[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 22.728012] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 24.659432] random: sshd: uninitialized urandom read (32 bytes read) [ 25.022720] random: sshd: uninitialized urandom read (32 bytes read) [ 25.732043] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.5' (ECDSA) to the list of known hosts. [ 31.339218] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/17 10:47:37 fuzzer started [ 32.707983] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/17 10:47:40 dialing manager at 10.128.0.26:37857 2018/08/17 10:47:44 syscalls: 1 2018/08/17 10:47:44 code coverage: enabled 2018/08/17 10:47:44 comparison tracing: enabled 2018/08/17 10:47:44 setuid sandbox: enabled 2018/08/17 10:47:44 namespace sandbox: enabled 2018/08/17 10:47:44 fault injection: enabled 2018/08/17 10:47:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/17 10:47:44 net packed injection: enabled 2018/08/17 10:47:44 net device setup: enabled [ 39.413937] random: crng init done 10:49:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x2000000003) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d0252926285717070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="f1000080000ef401803755b2d432aff9", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000200), 0x0) sendmmsg$unix(r2, &(0x7f0000000d80)=[{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)='4', 0x1}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x48800) recvfrom$inet(r2, &(0x7f0000000240)=""/184, 0xb8, 0x0, &(0x7f0000000180), 0x10) 10:49:19 executing program 2: r0 = socket$inet6(0xa, 0x18000000803, 0x45) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000040)="fd0e93b54407938eab6bd608502a02850a73e9c629aab6b4ff7b62c45a7bb1df"}) 10:49:19 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_getneigh={0x20, 0x1e, 0x501}, 0x20}}, 0x0) 10:49:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="900000000000000002000000000000000100000000450000000000000000000000000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0000000000000000000000000000002c0000000000000000"], 0x90) 10:49:19 executing program 5: 10:49:19 executing program 4: 10:49:19 executing program 6: 10:49:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = geteuid() setuid(r2) r3 = socket(0x15, 0x2000000000012, 0x7) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x48b40, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x28) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0xa0, "484f55ae926f9e5f38ac11fcdead0186ddebfd1cf1f1302782594fa21ae42c911cf3fadbaaf31b5a59634a78e145a3f5c57a2be8bac740a80f008aac93ba751f97cf1f365372677016a6663c77c5877aed6caf56adaef54cf213d0af0df86205095efb50b96708d3cf6b084018549b84ad6b23ba8bd96262bc098fa0e23fa1e7cd30cc4cf44ae84775ba6dbaa3ffb53cdd3c7b7ade0ea47a86507da125402d00"}, &(0x7f0000000000)=0xc4) socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7f, 0x20000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x1c0, [0x0, 0x20000480, 0x20000588, 0x20000748], 0x0, &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x238) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x149}}, 0x0) [ 133.543755] IPVS: ftp: loaded support on port[0] = 21 [ 133.557328] IPVS: ftp: loaded support on port[0] = 21 [ 133.571124] IPVS: ftp: loaded support on port[0] = 21 [ 133.572435] IPVS: ftp: loaded support on port[0] = 21 [ 133.602328] IPVS: ftp: loaded support on port[0] = 21 [ 133.615346] IPVS: ftp: loaded support on port[0] = 21 [ 133.620719] IPVS: ftp: loaded support on port[0] = 21 [ 133.645143] IPVS: ftp: loaded support on port[0] = 21 [ 135.943228] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.949910] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.983098] device bridge_slave_0 entered promiscuous mode [ 136.049545] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.055976] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.113588] device bridge_slave_0 entered promiscuous mode [ 136.154663] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.161097] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.187455] device bridge_slave_1 entered promiscuous mode [ 136.201436] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.207840] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.217264] device bridge_slave_0 entered promiscuous mode [ 136.226241] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.232694] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.245565] device bridge_slave_0 entered promiscuous mode [ 136.257019] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.263548] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.281562] device bridge_slave_0 entered promiscuous mode [ 136.292097] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.298530] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.308022] device bridge_slave_1 entered promiscuous mode [ 136.315533] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.321962] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.340971] device bridge_slave_0 entered promiscuous mode [ 136.352068] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.358548] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.368856] device bridge_slave_0 entered promiscuous mode [ 136.387614] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.398219] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.404613] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.428545] device bridge_slave_1 entered promiscuous mode [ 136.437622] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.444031] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.451894] device bridge_slave_1 entered promiscuous mode [ 136.460207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.467331] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.473795] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.482535] device bridge_slave_1 entered promiscuous mode [ 136.491378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.499800] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.506212] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.531629] device bridge_slave_0 entered promiscuous mode [ 136.547850] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.554323] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.575924] device bridge_slave_1 entered promiscuous mode [ 136.585333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.594993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.603032] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.609457] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.630839] device bridge_slave_1 entered promiscuous mode [ 136.649948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.658164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.668778] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.675185] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.688599] device bridge_slave_1 entered promiscuous mode [ 136.716892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.725083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.732607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.801648] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.827387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.881382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.890254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.971263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.026747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.052570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.084930] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.183469] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.194090] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.204553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.220860] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.281233] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.349417] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.377158] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.385714] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.396167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.413510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.424888] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.441443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.451191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.460183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.509745] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.516669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.529167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.536150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.581211] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.591700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.608300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.616786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.627143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.649348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.660451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.671214] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.680660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.700037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.723246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.759467] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.771902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.796738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.821104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.829969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.836873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.851067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.932083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.939736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.056938] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.070760] team0: