[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   16.681422] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.
[   17.452616] random: sshd: uninitialized urandom read (32 bytes read)
[   17.781439] random: sshd: uninitialized urandom read (32 bytes read)

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   18.623301] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts.
[   24.070463] random: sshd: uninitialized urandom read (32 bytes read)
2018/08/01 09:04:19 fuzzer started
[   25.429082] random: cc1: uninitialized urandom read (8 bytes read)
2018/08/01 09:04:22 dialing manager at 10.128.0.26:46293
2018/08/01 09:04:23 syscalls: 1808
2018/08/01 09:04:23 code coverage: enabled
2018/08/01 09:04:23 comparison tracing: enabled
2018/08/01 09:04:23 setuid sandbox: enabled
2018/08/01 09:04:23 namespace sandbox: enabled
2018/08/01 09:04:23 fault injection: enabled
2018/08/01 09:04:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/08/01 09:04:23 net packed injection: enabled
2018/08/01 09:04:23 net device setup: enabled
[   30.454303] random: crng init done
09:04:50 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:04:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x11)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040))

09:04:50 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="afce"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:04:50 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca61", 0x38}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015)
sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg(r1, &(0x7f0000003580)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x70}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0)

09:04:50 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x324)
close(r1)

09:04:50 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000680))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x80000, &(0x7f0000000280))
mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f00000e7000))
mount(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0)

09:04:50 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)

09:04:50 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000000c0)={0xb, 0x100000001, "f5ba5b"}, 0x0)

