.253840] ? _raw_spin_unlock+0x22/0x30 [ 605.258004] ? blkdev_direct_IO+0x11a0/0x11a0 [ 605.262510] ? bdget+0x5e0/0x5e0 [ 605.265883] ? bd_may_claim+0xd0/0xd0 [ 605.269697] ? badblocks_init+0x1f/0x30 [ 605.273749] ? md_rdev_init+0x45f/0x570 [ 605.277739] ? __lock_is_held+0xb5/0x140 [ 605.281858] blkdev_get_by_dev+0x3f/0x80 [ 605.285926] lock_rdev+0xa2/0x150 [ 605.289383] ? md_delayed_delete+0x30/0x30 [ 605.293625] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 605.299172] ? alloc_pages_current+0x114/0x210 [ 605.303768] md_import_device+0x20b/0x4f0 [ 605.307924] ? md_rdev_clear+0x6b0/0x6b0 [ 605.311992] ? find_held_lock+0x36/0x1c0 [ 605.316093] add_new_disk+0x57c/0x1900 [ 605.319993] ? md_reload_sb+0xbf0/0xbf0 [ 605.323979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.329529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 605.335075] ? _copy_from_user+0xdf/0x150 [ 605.339247] md_ioctl+0x4b3e/0x63e0 [ 605.342882] ? check_same_owner+0x340/0x340 [ 605.347216] ? do_raw_spin_unlock+0xa7/0x2f0 [ 605.351634] ? add_new_disk+0x1900/0x1900 [ 605.355825] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.361373] ? futex_wait_queue_me+0x562/0x840 [ 605.365964] ? print_usage_bug+0xc0/0xc0 [ 605.370032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.375576] ? get_futex_value_locked+0xcb/0xf0 [ 605.380254] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 605.385274] ? futex_wait_setup+0x281/0x410 [ 605.389606] ? futex_wake+0x760/0x760 [ 605.393415] ? __lock_acquire+0x7fc/0x5020 [ 605.397657] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.403204] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 605.408313] ? futex_wait+0x5d2/0xa20 [ 605.412123] ? mark_held_locks+0x160/0x160 [ 605.416369] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 605.421569] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 605.427120] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 605.432235] ? futex_wake+0x304/0x760 [ 605.436049] ? lock_downgrade+0x8f0/0x8f0 [ 605.440212] ? graph_lock+0x170/0x170 [ 605.444019] ? do_futex+0x249/0x27d0 [ 605.447738] ? rcu_is_watching+0x8c/0x150 [ 605.451891] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 605.456595] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 605.461275] ? find_held_lock+0x36/0x1c0 [ 605.465343] ? add_new_disk+0x1900/0x1900 [ 605.469499] blkdev_ioctl+0x9cd/0x2030 [ 605.473395] ? blkpg_ioctl+0xc40/0xc40 [ 605.477293] ? kasan_check_read+0x11/0x20 [ 605.481448] ? rcu_is_watching+0x8c/0x150 [ 605.485600] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 605.490278] ? __fget+0x4d5/0x740 [ 605.493738] ? ksys_dup3+0x690/0x690 [ 605.497460] ? kasan_check_write+0x14/0x20 [ 605.501708] block_ioctl+0xee/0x130 [ 605.505341] ? blkdev_fallocate+0x400/0x400 [ 605.509670] do_vfs_ioctl+0x1de/0x1720 [ 605.513568] ? rcu_is_watching+0x8c/0x150 [ 605.517720] ? trace_hardirqs_on+0xbd/0x2c0 [ 605.522048] ? ioctl_preallocate+0x300/0x300 [ 605.526475] ? __fget_light+0x2f7/0x440 [ 605.530459] ? fget_raw+0x20/0x20 [ 605.533917] ? putname+0xf2/0x130 [ 605.537379] ? rcu_read_lock_sched_held+0x108/0x120 [ 605.542403] ? kmem_cache_free+0x246/0x280 [ 