Port device team_slave_0 added [ 138.105779] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.124575] team0: Port device team_slave_0 added [ 138.155852] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.177340] team0: Port device team_slave_0 added [ 138.195745] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.226291] team0: Port device team_slave_1 added [ 138.259508] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.270874] team0: Port device team_slave_0 added [ 138.288202] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.301472] team0: Port device team_slave_1 added [ 138.326586] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.341916] team0: Port device team_slave_0 added [ 138.381366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.388702] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.415192] team0: Port device team_slave_1 added [ 138.426063] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.445071] team0: Port device team_slave_1 added [ 138.456050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.472038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.488205] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.500049] team0: Port device team_slave_0 added [ 138.508094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.516023] team0: Port device team_slave_1 added [ 138.525069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 138.535312] team0: Port device team_slave_0 added [ 138.543895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.551971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.564072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.571331] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.578671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.603319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.625713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.642168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.660943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.670325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.677889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.686143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.696094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.704961] team0: Port device team_slave_1 added [ 138.714428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.726940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.742525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.757449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.765531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.774323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.790086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.804939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.815625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.831774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.841117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.848243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.857830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.870338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.886022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.896349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.903757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 138.911612] team0: Port device team_slave_1 added [ 138.917659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 138.926886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 138.936902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.948131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.971052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.986064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.001919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.009962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.021262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.028872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 139.036711] team0: Port device team_slave_0 added [ 139.046754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.056217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.065967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.090283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.120178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.141821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.150282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.161895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.170058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.177943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.193005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.204892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.219052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.257901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.286635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.311949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.323972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.332185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.340047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.347981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.359271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.369977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 139.378999] team0: Port device team_slave_1 added [ 139.390158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.405638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.426768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.439997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.476786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.505152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.518771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.526853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.535637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.544070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.552207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.562298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.580654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.590336] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 139.598842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.628959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.664330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.689076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.698158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.706154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.752864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.766368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.798419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.918954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 139.926284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.944231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.102747] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 140.109967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.127097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.744671] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.751326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.758355] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.764789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.792080] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 140.809242] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.815646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.822349] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.828750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.868851] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.041696] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.048135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.054823] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.061217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.112724] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.135506] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.141912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.148632] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.155028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.195457] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.246423] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.252854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.259654] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.266054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.333630] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.340135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.348258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.357127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.365293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.373794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.385214] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.391613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.398344] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.404735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.412219] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.435793] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.442210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.448918] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.455358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.507957] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 141.924804] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.931251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.937978] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.944391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.975351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 