[   54.673919] IPVS: ftp: loaded support on port[0] = 21
[   54.688092] IPVS: ftp: loaded support on port[0] = 21
[   54.688185] IPVS: ftp: loaded support on port[0] = 21
[   54.704279] IPVS: ftp: loaded support on port[0] = 21
[   54.734880] IPVS: ftp: loaded support on port[0] = 21
[   54.738265] IPVS: ftp: loaded support on port[0] = 21
[   54.769279] IPVS: ftp: loaded support on port[0] = 21
[   54.769799] IPVS: ftp: loaded support on port[0] = 21
[   56.424394] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.430932] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.441862] device bridge_slave_0 entered promiscuous mode
[   56.464118] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.470558] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.490774] device bridge_slave_0 entered promiscuous mode
[   56.498267] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.504680] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.512768] device bridge_slave_0 entered promiscuous mode
[   56.520005] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.526454] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.535142] device bridge_slave_0 entered promiscuous mode
[   56.544268] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.550655] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.558879] device bridge_slave_0 entered promiscuous mode
[   56.572438] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.578851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.589754] device bridge_slave_0 entered promiscuous mode
[   56.598189] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.604577] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.611730] device bridge_slave_1 entered promiscuous mode
[   56.622893] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.629308] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.636466] device bridge_slave_0 entered promiscuous mode
[   56.644564] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.650984] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.658168] device bridge_slave_1 entered promiscuous mode
[   56.665830] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.672250] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.680320] device bridge_slave_1 entered promiscuous mode
[   56.689055] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.695441] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.703462] device bridge_slave_1 entered promiscuous mode
[   56.709920] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.716371] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.723513] device bridge_slave_0 entered promiscuous mode
[   56.732662] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.739155] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.749565] device bridge_slave_1 entered promiscuous mode
[   56.757220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   56.765826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   56.773270] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.779744] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.787542] device bridge_slave_1 entered promiscuous mode
[   56.795067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   56.802303] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.808713] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.834835] device bridge_slave_1 entered promiscuous mode
[   56.846389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   56.854686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   56.863109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   56.871345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   56.884154] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.890541] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.910981] device bridge_slave_1 entered promiscuous mode
[   56.921218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   56.929466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   56.937317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   56.949420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   56.961322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   57.012774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   57.028178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   57.081011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   57.159329] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   57.171717] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.234168] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.249317] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.278245] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.288733] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.303681] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.345870] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.356379] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.383178] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.394379] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.419409] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.438167] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.484030] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.535142] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   57.562676] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.664745] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   57.811098] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   57.837909] team0: Port device team_slave_0 added
[   57.857874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   57.869714] team0: Port device team_slave_0 added
[   57.880842] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   57.902302] team0: Port device team_slave_0 added
[   57.939340] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   57.957588] team0: Port device team_slave_0 added
[   57.970671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   57.982314] team0: Port device team_slave_1 added
[   57.995231] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   58.003692] team0: Port device team_slave_0 added
[   58.011896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.019456] team0: Port device team_slave_1 added
[   58.040703] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.049042] team0: Port device team_slave_1 added
[   58.068051] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.076611] team0: Port device team_slave_1 added
[   58.082354] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   58.095012] team0: Port device team_slave_0 added
[   58.115037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.124459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.133311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   58.140554] team0: Port device team_slave_0 added
[   58.159450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.171505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.189381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.197576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.205694] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.212869] team0: Port device team_slave_1 added
[   58.220177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.229511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   58.238316] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   58.249937] team0: Port device team_slave_0 added
[   58.263143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.270477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.283551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.298057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.309087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.316511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.324167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.333243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   58.340172] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.347707] team0: Port device team_slave_1 added
[   58.355309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.365007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   58.372368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   58.381074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   58.389210] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.404588] team0: Port device team_slave_1 added
[   58.421599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.431544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.453090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.463421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.470871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.478473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.485830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.493532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.501214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.508708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.517151] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   58.524457] team0: Port device team_slave_1 added
[   58.531169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   58.538521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.549778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.561610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   58.569090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.576094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.596134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.607213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.615336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.623596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   58.630678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.638767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.646806] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   58.653917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.662065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.671656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   58.680239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   58.688873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   58.698538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   58.705599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.715510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.730290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.748440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.763933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.771628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.779356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.786883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.797575] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   58.806465] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   58.813624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.833463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.851595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.863915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.871601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.883667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.905243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.913397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   58.920551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.933379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.958359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   58.965467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.973551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.983821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   58.994114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   59.010631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.025426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.058359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.073683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.081921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   59.089054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.099658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.122903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   59.131710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   59.139888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.172635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.198137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.213493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.221440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   59.228753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.237113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.944257] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.950760] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.957445] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.963840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.987716] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.000373] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.006756] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.013401] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.019766] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.053561] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.063297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.074615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.093044] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.099439] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.106052] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.112381] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.122034] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.131994] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.138510] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.145086] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.151436] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.161664] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.279310] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.285743] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.292368] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.298745] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.338369] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.353884] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.360290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.367041] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.373422] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.396743] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.420643] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.427042] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.433682] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.440398] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.462343] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   60.472701] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.479109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.485776] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.492159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.499392] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   61.088127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.095732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.116267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.123446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.130825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.138151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.982782] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.082050] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.186724] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.195794] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.216781] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.238947] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.358776] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.389405] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.499137] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.560426] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.568553] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.586025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.596346] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.699020] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.736241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   64.774648] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   64.781046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.792486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.856909] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   64.863254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.874644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.909371] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   64.916145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.935422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.959492] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   64.966241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.993464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.014284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   65.020636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.031460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.049119] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   65.071709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.088371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.139275] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   65.148243] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   65.154717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.165204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.317073] 8021q: adding VLAN 0 to HW filter on device team0
[   65.351671] 8021q: adding VLAN 0 to HW filter on device team0
[   65.371016] 8021q: adding VLAN 0 to HW filter on device team0
[   65.392375] 8021q: adding VLAN 0 to HW filter on device team0
[   65.406819] 8021q: adding VLAN 0 to HW filter on device team0
[   65.424587] 8021q: adding VLAN 0 to HW filter on device team0
[   65.533711] 8021q: adding VLAN 0 to HW filter on device team0
[   65.562556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   65.568848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.577342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.949065] 8021q: adding VLAN 0 to HW filter on device team0
09:05:03 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000680))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x80000, &(0x7f0000000280))
mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f00000e7000))
mount(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0)

09:05:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)

09:05:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x11)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040))

09:05:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x324)
close(r1)

09:05:03 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000000c0)={0xb, 0x100000001, "f5ba5b"}, 0x0)

09:05:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x11)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040))

09:05:03 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000680))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x80000, &(0x7f0000000280))
mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f00000e7000))
mount(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0)

09:05:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)

09:05:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000000c0)={0xb, 0x100000001, "f5ba5b"}, 0x0)

09:05:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x324)
close(r1)

09:05:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x11)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040))