605.546646] ? __x64_sys_futex+0x47f/0x6a0 [ 605.550897] ? do_syscall_64+0x9a/0x820 [ 605.554881] ? do_syscall_64+0x9a/0x820 [ 605.558870] ? lockdep_hardirqs_on+0x421/0x5c0 [ 605.563460] ? security_file_ioctl+0x94/0xc0 [ 605.567881] ksys_ioctl+0xa9/0xd0 [ 605.571342] __x64_sys_ioctl+0x73/0xb0 [ 605.575236] do_syscall_64+0x1b9/0x820 [ 605.579133] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 605.584505] ? syscall_return_slowpath+0x5e0/0x5e0 [ 605.589531] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 605.594556] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 605.599579] ? recalc_sigpending_tsk+0x180/0x180 [ 605.604341] ? kasan_check_write+0x14/0x20 [ 605.608601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.613461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.618652] RIP: 0033:0x457089 [ 605.621855] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.640760] RSP: 002b:00007f42fa346c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.648474] RAX: ffffffffffffffda RBX: 00007f42fa3476d4 RCX: 0000000000457089 [ 605.655749] RDX: 00000000200000c0 RSI: 0000000040140921 RDI: 0000000000000003 [ 605.663017] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 605.670293] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 605.677562] R13: 00000000004cd4d0 R14: 00000000004c3f50 R15: 0000000000000000 [ 605.684833] [ 605.686465] Allocated by task 9002: [ 605.690107] save_stack+0x43/0xd0 [ 605.693565] kasan_kmalloc+0xc4/0xe0 [ 605.697284] kasan_slab_alloc+0x12/0x20 [ 605.701265] kmem_cache_alloc+0x12e/0x710 [ 605.705423] bdev_alloc_inode+0x1b/0x40 [ 605.709904] alloc_inode+0x63/0x190 [ 605.713556] iget5_locked+0x12e/0x1d0 [ 605.717366] bdget+0xb7/0x5e0 [ 605.720477] blkdev_get_by_dev+0x24/0x80 [ 605.724542] lock_rdev+0xa2/0x150 [ 605.727997] md_import_device+0x20b/0x4f0 [ 605.732173] add_new_disk+0x57c/0x1900 [ 605.736065] md_ioctl+0x4b3e/0x63e0 [ 605.739704] blkdev_ioctl+0x9cd/0x2030 [ 605.743595] block_ioctl+0xee/0x130 [ 605.747227] do_vfs_ioctl+0x1de/0x1720 [ 605.751121] ksys_ioctl+0xa9/0xd0 [ 605.754577] __x64_sys_ioctl+0x73/0xb0 [ 605.758470] do_syscall_64+0x1b9/0x820 [ 605.762363] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.767543] [ 605.769167] Freed by task 4492: [ 605.772452] save_stack+0x43/0xd0 [ 605.775911] __kasan_slab_free+0x11a/0x170 [ 605.780156] kasan_slab_free+0xe/0x10 [ 605.783960] kmem_cache_free+0x86/0x280 [ 605.787941] bdev_i_callback+0x20/0x30 [ 605.791831] rcu_process_callbacks+0xf78/0x27c0 [ 605.796522] __do_softirq+0x2eb/0xa74 [ 605.800315] [ 605.801948] The buggy address belongs to the object at ffff8801d5314840 [ 605.801948] which belongs to the cache bdev_cache of size 1336 [ 605.814612] The buggy address is located 120 bytes inside of [ 605.814612] 1336-byte region [ffff8801d5314840, ffff8801d5314d78) [ 605.826583] The buggy address belongs to the page: [ 605.831531] page:ffffea000754c500 count:1 mapcount:0 mapping:ffff8801dad754c0 index:0xffff8801d5314ffe [ 605.840975] flags: 0x2fffc0000000100(slab) [ 605.845219] raw: 02fffc0000000100 ffffea000754e548 ffff8801dad74548 ffff8801dad754c0 [ 605.853146] raw: ffff8801d5314ffe ffff8801d5314280 0000000100000002 