142.410975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.433339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.457139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.617270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.791706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.952320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.127550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.138986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.194981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.230881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.256118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.350268] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.445382] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.591904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.662437] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.668751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.682190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.732262] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.753271] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.773197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.803537] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 147.906871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 147.914173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.924664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.001694] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.008592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.020746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.174238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 148.217775] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.307273] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.313593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.325103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.349234] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.376804] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.383184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.394066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.424326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.451115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.471441] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.485913] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.504630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.516635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.636607] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.821545] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 148.827830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.842266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.924614] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.956653] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.061772] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.112027] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.272184] 8021q: adding VLAN 0 to HW filter on device team0 10:49:38 executing program 1: 10:49:38 executing program 2: 10:49:38 executing program 1: 10:49:38 executing program 2: 10:49:38 executing program 2: 10:49:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 10:49:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x852a6877, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) 10:49:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x14) close(r2) close(r1) 10:49:38 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0x0, r0, 0x0) [ 152.201848] binder: 6531:6534 got transaction to invalid handle [ 152.208383] binder: 6531:6534 transaction failed 29201/-22, size 24-0 line 2852 10:49:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xc3, &(0x7f0000000180)=""/195, 0x40f00}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vhost-vsock\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x71, &(0x7f0000000300), &(0x7f0000000000)=""/113}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x1000, 0xcc, &(0x7f0000000300)="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", &(0x7f0000001300)=""/204, 0x6}, 0x28) [ 152.269476] binder: undelivered TRANSACTION_ERROR: 29201 10:49:38 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000680)='\x00') getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001480)=""/142, &(0x7f0000000300)=0x8e) openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) sendmmsg(r1, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x28, 0x29, 0x2, "4bc333b8595a865187089d9bd700000004"}], 0x28}}], 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000200)=@nfc, 0x80) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xc00000, 0xbcb, 0x8}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r3, 0x800}, 0x8) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 10:49:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000000000fe000000bc4f00000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/61, &(0x7f0000000140)=0x3d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 10:49:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000180)=0x80) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0x969, 0x0, 0x9}, {0xacb, 0x0, 0xffffffffffffff81}, {0x3a5, 0x0, 0xfffffffffffffffd}, {0x816, 0x0, 0x12000000000000}]}) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040), 0x4) 10:49:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x4, 0x70bd2c, 0x25dfdbff, {0x2, 0xbf, 0x82, 0x0, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010300000000000000000200000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000400f60e3c3957998faeb14ee07442e61f9fb8d8a543294cf8e09d021bfd8adb5e48b6eee028090000008182810096174fe2188a27f0c834b3d2b7263b258393afd72421407bf6a045908c5286f31537a61612538790627d363da9b8b6ed51de3660e9f9c828f6781dd1ee6e228d610000000000", @ANYRES32=r1], 0x30}}, 0x0) 10:49:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x140, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x10001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0xfffffffffffffff8, 0x10, 0x5, 0x800}, &(0x7f0000000280)=0x18) [ 152.618884] IPVS: length: 142 != 8 [ 152.631066] binder: 6575:6590 ERROR: BC_REGISTER_LOOPER called without request [ 152.682968] IPVS: length: 142 != 8 10:49:39 executing program 6: r0 = getpgrp(0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x82000, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e23, @loopback}}}, 0x84) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000000c0)={r3, r4, 0x8001}) prlimit64(r0, 0x80000000007, &(0x7f0000000180), &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) 10:49:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="900000000000000002000000000000000100000000450000000000000000000000000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0000000000000000000000000000002c0000000000000000"], 0x90) 10:49:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") stat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) r2 = geteuid() r3 = getgid() sendmsg$unix(r1, &(0x7f0000001600)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000200)="43fe7c047e5a81f185f5654eff7612bdcbfddfd11ed761d217edeeaaa8ea384e8fcbbaf633f98bc1f2e77a50de2226b6ea7f777bccf791fc26fb83ad6445eb8b59bff6a0b7a92de8d765512d3d52fe75ea1b6f67a0966030f8dc7376dc0dad7c9bd60fd6cb343a31fe11b2206e39273878ee4d7df30b78b65f836cac59b9e3ce52d6c2aab1a84a90bb20bf12f35a5da7f08ee0f7d8175564259e283515c5758af4f2ea0ab6ebfca97c292bf19eaf4d2e4650bbc7b8657fee30d6261791dfd7c8d2807d74af4fe9e31a0b25f63c9dea108a51f99477dde97f0c4f5d422c3ea23b5253112027564af018", 0xe9}, {&(0x7f0000000040)="4291f42a0a1e29ef14151b728ff0dddbd64869", 0x13}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="d9f6af0041a2446520e1d65c33ed217534a7f98e5fb03ad649ea97ac3a63851ad935b558f41463037d0b628e99c2435687aaa98886ae1ac42d508e1a36f8ce72d510701f55ec540f89c9b6a3a6da07a559017ba299caf1c42e17b9ed32288b5112dce1c6939eaf7a7d122df2996e396a77d2940fa2e6c5c3a08a60da287ec38af4bc212a2d35c180a25095935c68", 0x8e}, {&(0x7f00000013c0)="2a537cccad74b8bd70f59b422fe44d4bd07aca1b8a076225974e5f221c3972fd124f5f61b5ec2d27ebd442ded2da57", 0x2f}, {&(0x7f0000001400)="e2c6d772ff483e9b27df45f9235c1220d1e8acfcb8c4f974361108a04d68c5ead36cefa4740b280b04b29fbad5ce46ff315dfbf0518dc82d9aebc35328dad4109bbcbc519d2bcbd2aab58bd73b9884c8450668ba8fafc051af3ed04b434b886b9c31d1298646845c37ec0e4e15fc0fbd1ca5d24d3b20b1804a09c15eec135a7829b788978c860e9fb43586484a2386eb1dc360683d38f9732453b7c668c8143e4b29927686d3f3c6715fec597a1351e6c6eeee8998fa0b67b75a92a1017d909139417fe250cef71d1e561b3f665017519937e89f0e0004a47e2c2008247552e72ba6a5ad", 0xe4}], 0x6, &(0x7f00000015c0)=ANY=[@ANYBLOB="200000ff000020004000000000000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x20000045}, 0x20000005) r4 = socket$inet6(0xa, 0x1000000000005, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000001900)='/dev/admmidi#\x00', 0x20000000004, 0x101000) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000016c0)) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000001680)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) accept4(r0, &(0x7f00000017c0)=@ax25, &(0x7f0000001840)=0x80, 0x80800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast1, @loopback, @mcast1, 0x0, 0x14, 0xbaa5, 0x400, 0xd5fc, 0x40000000, r6}) getsockopt$inet_buf(r4, 0x84, 0x7d, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) 10:49:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x101800) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000440)={"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"}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffc, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x6012, r2, 