09:05:03 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="afce"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:05:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48)

09:05:03 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100))

09:05:03 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000680))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000)='selinuxfs\x00', 0x80000, &(0x7f0000000280))
mount(&(0x7f0000377ff8)='.', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5012, &(0x7f00000e7000))
mount(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0)

09:05:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100))

09:05:03 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0)
open_by_handle_at(r0, &(0x7f00000000c0)={0xb, 0x100000001, "f5ba5b"}, 0x0)

09:05:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x324)
close(r1)

09:05:03 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x4000000000080002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:05:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="afce"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:05:03 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0x5, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4)
sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000)

09:05:03 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100))

09:05:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f000055b000)=@file={0x1, './file0\x00'}, 0xa)
ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)={0x1000, ""/4096})
connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8)
sendmmsg$unix(r1, &(0x7f0000000040), 0x4924924924922fd, 0x0)
connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa)
close(r0)

[   68.263618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   68.286023] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
09:05:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5404, &(0x7f00009d4000))
ioctl$KDGKBLED(r1, 0xc0045405, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040))

09:05:03 executing program 2:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100))

09:05:03 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r1 = socket(0x1, 0x80001, 0x0)
io_setup(0x6, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}])

09:05:03 executing program 7:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="afce"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:05:03 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0x5, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4)
sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000)

[   68.377848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:05:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4e7)

09:05:03 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x4000000000080002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:05:04 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0x5, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4)
sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000)

09:05:04 executing program 2:
r0 = socket(0x1, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019", 0x9}], 0x0, &(0x7f0000000240)=ANY=[])
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setregid(0x0, r2)
setreuid(0x0, r1)
capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000001fe8)={0x20000fffffffc, 0xffffffffffffffff})
setgroups(0x2, &(0x7f0000000000)=[r2, r2])
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)

09:05:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xae71, &(0x7f0000000100)={0x0, 0x0, @ioapic})

09:05:04 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fffa, 0x0)
write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18}, 0x18)
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0xffffff43)

09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r1 = socket(0x1, 0x80001, 0x0)
io_setup(0x6, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}])

09:05:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4e7)

[   68.523627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:05:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="fd0fc78b0f0010220f0f070c0f2157b808008ee8263e0f74d5baf80c66b8fc98d68466efbafc0cb006eef3f464660f3835d3", 0x32}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000000), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:05:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xae71, &(0x7f0000000100)={0x0, 0x0, @ioapic})

[   68.601377] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[   68.637247] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use)
09:05:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4e7)

09:05:04 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0x5, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4)
sendto$inet6(r0, &(0x7f0000adb000), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000)

09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r1 = socket(0x1, 0x80001, 0x0)
io_setup(0x6, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}])

09:05:04 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x4000000000080002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:05:04 executing program 3:
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00')
sendfile(r0, r1, &(0x7f0000000040), 0x10000000000441)

09:05:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='overlay\x00', 0x0, 0x0)

09:05:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4e7)

09:05:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xae71, &(0x7f0000000100)={0x0, 0x0, @ioapic})

09:05:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="fd0fc78b0f0010220f0f070c0f2157b808008ee8263e0f74d5baf80c66b8fc98d68466efbafc0cb006eef3f464660f3835d3", 0x32}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000000), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
r1 = socket(0x1, 0x80001, 0x0)
io_setup(0x6, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}])

09:05:04 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_read_part_table(0x0, 0x1, &(0x7f0000003240)=[{&(0x7f0000002040)="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", 0x1fb, 0x5}])

[   68.809309] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:05:04 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x203d, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0xffffffdb)
ioctl$int_in(r2, 0x80000000005001, &(0x7f00000004c0))

09:05:04 executing program 3:
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00')
sendfile(r0, r1, &(0x7f0000000040), 0x10000000000441)

09:05:04 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x200000000000011, 0x4000000000080002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:05:04 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

09:05:04 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xae71, &(0x7f0000000100)={0x0, 0x0, @ioapic})

09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

[   68.942253] Dev loop6: unable to read RDB block 1
[   68.947199]  loop6:
[   68.949464] loop6: partition table partially beyond EOD, truncated
09:05:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="fd0fc78b0f0010220f0f070c0f2157b808008ee8263e0f74d5baf80c66b8fc98d68466efbafc0cb006eef3f464660f3835d3", 0x32}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000000), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[   69.020633] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   69.026038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:04 executing program 3:
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00')
sendfile(r0, r1, &(0x7f0000000040), 0x10000000000441)