0000000000000000 [ 605.861025] page dumped because: kasan: bad access detected [ 605.866727] [ 605.868354] Memory state around the buggy address: [ 605.873326] ffff8801d5314780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 605.880720] ffff8801d5314800: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 605.888095] >ffff8801d5314880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.895489] ^ [ 605.900701] ffff8801d5314900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.908073] ffff8801d5314980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 605.915431] ================================================================== [ 605.922782] Disabling lock debugging due to kernel taint [ 605.928227] Kernel panic - not syncing: panic_on_warn set ... [ 605.928227] [ 605.935600] CPU: 1 PID: 9002 Comm: syz-executor0 Tainted: G B 4.18.0-next-20180820+ #43 [ 605.945041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.954393] Call Trace: [ 605.956988] dump_stack+0x1c9/0x2b4 [ 605.960620] ? dump_stack_print_info.cold.2+0x52/0x52 [ 605.965827] ? lock_downgrade+0x8f0/0x8f0 [ 605.969986] panic+0x238/0x4e7 [ 605.973183] ? add_taint.cold.5+0x16/0x16 [ 605.977339] ? add_taint.cold.5+0x5/0x16 [ 605.981405] ? trace_hardirqs_off+0xaf/0x2b0 [ 605.985817] ? __lock_acquire+0x3829/0x5020 [ 605.990164] kasan_end_report+0x47/0x4f [ 605.994144] kasan_report.cold.7+0x76/0x30d [ 605.998471] __asan_report_load8_noabort+0x14/0x20 [ 606.003405] __lock_acquire+0x3829/0x5020 [ 606.007555] ? find_held_lock+0x36/0x1c0 [ 606.011622] ? mark_held_locks+0xc9/0x160 [ 606.015789] ? mark_held_locks+0x160/0x160 [ 606.020047] ? lockdep_hardirqs_on+0x421/0x5c0 [ 606.024642] ? trace_hardirqs_on+0xbd/0x2c0 [ 606.028968] ? kasan_check_read+0x11/0x20 [ 606.033121] ? finish_task_switch+0x1d3/0x870 [ 606.037631] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 606.042735] ? compat_start_thread+0x80/0x80 [ 606.047148] ? kasan_check_write+0x14/0x20 [ 606.051414] ? finish_task_switch+0x2ca/0x870 [ 606.055923] ? __switch_to_asm+0x40/0x70 [ 606.059991] ? preempt_notifier_register+0x200/0x200 [ 606.065105] ? __switch_to_asm+0x34/0x70 [ 606.069169] ? __switch_to_asm+0x34/0x70 [ 606.073237] ? __switch_to_asm+0x40/0x70 [ 606.077299] ? __switch_to_asm+0x34/0x70 [ 606.081364] ? __switch_to_asm+0x40/0x70 [ 606.085430] ? __switch_to_asm+0x34/0x70 [ 606.089495] ? __switch_to_asm+0x40/0x70 [ 606.093580] ? __switch_to_asm+0x34/0x70 [ 606.097658] ? __switch_to_asm+0x34/0x70 [ 606.101737] ? __switch_to_asm+0x40/0x70 [ 606.105799] ? __switch_to_asm+0x34/0x70 [ 606.109868] ? __switch_to_asm+0x40/0x70 [ 606.113935] ? __switch_to_asm+0x34/0x70 [ 606.118004] ? __switch_to_asm+0x40/0x70 [ 606.122108] ? __schedule+0x884/0x1df0 [ 606.125999] ? __sched_text_start+0x8/0x8 [ 606.130152] lock_acquire+0x1e4/0x4f0 [ 606.133961] ? blkdev_get+0x5f2/0xb50 [ 606.137767] ? destroy_inode+0x15e/0x200 [ 606.141855] ? lock_release+0x9f0/0x9f0 [ 606.145833] ? check_same_owner+0x340/0x340 [ 606.150178] ? blkdev_get+0x5f2/0xb50 [ 606.153986] __mutex_lock+0x171/0x1700 [ 606.157900] ? blkdev_get+0x5f2/0xb50 [ 606.161704] ? blkdev_get+0x5f2/0xb50 [ 606.165510] ? mutex_trylock+0x2b0/0x2b0 [ 606.169576] ? kasan_check_read+0x11/0x20 [ 606.173744] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 606.178362] ? mark_held_locks+0xc9/0x160 [ 606.182513] ? iput+0x5ff/0xa00 [ 606.185801] ? inode_add_lru+0x2a0/0x2a0 [ 606.189882] ? kasan_check_write+0x14/0x20 [ 606.194137] ? do_raw_spin_lock+0xc1/0x200 [ 606.198391] ? kobject_put+0x8e/0x280 [ 606.202213] ? __blkdev_get+0x4ab/0x13c0 [ 606.206280] ? blkdev_get_block+0xc0/0xc0 [ 606.210431] ? kasan_check_write+0x14/0x20 [ 606.214672] mutex_lock_nested+0x16/0x20 [ 606.218735] ? mutex_lock_nested+0x16/0x20 [ 606.222979] blkdev_get+0x5f2/0xb50 [ 606.226612] ? _raw_spin_unlock+0x22/0x30 [ 606.230764] ? blkdev_direct_IO+0x11a0/0x11a0 [ 606.235269] ? bdget+0x5e0/0x5e0 [ 606.238640] ? bd_may_claim+0xd0/0xd0 [ 606.242445] ? badblocks_init+0x1f/0x30 [ 606.246428] ? md_rdev_init+0x45f/0x570 [ 606.250410] ? __lock_is_held+0xb5/0x140 [ 606.254479] blkdev_get_by_dev+0x3f/0x80 [ 606.258564] lock_rdev+0xa2/0x150 [ 606.262063] ? md_delayed_delete+0x30/0x30 [ 606.266324] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 606.271878] ? alloc_pages_current+0x114/0x210 [ 606.276468] md_import_device+0x20b/0x4f0 [ 606.280627] ? md_rdev_clear+0x6b0/0x6b0 [ 606.284690] ? find_held_lock+0x36/0x1c0 [ 606.288765] add_new_disk+0x57c/0x1900 [ 606.292661] ? md_reload_sb+0xbf0/0xbf0 [ 606.296647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.302197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 606.307766] ? _copy_from_user+0xdf/0x150 [ 606.311923] md_ioctl+0x4b3e/0x63e0 [ 606.315560] ? check_same_owner+0x340/0x340 [ 606.319889] ? do_raw_spin_unlock+0xa7/0x2f0 [ 606.324304] ? add_new_disk+0x1900/0x1900 [ 606.328468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.334012] ? futex_wait_queue_me+0x562/0x840 [ 606.338604] ? print_usage_bug+0xc0/0xc0 [ 606.342688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.348235] ? get_futex_value_locked+0xcb/0xf0 22:29:09 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) r1 = gettid() timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) socket$inet6(0xa, 0x1000000000002, 0x0) rt_sigreturn() 22:29:09 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x4020940d, &(0x7f0000000b80)={{0x1}}) 22:29:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) socketpair(0xa, 0x80003, 0x87, &(0x7f00000001c0)) 22:29:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0x0, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, [], 0x0, 0xe}, 0x48) 22:29:09 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000180)=""/127, &(0x7f0000000200)=0x7f) gettid() timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, &(0x7f0000040000)) rt_sigreturn() 22:29:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="4596c9727ba6ef40464adc4f0f00fe000030492a768b112c126728"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0xe21, 0xbb, &(0x7f0000000480)=""/187}, 0x48) 22:29:09 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0xc0045878, &(0x7f0000000b80)={{0x1}}) [ 606.352932] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 606.357999] ? futex_wait_setup+0x281/0x410 [ 606.362324] ? futex_wake+0x760/0x760 [ 