0x4000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000840)={0x0, 0x2f034873}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000008c0)={r3, 0x80000001, 0x30}, &(0x7f0000000900)=0xc) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2ea9bcae, 0x0, 0x1, 0xfffffffffffff801, 0x80, 0x0, 0x6, 0x6, 0x214, 0x38, 0x31d, 0xea, 0x3, 0x20, 0x2, 0xaf, 0x4, 0x4}, [{0x0, 0x20, 0x5, 0xfffffffffffffffc, 0x8, 0x4, 0x1, 0xd6da}, {0x0, 0x0, 0x4, 0x180000000000000, 0x1, 0x3f, 0xd5, 0x7}], "79632f0ee7f57c461f9c0f4d28e71d959081dc03f3ebd80e676c3a7f9e7363f5217abeafb4ac28d164fd1e5a3766463f4c529714f3f51918558979c4eeaad860c2fb6981a0c489af87cba03e2785311355b302ebddda8f394aac7e451a9981154d0ac2a4d1e76f4bcd1dc3a29921909a4d0de5088a2713239af74001dcbae3b783e88c9ad871217bd724e88b29f79b097d16b90d97799f9b21b6e6b483fb2b7f4d74bfdd692f16755eb09081", [[], []]}, 0x324) 10:49:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000000000fe000000bc4f00000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/61, &(0x7f0000000140)=0x3d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 10:49:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x408800) r3 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x10, 0x800) sendto$llc(r3, &(0x7f00000001c0)="3a72449c632d31db0839f94f58d7b0e3a410cd4ce349", 0x16, 0x800, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1, 0xff01}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 10:49:39 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a01000200000000000000000a0000000000000000000000"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000140)=""/43, 0x2b}], 0x3}}], 0x1, 0x0, &(0x7f0000001bc0)={0x77359400}) [ 152.847950] x86/PAT: syz-executor2:6617 map pfn RAM range req write-combining for [mem 0x18f184000-0x18f184fff], got write-back 10:49:39 executing program 5: r0 = accept$inet(0xffffffffffffff9c, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000340)={@rand_addr=0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x2e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000d40], 0x0, &(0x7f0000000000), &(0x7f0000000d40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'bcsf0\x00', 'syz_tun\x00', 'ifb0\x00', 'veth0\x00', @dev, [], @dev, [], 0x70, 0xf0, 0x140}, [@common=@log={'log\x00', 0x28, {{0x8001, "023cfd65fb1f4222efdcd50e8d1cd0c8a764fa7674c2f62e52c100f85a99", 0x1}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3f}}}]}, @common=@log={'log\x00', 0x28, {{0x0, "a338128c2a4f1be1cc0874fbca0d7d04f62b6050f245ed8eb70da0ae6577"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'yam0\x00', 'bcsf0\x00', 'ipddp0\x00', 'sit0\x00', @link_local, [], @remote, [], 0xe0, 0xe0, 0x118, [@connlabel={'connlabel\x00', 0x8, {{0x3574e58d, 0x3}}}, @time={'time\x00', 0x18, {{0x7, 0x7fffffff, 0xc614, 0xa254, 0x2, 0x6, 0x2}}}]}}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x360) 10:49:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x800, 0x4) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f00000010c0), &(0x7f0000000000)=0x60) 10:49:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fefc5ac52cac82a1a3ca3a0c23c6af4b43"], 0x2a) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0xfffffffffffffff7, 0x408180) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000003c0)={0x4628, {{0xa, 0x4e22, 0x7, @local, 0x9}}}, 0x88) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x8, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000140)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a80)={0xa0, 0x19, 0x1, {0x9, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_uid={'access'}}]}}) open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) 10:49:39 executing program 6: syz_emit_ethernet(0x1, &(0x7f00000a8fa2)=ANY=[@ANYRES16], &(0x7f0000387000)={0x0, 0x0, [0x0, 0xea2]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4200, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/56, 0x38000000000000}) [ 152.912265] x86/PAT: syz-executor2:6617 map pfn RAM range req write-combining for [mem 0x18f194000-0x18f194fff], got write-back 10:49:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="900000000000000002000000000000000100000000450000000000000000000000000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0000000000000000000000000000002c0000000000000000"], 0x90) [ 153.055190] 9pnet: Insufficient options for proto=fd [ 153.114024] 9pnet: Insufficient options for proto=fd [ 153.137850] 9pnet: Insufficient options for proto=fd [ 153.145151] 9pnet: Insufficient options for proto=fd [ 153.351776] binder_alloc: binder_alloc_mmap_handler: 6575 20001000-20004000 already mapped failed -16 [ 153.361576] binder: BINDER_SET_CONTEXT_MGR already set [ 153.367101] binder_alloc: 6575: binder_alloc_buf, no vma [ 153.367119] binder: 6575:6590 ioctl 40046207 0 returned -16 [ 153.378523] binder: 6575:6655 transaction failed 29189/-3, size 24-8 line 2967 [ 153.386127] binder: 6575:6655 BC_ACQUIRE_DONE u0000000000000000 no match [ 153.386387] binder: 6575:6590 Release 1 refcount change on invalid ref 1 ret -22 10:49:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000005c0)=[@acquire_done], 0x1, 0x0, &(0x7f0000000700)="c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x48, 0x0, &(0x7f0000000540)="d2a106b4076783e327e66970d55b3a566994090788d15ad87c5da6cae19f7354596f060bead9ff22661f40ba48a09ccf58597ffa1f6c9605c6dce0bae4486f911407f3a55c6c8eb8"}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x140, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x10001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0xfffffffffffffff8, 0x10, 0x5, 0x800}, &(0x7f0000000280)=0x18) 10:49:39 executing program 2: r0 = socket(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unshare(0x400) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x7, &(0x7f0000000000)="025c3f0a00145f8f764070") ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x9, 0xe28e, 0xb5, 0x3, 0x6, 0x3f, 0x7fff, 0x5, 0x9, 0x5, 0x8000, 0xfffffffffffffff8, 0x9}, {0x9, 0x6, 0x9, 0x7, 0x1f, 0x6, 0x0, 0x7, 0x4, 0x401, 0x5, 0xd7, 0x7}, {0x4, 0x7fff, 0x8970, 0x1ff, 0x7, 0x3ff, 0x3, 0x81, 0xc5, 0x7, 0x6, 0xfffffffffffffff7, 0xfffffffffffffffa}], 0xffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x28) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000240)={0x203aaad69efb28a2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) membarrier(0x0, 0x0) 10:49:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="745cc80700315f85715070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) memfd_create(&(0x7f0000000080)='proc$posix_acl_access\x00', 0x2) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xe7e, 0x0, 0x0, 0xffffeffffffffffe}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x2944}) 10:49:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000100}]}) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101000, 0x0) 10:49:39 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) dup3(r0, r0, 0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$HDIO_GETGEO(r2, 0x125e, &(0x7f0000000340)) 10:49:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="62695b54697a652d30303030303030303030303030303030a35ce0bf3030"]) 10:49:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) write$FUSE_DIRENT(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="900000000000000002000000000000000100000000450000000000000000000000000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0000000000000000000000000000002c0000000000000000"], 0x90) [ 153.431865] binder: 6575:6590 ERROR: BC_REGISTER_LOOPER called without request [ 153.433742] binder: release 6575:6577 transaction 3 out, still active [ 153.452890] binder: send failed reply for transaction 3, target dead 10:49:39 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x12d002, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000080)=""/46) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x56aa, 0x12, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) [ 153.505711] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 153.529207] XFS (loop4): unknown mount option [bi[Tize-0000000000000000£\à¿00]. 10:49:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x498, 0x130, 0x130, 0x270, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@arp={@local, @remote, 0x0, 0x0, @empty, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'eql\x00'}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="682b7f619f0e", @empty, @rand_addr, @multicast1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @dev, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) close(r3) dup3(r1, r2, 0x0) 10:49:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) io_setup(0x8, &(0x7f00000003c0)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) io_submit(r3, 0x129, &(0x7f0000000700)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000300)="f93586819321d25cf6fb8170a74374f5d1358bdb0ba09c07da", 0x0, 0x40, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f0000000400)="330d50c5019ad66eedc9942f5540e9a1cc89fef68d760b877fe4ac7572059c99e4913574b1874e5f362a28df6db63546ee136efb9072bce3ed20f82401d43fcaa825e474f23fa02c791d24546a8236dd20e85a821e0613529bf803b39b2db9919938e5ba39a86ad845719fa7326bf5d1873b12f981972857896275b1ff575d5f8f71af975fb83b28e90044a30434af73b8a522ea50561babb730302e0452d7f0ae82eef323d1c9c5013a5c5d3e2cfc75186d32996834ab70f42c081978b899f0eed4899e56684fa3aaf5bf90419ded82f89ec3e7ef9f670c696e26f7d4e35eeda1d06715f41ebbf4d8915b00f7314183186f0b07", 0x0, 0x7, 0x0, 0x1, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xf, 0x9, r1, &(0x7f0000000540)="305f93bfb1a06fe0dfa1775581deb55b9817221cce85c02d57ed40e6376b80920d538cd8b92f7d41ba64766f8458b0a8618daacc5462b27814f5df8653ac035c0ab296f94411b03a7a7bf849f3614382ca030c57d8250f884ded28a96f1e913deb8dcf30ed4eca1b78baa10cb5d6ed46764beed37f64ac0c94217fe681cd31e3cf08f2a808b81c07b5ec45e0daa13ffb84a1f50a7c54cd36e48fd298a4", 0x0, 0x9, 0x0, 