09:05:04 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:04 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_read_part_table(0x0, 0x1, &(0x7f0000003240)=[{&(0x7f0000002040)="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", 0x1fb, 0x5}])

09:05:04 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

09:05:04 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="fd0fc78b0f0010220f0f070c0f2157b808008ee8263e0f74d5baf80c66b8fc98d68466efbafc0cb006eef3f464660f3835d3", 0x32}], 0x1, 0xffffff7ffffffffd, &(0x7f0000000000), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

09:05:04 executing program 3:
r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_trie\x00')
sendfile(r0, r1, &(0x7f0000000040), 0x10000000000441)

[   69.224691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
09:05:04 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

[   69.287256] Dev loop6: unable to read RDB block 1
[   69.292218]  loop6:
[   69.294496] loop6: partition table partially beyond EOD, truncated
09:05:05 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x203d, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0xffffffdb)
ioctl$int_in(r2, 0x80000000005001, &(0x7f00000004c0))

09:05:05 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:05 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:05 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)

09:05:05 executing program 3:
setitimer(0x0, &(0x7f0000a0b000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040))
alarm(0x0)

09:05:05 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_read_part_table(0x0, 0x1, &(0x7f0000003240)=[{&(0x7f0000002040)="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", 0x1fb, 0x5}])

09:05:05 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f000000d000)={0x77359400}, &(0x7f0000048000), 0x0)

09:05:05 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

09:05:05 executing program 3:
setitimer(0x0, &(0x7f0000a0b000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040))
alarm(0x0)

09:05:05 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)

09:05:05 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

[   69.832262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   69.862386] Dev loop6: unable to read RDB block 1
[   69.867355]  loop6:
[   69.869662] loop6: partition table partially beyond EOD, truncated
09:05:05 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
syz_read_part_table(0x0, 0x1, &(0x7f0000003240)=[{&(0x7f0000002040)="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", 0x1fb, 0x5}])

09:05:05 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:05 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)

09:05:05 executing program 3:
setitimer(0x0, &(0x7f0000a0b000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040))
alarm(0x0)

09:05:05 executing program 5:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = dup(r1)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0xaf01, &(0x7f0000016c40)={'ip6gre0\x00'})
close(r0)

[   69.971382] Dev loop6: unable to read RDB block 1
[   69.976339]  loop6:
[   69.978608] loop6: partition table partially beyond EOD, truncated
09:05:06 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x203d, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0xffffffdb)
ioctl$int_in(r2, 0x80000000005001, &(0x7f00000004c0))

09:05:06 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070")
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)

09:05:06 executing program 1:
setitimer(0x0, &(0x7f0000000100)={{0x0, 0x7530}, {0x0, 0x2710}}, &(0x7f00000000c0))
alarm(0x0)

09:05:06 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3)
sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8)

09:05:06 executing program 3:
setitimer(0x0, &(0x7f0000a0b000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040))
alarm(0x0)

09:05:06 executing program 6:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x20040, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1)

09:05:06 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f000000d000)={0x77359400}, &(0x7f0000048000), 0x0)

09:05:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x28, 0x20, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x32}]}, 0x28}}, 0x0)

09:05:06 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000140)=""/131, 0x83)

09:05:06 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005e0ffef000097"}], 0x20}, 0x0)

09:05:06 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x0)

09:05:06 executing program 6:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x20040, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1)

09:05:06 executing program 3:
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0)

09:05:06 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000140)=""/131, 0x83)

09:05:06 executing program 6:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x20040, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1)

09:05:06 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005e0ffef000097"}], 0x20}, 0x0)

[   70.750698] netlink: 'syz-executor5': attribute type 22 has an invalid length.
09:05:06 executing program 2:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000040)='./file0//ile0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x203d, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000140)=ANY=[], 0xffffffdb)
ioctl$int_in(r2, 0x80000000005001, &(0x7f00000004c0))

09:05:06 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x28, 0x20, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x32}]}, 0x28}}, 0x0)

09:05:06 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x0)

09:05:06 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000140)=""/131, 0x83)