606.366145] ? __lock_acquire+0x7fc/0x5020 [ 606.370409] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 606.375954] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 606.381065] ? futex_wait+0x5d2/0xa20 [ 606.384888] ? mark_held_locks+0x160/0x160 [ 606.389130] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 606.394329] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 606.399909] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 606.405021] ? futex_wake+0x304/0x760 [ 606.408836] ? lock_downgrade+0x8f0/0x8f0 [ 606.412999] ? graph_lock+0x170/0x170 [ 606.416807] ? do_futex+0x249/0x27d0 [ 606.420525] ? rcu_is_watching+0x8c/0x150 [ 606.424677] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 606.429352] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 606.434052] ? find_held_lock+0x36/0x1c0 [ 606.438150] ? add_new_disk+0x1900/0x1900 [ 606.442305] blkdev_ioctl+0x9cd/0x2030 [ 606.446196] ? blkpg_ioctl+0xc40/0xc40 [ 606.450103] ? kasan_check_read+0x11/0x20 [ 606.454268] ? rcu_is_watching+0x8c/0x150 [ 606.458430] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 606.463116] ? __fget+0x4d5/0x740 [ 606.466580] ? ksys_dup3+0x690/0x690 [ 606.470298] ? kasan_check_write+0x14/0x20 [ 606.474545] block_ioctl+0xee/0x130 [ 606.478182] ? blkdev_fallocate+0x400/0x400 [ 606.482512] do_vfs_ioctl+0x1de/0x1720 [ 606.486407] ? rcu_is_watching+0x8c/0x150 [ 606.490561] ? trace_hardirqs_on+0xbd/0x2c0 [ 606.494895] ? ioctl_preallocate+0x300/0x300 [ 606.499308] ? __fget_light+0x2f7/0x440 [ 606.503289] ? fget_raw+0x20/0x20 [ 606.506746] ? putname+0xf2/0x130 [ 606.510210] ? rcu_read_lock_sched_held+0x108/0x120 [ 606.515235] ? kmem_cache_free+0x246/0x280 [ 606.519478] ? __x64_sys_futex+0x47f/0x6a0 [ 606.523724] ? do_syscall_64+0x9a/0x820 [ 606.527709] ? do_syscall_64+0x9a/0x820 [ 606.531689] ? lockdep_hardirqs_on+0x421/0x5c0 [ 606.536276] ? security_file_ioctl+0x94/0xc0 [ 606.540692] ksys_ioctl+0xa9/0xd0 [ 606.544152] __x64_sys_ioctl+0x73/0xb0 [ 606.548051] do_syscall_64+0x1b9/0x820 [ 606.551955] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 606.557326] ? syscall_return_slowpath+0x5e0/0x5e0 [ 606.562265] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 606.567289] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 606.572310] ? recalc_sigpending_tsk+0x180/0x180 [ 606.577365] ? kasan_check_write+0x14/0x20 [ 606.581607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 606.586460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.591677] RIP: 0033:0x457089 [ 606.594873] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.613776] RSP: 002b:00007f42fa346c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.621485] RAX: ffffffffffffffda RBX: 00007f42fa3476d4 RCX: 0000000000457089 [ 606.628759] RDX: 00000000200000c0 RSI: 0000000040140921 RDI: 0000000000000003 [ 606.636033] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 606.643315] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 606.650587] R13: 00000000004cd4d0 R14: 00000000004c3f50 R15: 0000000000000000 [ 606.658201] Dumping ftrace buffer: [ 606.661731] (ftrace buffer empty) [ 606.665418] Kernel Offset: disabled [ 606.669025] Rebooting in 86400 seconds..