0x1, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r2, &(0x7f0000000640)="581935450e80e1ab3c6950b364d937eff272f8316c9b3fe22a7bbc4e22002962c52418533df478866c4815d434e8261a7c3d1c605020c82208a34e8557e45a189bca3da591a2a4109e98b8edd58a759460187bb3947914a40b5ef599b504d79fa872fd99", 0x0, 0x71c, 0x0, 0x1, r4}]) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x7c) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x343000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x10001, @mcast2, 0x1}, {0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x1c0000000000000}, 0x6}, r6, 0x81}}, 0x48) [ 153.606751] binder: 6672:6685 ERROR: BC_REGISTER_LOOPER called without request 10:49:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x3e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) socketpair(0x2, 0x800, 0x4b994d76, &(0x7f0000000180)={0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x80000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="5c000000269d695ad7a5d9dc4faa60a15f63f7a87c4e3c3645f8154ad5e3dadb5696931083f0efdc181c3a7bd21502c7c72d360a95615abe4fa7c07f5491f2163061e5c1a317b8f7e04e4a9dea5498911c7cbd36f9553fddcfc5ebd352f89dd2421d0dd26f9cbd156a51d1b6a5b615cce0fcc113ccf0cc89bd8ee9825dc02dc2f86f572772cfaed03026f15c579ea231d0100e9eb25c746169cad72b595f7b4526a135bade759e7d3bff65dcc5249c1b44620ffc203b1afe2585e8ddbf3cb0cad7e61d869964b2e122b674a3d61fb70c"], &(0x7f00000000c0)=0x64) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x8000, 0xa, 0x7ff, 0x87, r3}, &(0x7f0000000140)=0x10) close(r1) 10:49:40 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000000)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000100)={{0x5, 0x6, 0x2, 0x2, '\x00', 0x401}, 0x5, 0x2, 0x3ff, r1, 0x7, 0x5, 'syz0\x00', &(0x7f0000000040)=["2e5c5e65746830d8707070302400", "626465762d40ce00", '[\x00', '\x00', '\x00', '\x00', '&\x00'], 0x1d, [], [0x2, 0x7, 0x7fff, 0xf]}) 10:49:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) 10:49:40 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x2, 0x40140) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ppp\x00', 0x801, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000002c40)={0x200}, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3f) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) [ 153.708403] ion_mmap: failure mapping buffer to userspace 10:49:40 executing program 1: r0 = socket$kcm(0x2, 0x2000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000080), 0x279) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x402402, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1a31, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x5, 0xa0, 0x1d5}, &(0x7f0000000140)=0x10) [ 153.771979] ion_mmap: failure mapping buffer to userspace 10:49:40 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40001, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0), &(0x7f0000000100)="9a", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r1) keyctl$read(0xb, r1, &(0x7f0000000140)=""/221, 0xdd) fallocate(r0, 0x0, 0x0, 0x4000000000010000) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000340)=""/231) 10:49:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x7ffffffd, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x401}], 0x1014001, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"]) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x20, 0x2) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000200)={0x5, 0x0, [{}, {}, {}, {}, {}]}) fchdir(r0) 10:49:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/urandom\x00', 0x82, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000100)={{0x100000000, 0x8, 0x5, 0x5, 0x9, 0x1}, 0x9}) r2 = dup(r0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 10:49:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x100000002272, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff01e, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) 10:49:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x480200) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x9, 0x59, 0x7272201c, 0x80000001, 0x8, 0x19b00078}, 0x3}, 0xa) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller1\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0xff, 0x0, 0x4, 0x1, 0x3f, 0x3, 0x3, [0x2, 0xfff]}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x4, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000200)=0x7, 0x4) userfaultfd(0x80800) 10:49:40 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x100) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000002c0)={{0x0, 0x7, 0x40, 0x3, 'syz1\x00', 0xfffffffffffffffb}, 0x6, 0x20000000, 0x401, r1, 0xa, 0x7fff, 'syz0\x00', &(0x7f0000000200)=['\x00', '((GPL@ppp0\x00', 'syz1\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', 'vboxnet1vboxnet1!^ppp1#eth0}/}cpuset]selinux\x00', '\x00', '/dev/snd/controlC#\x00', 'em1ppp1)vmnet1(:ppp0eth1cgroupwlan0vboxnet1\x00', 'syz1\x00'], 0xa9, [], [0x0, 0x4, 0x7fffffff]}) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0xffffffffffff0000, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105518, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x1]}) tee(r0, r2, 0x5, 0x0) 10:49:40 executing program 7: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x400000003) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x4002c0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x6, 0x100000000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={r2, 0x1}, 0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = getpgid(0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x1) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') link(&(0x7f0000000080)='./control/file0\x00', &(0x7f0000000140)='./control/file0\x00') syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f0000000240)='./control/file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000001c0)=ANY=[]) close(r0) 10:49:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7f, 0x4) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000000c0)=""/38) r2 = socket$inet6(0xa, 0xa, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendto$inet6(r2, &(0x7f0000000000)="e2", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4001, 0x0, @remote, 0x2}, 0x1c) listen(r2, 0xffffffffffffff7f) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000165bbd882e812053381a4e2521c39592df81b05818f46cd05e7d06c4e42c864c39555aa029d9d44c10473530a82d6baa8a3eea13b41fa02fdd61390e027f14c2f9fd556318865672b525a06b55095599654c3ea067a440eb59135cc091f3cbfe902ae"], 0x8) accept(r2, &(0x7f00000002c0)=@can, &(0x7f00000001c0)=0x28) [ 154.305579] binder: release 6672:6677 transaction 8 out, still active [ 154.322111] binder: send failed reply for transaction 8, target dead 10:49:40 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x800, 0x4a000) ioctl$TIOCNOTTY(r0, 0x5422) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ba68"]) read$FUSE(r1, &(0x7f0000003000), 0x4ea) read$FUSE(r1, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000008000), 0x139f) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002000), 0x10165) write$FUSE_OPEN(r1, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) ioctl(r2, 0x0, &(0x7f0000000b40)) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x4}, 0x50) 10:49:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, "6968448033751cc284f4b51a83ba483837d366fc5787dce97de68949a42e9336f86864cd532d8072562b4003c49a3a9337cd3954a9e04ba46336eae6246efc15261b585d014cb6c4546d52bae80ec2a5bb24f8a20781941260e38527c09f2e50b9609752bd5e07a4e2d893baf3d18dd7161cb0466e394cab301fc52d19ec9072"}) mlockall(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10) 10:49:40 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000280)={'vcan0\x00'}) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x4, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x523180, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in=@broadcast}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000200)=0xe8) setsockopt$inet_dccp_buf(r2, 0x21, 0xce, &(0x7f0000000040)="7261af3ff9aca242f9a6a2b231d66c9aa393f25fcec3282f392cbfe8c66b81d8d7b18e93d88a9c6a5d9cf7a67096d15498e2a5bb87a73219da9b17dd8676f591d7f8bdde0309de105576904a6d84ccf16401731d27b00df3318d88f5805dc033dde122fc5fee341c9c73ce3b4f831a753514f7889aea3f1641e040edfc4f24eaa11022064e935e128d647266b25e91075182", 0x92) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000240)={0x8000, 0x10001, 0x9, 0x1, 0x6, 0x8}) [ 154.487069] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 10:49:40 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000200001000073bdc4800000000600000008000300000000000400000008000100ac1414aae3bc81dcb674cbdd8a94ff660fb4f5200ed12ad1965ec1aa6f0a813c4be670d4688bfd43cb8f1a1c3d86bd6470296b253ee7a203bf1e27a63bda778e000f8f0ceac99f7b9ea5f89b47905fb02c627c3886be910142523c31f6974731bbf700f0dc34470d1b43b1953a571342fee8d0add68a7b886628f01f2281e44f4d3b973d68cb1db10a142390aa58b4cf9673fda6117e5410236b97f4266bbcd38d44d8ab7a22d2cde5a825362ad02d572fbc5995c96b38b034116062ef25ce6c66c7db2ea8b5d019c1e042f305"], 0x28}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x2, 0x8, 0x154, 0x400}) 10:49:40 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200000, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000200)={{0x50, 0x100}, 0x1}, 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0xdfb, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) write(r3, &(0x7f0000000140)="2810096009c87df4f5459c0ae230d33840ed3093ba5e0fb61a0c99fcb6096d69a96ef1a9a51c661aa953e98b4090ff9722b340888b13185800ebff3b175df86e3acf41307561e0ecdff507f541c83fd02255b10ec3d1a55ba41f", 0x5a) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000280)={0x0, 0x2, 0x8, &(0x7f0000000240)}) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) 10:49:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) 10:49:41 executing program 6: gettid() r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x49a, 