09:05:06 executing program 6:
mkdir(&(0x7f0000000080)='./control\x00', 0x0)
r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x20040, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1)

09:05:06 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005e0ffef000097"}], 0x20}, 0x0)

09:05:07 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f000000d000)={0x77359400}, &(0x7f0000048000), 0x0)

09:05:07 executing program 3:
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0)

09:05:07 executing program 1:
perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000140)=""/131, 0x83)

09:05:07 executing program 6:
r0 = socket$inet6(0xa, 0x21000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070")
r1 = socket$inet(0x10, 0x4000000003, 0x0)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

09:05:07 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x0)

09:05:07 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmsg(r1, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "441005e0ffef000097"}], 0x20}, 0x0)

[   71.517587] netlink: 'syz-executor5': attribute type 22 has an invalid length.
09:05:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x28, 0x20, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x32}]}, 0x28}}, 0x0)

09:05:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0x4020ae76, &(0x7f00000004c0))

09:05:07 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x3, 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000040), 0x0, 0x4, 0x0, 0x0)

09:05:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x28, 0x20, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x32}]}, 0x28}}, 0x0)

[   71.607145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
[   71.620421] netlink: 'syz-executor5': attribute type 22 has an invalid length.
[   71.686262] netlink: 'syz-executor5': attribute type 22 has an invalid length.
09:05:07 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$inet(r0, &(0x7f0000000040), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14)
dup2(r1, r0)

09:05:07 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

09:05:07 executing program 6:
r0 = socket$inet6(0xa, 0x21000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070")
r1 = socket$inet(0x10, 0x4000000003, 0x0)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

09:05:07 executing program 3:
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0)

09:05:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0x4020ae76, &(0x7f00000004c0))

09:05:07 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000003d80)}}, {{&(0x7f0000006400)=@nl=@unspec, 0x80, &(0x7f0000007580), 0x0, &(0x7f00000075c0)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0)

[   72.342728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
09:05:07 executing program 0:
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, &(0x7f000000d000)={0x77359400}, &(0x7f0000048000), 0x0)

09:05:07 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1000000008912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000440), 0x8)

09:05:07 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000003d80)}}, {{&(0x7f0000006400)=@nl=@unspec, 0x80, &(0x7f0000007580), 0x0, &(0x7f00000075c0)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0)

09:05:07 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$inet(r0, &(0x7f0000000040), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14)
dup2(r1, r0)

09:05:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0x4020ae76, &(0x7f00000004c0))

09:05:07 executing program 3:
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x108, 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x2)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
execveat(r0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x0)

09:05:07 executing program 6:
r0 = socket$inet6(0xa, 0x21000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070")
r1 = socket$inet(0x10, 0x4000000003, 0x0)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

09:05:07 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

09:05:08 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000003d80)}}, {{&(0x7f0000006400)=@nl=@unspec, 0x80, &(0x7f0000007580), 0x0, &(0x7f00000075c0)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0)

09:05:08 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$inet(r0, &(0x7f0000000040), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14)
dup2(r1, r0)

09:05:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0x4020ae76, &(0x7f00000004c0))

[   72.499507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
09:05:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1000000008912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000440), 0x8)

09:05:08 executing program 6:
r0 = socket$inet6(0xa, 0x21000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070")
r1 = socket$inet(0x10, 0x4000000003, 0x0)
sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

09:05:08 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

09:05:08 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
connect$inet(r0, &(0x7f0000000040), 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14)
dup2(r1, r0)

09:05:08 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000003d80)}}, {{&(0x7f0000006400)=@nl=@unspec, 0x80, &(0x7f0000007580), 0x0, &(0x7f00000075c0)=[{0x10, 0x1}], 0x10}}], 0x2, 0x0)

[   72.688795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor6'.
09:05:08 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235004000000f300f091e0fc76ff50f060ff369002e0f01c866b8bc008ec8b9800000c00f3235000100000f3066ba4300ed", 0x38}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:05:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x8, {0x600}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0)

09:05:08 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0)

09:05:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1000000008912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000440), 0x8)

09:05:08 executing program 4:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0))
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
rmdir(&(0x7f0000000680)='./file0/file1\x00')

09:05:08 executing program 7:
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)={&(0x7f0000000800)='./file0\x00'}, 0x10)