0x100) finit_module(r0, &(0x7f0000000100)='/dev/dsp#\x00', 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) read$FUSE(r1, &(0x7f00000055c0), 0x52e) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x40, 0x0, 0x0, 0x200000000, 0x1}, 0x0) ioctl$int_in(r1, 0x800000c0045009, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @rand_addr=0x9}}, [0x2, 0x1, 0x7ff, 0x4, 0x1b, 0x5, 0x7, 0x245f, 0x80, 0x8, 0xac92, 0x1fa0, 0x0, 0x80000001, 0x6]}, &(0x7f00000002c0)=0x94) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000080)) connect$bt_rfcomm(r1, &(0x7f0000000300)={0x1f, {0x1, 0x7fffffff, 0x8001, 0xe8, 0x2, 0x4264ebcb}, 0x634}, 0xa) 10:49:41 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffff42, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2}, 0x90) r1 = semget(0x3, 0x1, 0x1) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/143) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101000, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) 10:49:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000300)={0x40}) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="dcd9cedcc8af4dd20287c445f1be2bd7fd1c389e98bb629b9b5b6628aa8b1ca9837319060c563197f6c14b859e7da0c4052f81d98ffc1df9622f8d5fe946e26dadb8aa0864d56f626b5dcb2162840117c0af51f08e12a71b006ee32ea027b28621e9b55077888510f7945f3d30bfa401325bde3248813cfe0589d626bc4a36f984652588eb4f5cfaed964955bd93577c7acf9919a563ef7e1e0674320bfb0905d30d71647e5e768e399cf74b9cbfa3ffda5919f990a5c19c618eeb53d531e711dd71de3e334d1a2216da68c7940e", 0xce}, {&(0x7f0000000240)="ee8f977718f0213feedeebf2c435245382493975bcc55547f184a86647b54b9b4fc61326f2f2dbc624deb257c0", 0x2d}], 0x2, 0x0, 0x0, 0x8010}, 0x48850) poll(&(0x7f0000000200)=[{}], 0x1, 0x0) dup2(r1, r1) [ 154.669536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 10:49:41 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000200)={0x4}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x88000) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000140)) ioctl$EVIOCSKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "4f3bdd75ce46e1019b55a1be58df7b55762023ad56d08f16133d2099807ad4d3"}) ioctl$KDADDIO(r3, 0x4b34, 0x1) [ 154.737455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 10:49:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000, 0x4) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/187) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x111000, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x4, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @broadcast}, 0x8, 0x96, 0x8, 0x0, 0x40, &(0x7f0000000100)='syzkaller0\x00', 0x3f, 0x1ff, 0x7}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002c0019012100001000000000030000000c000000080001005588d800"], 0x20}}, 0x0) 10:49:41 executing program 1: r0 = socket$inet6(0xa, 0xfffffffffffe, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0xffffca88}}}}}}, &(0x7f0000000000)) 10:49:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x40, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000002c0), &(0x7f0000000300)=0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x1}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7c}, &(0x7f0000000100)=0x8) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r3, 0x7}, &(0x7f00000001c0)=0x8) 10:49:41 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5, 0xbf0c, 0x400}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r1, 0x4}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/219, 0xdb) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000040)) 10:49:41 executing program 7: rt_sigsuspend(&(0x7f0000000180)={0x81}, 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80200, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0x4, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0x1000000009) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000004, 0x31, r0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000ff8)={&(0x7f0000000ff8), 0x8}) 10:49:41 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r0, &(0x7f00000035c0), 0x1000) ioctl$int_in(r1, 0x0, &(0x7f0000000040)) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3f, &(0x7f00000010c0)=0x2) read$FUSE(r0, &(0x7f00000000c0), 0x1000) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x4) 10:49:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x8000000000002, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="340000000e001000"]}) close(0xffffffffffffffff) 10:49:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x907b, 0x80000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xffff, @dev={0xfe, 0x80, [], 0x20}, 0x2}, 0x1c) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 10:49:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x6, 0x100000001, 0x12, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), &(0x7f0000000140), 0x1}, 0x20) 10:49:41 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040), 0x84000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000340)=""/178) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x3, 0xa1, [], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/161}, &(0x7f00000001c0)=0x78) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) r3 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xa28, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xb) 10:49:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x100000000, 0x80) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000480)={0x1, 0x7fffffff, [{0x6, 0x0, 0x9}]}) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2200, 0x0) r8 = getpid() write$cgroup_pid(r7, &(0x7f0000000180)=r8, 0x12) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r9 = gettid() r10 = gettid() setpgid(r9, r10) write$P9_RREADDIR(r1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0xfcf1) connect$pppoe(r5, &(0x7f00000003c0)={0x18, 0x0, {0x0, @broadcast, 'team_slave_0\x00'}}, 0x1e) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00') 10:49:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') umount2(&(0x7f0000000240)='./file0\x00', 0xa) 10:49:41 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, &(0x7f0000000080), 0x100000080000000) 10:49:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x200) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f00000001c0), 0x10) 10:49:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000003c0)="c744240000800000c744240200000000c7442406000000000f0114243e0f01cf66b8ee000f00d80f01ca640f175c5600b8010000000f01c12626660f12326765c7f800100000f30f51e9b9800000c00f3235000800000f30", 0x58}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="f20fbcbd0080000066b81f008ec8c4e205bcab27000000b8d13200000f23d80f21f835000000900f23f8c4e2fdb80d0b00000066baf80cb8bc068586ef66bafc0cec660f38820265f2af0fd2c9b8000001000f23c80f21f8350000b0000f23f8", 0x60}], 0x1, 0x80000037, &(0x7f0000000180), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000440)="0f01ef66ba610066ed0fc71d9e3100000f005700660f70c4dd26360f01ca440f06b9820300000f3240f44b0fc75903", 0x2f}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {0x0, 0x0, 0x0, 0x347, 0x5}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 155.600867] *** Guest State *** [ 155.604454] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 155.613439] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 155.622359] CR3 = 0x0000000000000000 [ 155.626344] RSP = 0x0000000000000f80 RIP = 0x0000000000008000 [ 155.632393] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 155.638524] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 10:49:42 executing program 4: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@extent_cache='extent_cache'}]}) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f0000000040)=""/32, 0x20, &(0x7f0000000240)=""/150, 0x3, 0x3}}, 0x68) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() fchown(r0, r1, r2) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) 10:49:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) [ 155.645280] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.653360] DS: sel=0x0000, attr=0x00087, limit=0x00000000, base=0x0000000000000000 [ 155.661447] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.669574] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.677640] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.685705] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.693743] GDTR: limit=0x00000000, base=0x0000000000000000 [ 155.701794] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.709824] IDTR: limit=0x00000000, base=0x0000000000000000 [ 155.709870] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.709884] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 155.709900] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 155.709912] Interruptibility = 00000008 ActivityState = 00000000 [ 155.709919] *** Host State *** [ 155.709934] RIP = 0xffffffff812079a4 RSP = 0xffff88018d4e7350 [ 155.709961] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 155.709979] FSBase=00007f3dc544b700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 155.709998] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 155.710018] CR0=0000000080050033 CR3=00000001ae628000 CR4=00000000001426e0 [ 155.710036] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 155.710050] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 155.710054] *** Control State *** 10:49:42 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810dcfa16bf33733b7a8961f9ec26a783f8", 0x30) r2 = accept$alg(r1, 0x0, 0x0) read(r2, &(0x7f0000000bc0)=""/93, 0x5d) recvmsg(r2, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) [ 155.710065] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 155.710075] EntryControls=0000d1ff ExitControls=0023efff [ 155.710091] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 155.710101] VMEntry: intr_info=8000030d errcode=00000000 ilen=00000000 [ 155.710110] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 155.710119] reason=80000021 qualification=0000000000000000 [ 155.710128] IDTVectoring: info=00000000 errcode=00000000 [ 155.710134] TSC Offset = 0xffffffaa95183948 [ 155.710145] EPT pointer = 0x00000001b0c9701e [ 155.733643] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.756816] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 155.774739] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.875837] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 155.892843] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.900037] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 155.915110] *** Guest State *** [ 155.918588] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 155.927626] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 155.935382] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.936513] CR3 = 0x0000000000000000 10:49:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x385100, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x0, 0x2}}, 0x14) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 10:49:42 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000040)={'ip6gre0\x00', @ifru_mtu=0x7}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}], 0x30) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000380)=[{0x0, 0x7, 0x6, 0x8, @time={0x0, 0x989680}, {0x7, 0x7f}, {0x9, 0xdaf7}, @connect={{0x1, 0x40}, {0x0, 0x9}}}, {0x7ff, 0x1, 0x6, 0x0, @tick=0x7ff, {0x9, 0x100000001}, {0xfe7, 0x8}, @connect={{0x100000000, 0x64}, {0x57, 0x1}}}, {0x2, 0x3, 0x9, 0x5, @tick=0x7a, {0x0, 0x2}, {0x6, 0x9}, @raw8={"d814f8056e95732a0027c50d"}}, {0x80000000, 0x80000001, 0x2, 0x1, @tick=0x40, {0x1f, 0x8}, {0x0, 0x2a}, @time=@time={0x77359400}}, {0x10001, 0x7f, 0x7, 0x1, @time={0x77359400}, {0x7ff}, {0x9, 0x80000001}, @raw32={[0x9, 0x100, 0x8]}}, {0xfff, 0x5, 0x4, 0x4, @time={r2, r3+30000000}, {0x4, 0x100000000}, {0x800, 0x5c}, @queue={0x0, {0x0, 0x8001}}}], 0x120) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000200)) [ 155.936524] RSP = 0xffff8801991ef350 RIP = 0xffffffff8120799f [ 155.936538] RFLAGS=0x00010042 DR7 = 0x0000000000000400 [ 155.936556] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 155.936574] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.943645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 155.947389] DS: sel=0x0000, attr=0x00087, limit=0x00000000, base=0x0000000000000000 [ 155.989646] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 155.997691] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.005736] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.013822] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.021920] GDTR: limit=0x00000000, base=0x0000000000000000 [ 156.029985] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.038013] IDTR: limit=0x00000000, base=0x0000000000000000 [ 156.046062] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 156.054265] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 156.060756] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 156.068258] Interruptibility = 00000000 ActivityState = 00000000 [ 156.074544] *** Host State *** [ 156.077793] RIP = 0xffffffff812079a4 RSP = 0xffff88018ffaf350 [ 156.083853] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 156.090343] FSBase=00007f3dc5409700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 10:49:42 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x4000000000000000, 0x52d880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x50, &(0x7f0000000380)}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nullb0\x00', 0x20000, 0x0) r1 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='\x00', 0xfffffffffffffff8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x18) r2 = request_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340), 0xffffffffffffffff) keyctl$reject(0x13, r1, 0xee, 0xe048, r2) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80) getsockopt$nfc_llcp(r4, 0x118, 0x5, &(0x7f0000000100)=""/195, 0xc3) setsockopt$llc_int(r3, 0x10c, 0x0, &(0x7f0000000000), 0x4) [ 156.099253] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 156.105264] CR0=0000000080050033 CR3=00000001ae628000 CR4=00000000001426f0 [ 156.112353] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 156.119080] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 156.125211] *** Control State *** [ 156.128712] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 156.135496] EntryControls=0000d1ff ExitControls=0023efff [ 156.141000] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 10:49:42 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="491df3a5f15d8038569f614d661833c12025a2fb582a551445f94d6f0568489b9da66be9400e66fd3b63fa40d78cc6943278e291279062f563ae1e53e96a702067551a8095a117e26fd0b24bffafff6b7838b2c4b0eb6ce08c0f015f7a35ff014457ae94f442a36d4fd6216885042cdb8faaa15fa43ddae2b6ae01fb4e05af8228105e5fcd062ae69e4a8265848cf39fae880cff1fa77efc6df8b75a75fc2d9804f78a18738a6b4691e7") r1 = dup2(r0, r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000100)) ioctl$SIOCGIFHWADDR(r1, 0x800448d3, &(0x7f00000001c0)) 10:49:42 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2800, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000100)="830aa773ffafe86863900587f663ce782684722ce78206e8744534467ddbf13bd2887a13670c8fbbd5b4c393b4e2d9a3b2da45eff8fc7157019ad70daeca5ff4a85d3d83", &(0x7f0000000180)=""/122}, 0x18) 10:49:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffffffffffffc}, 0x1c) listen(r0, 0x14040004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffff9c, 0x84, 0x4, &(0x7f0000000100)=0xffffffffffff0001, 0xfffffffffffffee4) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 156.147988] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 156.154700] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 156.161343] reason=80000021 qualification=0000000000000000 [ 156.167709] IDTVectoring: info=00000000 errcode=00000000 [ 156.173224] TSC Offset = 0xffffffaa95183948 [ 156.177593] EPT pointer = 0x00000001b0c9701e 10:49:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001800)='/dev/loop#\x00', 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000540)={0x8, 0xffffffffffffffdf}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0x6, 0x800, 0x1000000, 0x101}, 0x8, [0x0, 0x5, 0x7, 0x7, 0x10000, 0x1, 0x7, 0x673d, 0xcdd, 0x2, 0x8001, 0x5, 0xffff, 0x3, 0xc0, 0x1000, 0x46, 0x6, 0xa62, 0x0, 0x5cb, 0x1f19, 0x9, 0x6, 0x100000001, 0x1, 0x3, 0x59, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x9, 0x6, 0xfbb, 0x3f, 0x80, 0x9, 0x5, 0x8, 0x5, 0x7, 0x5, 0x800, 0x196d, 0x3ff, 0x9, 0x7fffffff, 0x6, 0xe, 0x1, 0xb1e, 0x10001, 0xfffffffffffffff7, 0x1f, 0x4, 0xa563, 0x3, 0x5, 0x6, 0x7, 0x9, 0x1], [0x7ff, 0x3, 0x10000, 0x4, 0x438, 0x100000001, 0x2, 0x1, 0x2, 0x3ff, 0x93d, 0x7, 0x800, 0x9, 0x4, 0x0, 0x10000, 0x80, 0x4, 0x8, 0x5f, 0x400, 0x9, 0x401, 0xfffffffffffffff8, 0x400, 0x4, 0x7, 0xfff, 0xfff, 0x7, 0x3, 0x80000001, 0x7, 0x400, 0xfffffffffffffffd, 0x9, 0x3, 0x18, 0x401, 0x7, 0x2, 0x7, 0x6, 0x5, 0x100, 0x2, 0x7, 0x2c, 0x0, 0x5, 0x9, 0x1, 0xfffffffffffffe3d, 0xa6e, 0x2, 0x7, 0x4, 0xffffffffffff85e7, 0x0, 0x40, 0x75, 0x3ff, 0xac], [0x7, 0xd0, 0x3, 0xfffffffffffffaa5, 0xd804, 0x1f9c, 0x2, 0x4, 0xfff, 0x5, 0x10000, 0x8, 0x8, 0x7f, 0x0, 0x1f, 0x3, 0x1, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x7, 0x7ff, 0x9, 0x80, 0x2, 0x101, 0x1000, 0x857b, 0x6, 0x2, 0xfff, 0x80, 0x8, 0x8, 0x81, 0x1, 0x100000000, 0x2, 0x10001, 0x200, 0x6, 0x8000, 0x100, 0x10, 0x8, 0x4, 0x2, 0x4, 0x100, 0xfffffffffffffc01, 0x1ff, 0x2, 0x3, 0xffffffffffffffe0, 0x35, 0x1, 0x3, 0x34c00000000, 0x8, 0x3f, 0x6, 0x7], [0xeb, 0x5, 0x8, 0x5, 0x5e, 0xb606, 0x2, 0x7, 0x100000001, 0x3, 0xd0d3, 0x3, 0x1e, 0x3f9, 0x4, 0x0, 0x80000000, 0x30000000000000, 0x100000001, 0x9, 0x5, 0x7fffffff, 0x9, 0x1, 0x9b, 0x6a, 0x5, 0x8, 0x6, 0x9, 0xffff, 0x80, 0x8, 0x6, 0x6, 0x1000, 0x8, 0xffffffffffffff85, 0x2b7f, 0xffffffff, 0x8, 0xfff, 0x80000000, 0x8000000000000000, 0x6e00000000, 0x0, 0x800, 0x8, 0x7, 0x5, 0x2, 0x8, 0x7f, 0x3, 0x6, 0x4, 0x0, 0x2, 0x81, 0x5, 0x4, 0x0, 0x100000000, 0xffffffffffffffc1]}, 0x45c) fcntl$addseals(r0, 0x409, 0x8) [ 156.242041] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.249342] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 10:49:42 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000180)={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x401}, 0x8) write$P9_RFLUSH(r0, &(0x7f0000000400)={0x7, 0x6d, 0x1}, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = dup(r2) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000002c0)={@mcast1, 0x5, 0x2, 0x3, 0x0, 0x8d3, 0x4000000000005f1a, 0x383}, &(0x7f0000000300)=0xffffffffffffffc6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000340)={0x8, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}}}, 0x88) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000100), 0x4) [ 432.575566] INFO: task syz-executor2:6882 blocked for more than 140 seconds. [ 432.583044] Not tainted 4.18.0+ #193 [ 432.587347] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.595588] syz-executor2 D22840 6882 4474 0x00000004 [ 432.601296] Call Trace: [ 432.603985] __schedule+0x87c/0x1ec0 [ 432.607752] ? __sched_text_start+0x8/0x8 [ 432.611917] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.616457] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 432.621493] ? trace_hardirqs_on+0xd/0x10 [ 432.625673] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.630215] ? finish_task_switch+0x1d3/0x870 [ 432.634739] ? finish_task_switch+0x18a/0x870 [ 432.639275] ? __switch_to_asm+0x34/0x70 [ 432.643367] ? preempt_notifier_register+0x200/0x200 [ 432.648487] ? __switch_to_asm+0x34/0x70 [ 432.652578] ? __switch_to_asm+0x40/0x70 [ 432.656639] ? __switch_to_asm+0x34/0x70 [ 432.660718] ? __switch_to_asm+0x40/0x70 [ 432.664973] ? __switch_to_asm+0x34/0x70 [ 432.669061] ? __switch_to_asm+0x40/0x70 [ 432.673139] ? __switch_to_asm+0x34/0x70 [ 432.677232] ? __switch_to_asm+0x34/0x70 [ 432.681313] ? graph_lock+0x170/0x170 [ 432.685167] ? __switch_to_asm+0x34/0x70 [ 432.689229] ? __switch_to_asm+0x40/0x70 [ 432.693309] schedule+0xfb/0x450 [ 432.696704] ? __schedule+0x1ec0/0x1ec0 [ 432.700712] ? find_held_lock+0x36/0x1c0 [ 432.704788] schedule_timeout+0x1cc/0x260 [ 432.708954] ? usleep_range+0x1a0/0x1a0 [ 432.712931] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.717380] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.722062] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.726603] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 432.731634] wait_for_completion+0x430/0x8d0 [ 432.736063] ? wait_for_completion_interruptible+0x950/0x950 [ 432.742004] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.746790] ? wake_up_q+0x100/0x100 [ 432.750519] ? retint_kernel+0x10/0x10 [ 432.754431] flush_work+0x531/0x900 [ 432.758068] ? try_to_grab_pending+0x180/0x9c0 [ 432.762668] ? insert_work+0x4f0/0x4f0 [ 432.766575] ? lock_downgrade+0x8f0/0x8f0 [ 432.770755] ? kasan_check_read+0x11/0x20 [ 432.775001] ? flush_workqueue_prep_pwqs+0x7f0/0x7f0 [ 432.780190] ? __cancel_work_timer+0x25c/0x830 [ 432.784794] __cancel_work_timer+0x4bd/0x830 [ 432.789224] ? graph_lock+0x170/0x170 [ 432.793031] ? mod_delayed_work_on+0x260/0x260 [ 432.797657] ? find_held_lock+0x36/0x1c0 [ 432.801732] ? lock_downgrade+0x8f0/0x8f0 [ 432.805897] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.810307] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.814905] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 432.820013] cancel_work_sync+0x17/0x20 [ 432.824015] p9_fd_close+0x36a/0x5b0 [ 432.827744] ? p9_poll_workfn+0x6d0/0x6d0 [ 432.831909] ? p9_fd_show_options+0x1c0/0x1c0 [ 432.836410] ? lockdep_init_map+0x9/0x10 [ 432.840612] p9_client_create+0xa9a/0x1770 [ 432.844869] ? p9_client_read+0xc60/0xc60 [ 432.849040] ? find_held_lock+0x36/0x1c0 [ 432.853114] ? __lockdep_init_map+0x105/0x590 [ 432.857632] ? kasan_check_write+0x14/0x20 [ 432.861877] ? __init_rwsem+0x1cc/0x2a0 [ 432.865867] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 432.870889] ? rcu_read_lock_sched_held+0x108/0x120 [ 432.875924] ? __kmalloc_track_caller+0x5f5/0x760 [ 432.880768] ? save_stack+0xa9/0xd0 [ 432.884416] ? save_stack+0x43/0xd0 [ 432.888044] ? kasan_kmalloc+0xc4/0xe0 [ 432.891950] ? kmem_cache_alloc_trace+0x152/0x780 [ 432.896952] ? memcpy+0x45/0x50 [ 432.900263] v9fs_session_init+0x21a/0x1a80 [ 432.904600] ? find_held_lock+0x36/0x1c0 [ 432.908771] ? v9fs_show_options+0x7e0/0x7e0 [ 432.913203] ? kasan_check_read+0x11/0x20 [ 432.917385] ? rcu_is_watching+0x8c/0x150 [ 432.921539] ? rcu_pm_notify+0xc0/0xc0 [ 432.925446] ? v9fs_mount+0x61/0x900 [ 432.929196] ? rcu_read_lock_sched_held+0x108/0x120 [ 432.934272] ? kmem_cache_alloc_trace+0x616/0x780 [ 432.939145] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 432.944729] v9fs_mount+0x7c/0x900 [ 432.948314] mount_fs+0xae/0x328 [ 432.951740] vfs_kern_mount.part.34+0xdc/0x4e0 [ 432.956357] ? may_umount+0xb0/0xb0 [ 432.960022] ? _raw_read_unlock+0x22/0x30 [ 432.964190] ? __get_fs_type+0x97/0xc0 [ 432.968123] do_mount+0x581/0x30e0 [ 432.971704] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.976190] ? copy_mount_string+0x40/0x40 [ 432.980468] ? copy_mount_options+0x5f/0x380 [ 432.984928] ? rcu_read_lock_sched_held+0x108/0x120 [ 432.989988] ? kmem_cache_alloc_trace+0x616/0x780 [ 432.994937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.000525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.006079] ? copy_mount_options+0x285/0x380 [ 433.010594] ksys_mount+0x12d/0x140 [ 433.014224] __x64_sys_mount+0xbe/0x150 [ 433.018215] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 433.023259] do_syscall_64+0x1b9/0x820 [ 433.027171] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.032137] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.037085] ? __switch_to_asm+0x34/0x70 [ 433.041149] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 433.046559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.051406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.056613] RIP: 0033:0x457089 [ 433.059810] Code: 08 e8 3b a9 fb ff 48 8b 44 24 20 48 8b 4c 24 18 48 8b 54 24 38 48 8b 7c 24 48 eb 8d 48 8b 6c 24 50 48 83 c4 58 c3 48 89 04 24 <48> 89 5c 24 08 e8 0d a9 fb ff 48 8b 44 24 40 48 8b 4c 24 48 48 8b [ 433.078801] RSP: 002b:00007f184d655c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.086535] RAX: ffffffffffffffda RBX: 00007f184d6566d4 RCX: 0000000000457089 [ 433.093817] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000 [ 433.101154] RBP: 00000000009301e0 R08: 0000000020000380 R09: 0000000000000000 [ 433.108456] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 433.115742] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000002 [ 433.123043] [ 433.123043] Showing all locks held in the system: [ 433.129374] 2 locks held by kworker/0:0/5: [ 433.133617] #0: 00000000859edd15 ((wq_completion)"events"){+.+.}, at: process_one_work+0xb44/0x1ba0 [ 433.142917] #1: 0000000080d248ce ((work_completion)(&m->wq)){+.+.}, at: process_one_work+0xb9b/0x1ba0 [ 433.152403] 1 lock held by khungtaskd/775: [ 433.156634] #0: 00000000f7b6766c (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 433.165273] 1 lock held by rsyslogd/4336: [ 433.169413] #0: 00000000053e0cae (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 433.177420] 2 locks held by getty/4427: [ 433.181390] #0: 0000000015ffae36 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.189653] #1: 0000000009263585 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.198521] 2 locks held by getty/4428: [ 433.202500] #0: 00000000c50cc89e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.210773] #1: 0000000005e1005a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.219646] 2 locks held by getty/4429: [ 433.223618] #0: 000000000ee7b89b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.231883] #1: 00000000b85b4c65 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.240747] 2 locks held by getty/4430: [ 433.244839] #0: 00000000095d4495 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.253105] #1: 00000000298bff94 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.261981] 2 locks held by getty/4431: [ 433.265949] #0: 00000000d0e906dc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.274286] #1: 000000000d70226b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.283183] 2 locks held by getty/4432: [ 433.287226] #0: 00000000b444c528 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.295534] #1: 00000000008eca05 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.304551] 2 locks held by getty/4433: [ 433.308543] #0: 000000009956c64c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 433.316849] #1: 0000000015d01459 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 433.325781] [ 433.327433] ============================================= [ 433.327433] [ 433.334479] NMI backtrace for cpu 1 [ 433.338134] CPU: 1 PID: 775 Comm: khungtaskd Not tainted 4.18.0+ #193 [ 433.344711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.354098] Call Trace: [ 433.356752] dump_stack+0x1c9/0x2b4 [ 433.360442] ? dump_stack_print_info.cold.2+0x52/0x52 [ 433.365625] ? vprintk_default+0x28/0x30 [ 433.369675] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 433.374881] nmi_cpu_backtrace.cold.3+0x48/0x88 [ 433.379539] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 433.384190] ? lapic_can_unplug_cpu.cold.29+0x3f/0x3f [ 433.389361] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 433.394618] arch_trigger_cpumask_backtrace+0x14/0x20 [ 433.399790] watchdog+0x9c4/0xf80 [ 433.403228] ? reset_hung_task_detector+0xd0/0xd0 [ 433.408105] ? kasan_check_read+0x11/0x20 [ 433.412245] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.416704] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 433.421795] ? __kthread_parkme+0x58/0x1b0 [ 433.426012] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 433.431016] ? trace_hardirqs_on+0xd/0x10 [ 433.435150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.440668] ? __kthread_parkme+0x106/0x1b0 [ 433.445038] kthread+0x35a/0x420 [ 433.448393] ? reset_hung_task_detector+0xd0/0xd0 [ 433.453212] ? kthread_bind+0x40/0x40 [ 433.456993] ret_from_fork+0x3a/0x50 [ 433.460775] Sending NMI from CPU 1 to CPUs 0: [ 433.465345] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 433.466302] Kernel panic - not syncing: hung_task: blocked tasks [ 433.479043] CPU: 1 PID: 775 Comm: khungtaskd Not tainted 4.18.0+ #193 [ 433.485624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.494953] Call Trace: [ 433.497524] dump_stack+0x1c9/0x2b4 [ 433.501135] ? dump_stack_print_info.cold.2+0x52/0x52 [ 433.506308] ? printk_safe_log_store+0x2f0/0x2f0 [ 433.511050] panic+0x238/0x4e7 [ 433.514225] ? add_taint.cold.5+0x16/0x16 [ 433.518354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.523873] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 433.529311] ? printk_safe_flush+0xd7/0x130 [ 433.533626] watchdog+0x9d5/0xf80 [ 433.537078] ? reset_hung_task_detector+0xd0/0xd0 [ 433.541913] ? kasan_check_read+0x11/0x20 [ 433.546054] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.550481] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 433.555809] ? __kthread_parkme+0x58/0x1b0 [ 433.560029] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 433.565026] ? trace_hardirqs_on+0xd/0x10 [ 433.569157] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.574692] ? __kthread_parkme+0x106/0x1b0 [ 433.578999] kthread+0x35a/0x420 [ 433.582359] ? reset_hung_task_detector+0xd0/0xd0 [ 433.587186] ? kthread_bind+0x40/0x40 [ 433.590966] ret_from_fork+0x3a/0x50 [ 433.595120] Dumping ftrace buffer: [ 433.598755] (ftrace buffer empty) [ 433.602455] Kernel Offset: disabled [ 433.606150] Rebooting in 86400 seconds..