09:05:08 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000680)='./file0\x00', 0x8000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000400)="1020f5f20100070009000000030000000c0000000900000002000000010000000000000000480000000000000d00000024000000020000000200000002000000020000001a000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000000340)={[{@acl='acl'}, {@disable_roll_forward='disable_roll_forward'}, {@extent_cache='extent_cache'}]})

09:05:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x200000000000001, 0x0)
getgid()
fchown(r0, 0x0, 0x0)

09:05:08 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000010bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400000000000404000001000000b7050000230000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xc0, &(0x7f00000000c0)="0900000000000a8a4b37f3031145", &(0x7f0000000280)=""/192}, 0x28)

[   73.310291] F2FS-fs (loop5): Fix alignment : done, start(5120) end(19456) block(13312)
[   73.348034] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
09:05:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1000000008912, &(0x7f0000000280)="025c3f0a00145f8f764070")
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ppoll(&(0x7f00000003c0)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x1c9c380}, &(0x7f0000000440), 0x8)

09:05:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x8, {0x600}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0)

09:05:08 executing program 7:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a")
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x20011, r2, 0x0)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000200)=0x10)

09:05:08 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0)

[   73.355259] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
09:05:08 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x200000000000001, 0x0)
getgid()
fchown(r0, 0x0, 0x0)

09:05:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x8, {0x600}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0)

09:05:08 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0)

09:05:08 executing program 6:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000004c0)="b9800000c00f3235004000000f300f091e0fc76ff50f060ff369002e0f01c866b8bc008ec8b9800000c00f3235000100000f3066ba4300ed", 0x38}], 0x1, 0x0, &(0x7f0000000580), 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:05:08 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0x1a}, 'lo\x00'}})

[   73.491252] attempt to access beyond end of device
[   73.496338] loop5: rw=12288, want=8200, limit=64
09:05:09 executing program 0:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x200000000000001, 0x0)
getgid()
fchown(r0, 0x0, 0x0)

[   73.542331] kasan: CONFIG_KASAN_INLINE enabled
[   73.547092] kasan: GPF could be caused by NULL-ptr deref or user memory access
[   73.554504] general protection fault: 0000 [#1] SMP KASAN
[   73.560076] CPU: 1 PID: 6984 Comm: syz-executor5 Not tainted 4.18.0-rc7-next-20180801+ #29
[   73.568484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   73.579603] RIP: 0010:validate_checkpoint+0x66d/0xec0
[   73.584822] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00
[   73.603742] RSP: 0018:ffff88019ca26be8 EFLAGS: 00010246
[   73.609100] RAX: dffffc0000000000 RBX: ffff88019ca26f30 RCX: ffffc90007e24000
[   73.616375] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005
[   73.623638] RBP: ffff88019ca26f58 R08: ffff8801b50a0080 R09: fffff94000e2e63e
[   73.630893] R10: fffff94000e2e63e R11: ffffea00071731f7 R12: fffffffffffffffb
[   73.638160] R13: ffff88019ca26eb0 R14: 0000000000000003 R15: ffff88019b630540
[   73.645435] FS:  00007f6c5bd9f700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
[   73.653665] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   73.659547] CR2: 0000000020000140 CR3: 00000001c9dd1000 CR4: 00000000001426e0
[   73.666808] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   73.674063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   73.681324] Call Trace:
[   73.683908]  ? get_checkpoint_version+0x620/0x620
[   73.688750]  ? save_stack+0xa9/0xd0
[   73.692364]  ? save_stack+0x43/0xd0
[   73.695989]  ? kasan_kmalloc+0xc4/0xe0
[   73.699874]  ? __kmalloc+0x14e/0x760
[   73.703576]  ? f2fs_get_valid_checkpoint+0x390/0x1ec0
[   73.708752]  ? f2fs_fill_super+0x2d42/0x8110
[   73.713157]  ? mount_bdev+0x314/0x3e0
[   73.716943]  ? f2fs_mount+0x3c/0x50
[   73.720585]  ? vfs_get_tree+0x1cb/0x5c0
[   73.724559]  ? do_mount+0x6f2/0x1e20
[   73.728271]  ? ksys_mount+0x12d/0x140
[   73.732071]  ? __x64_sys_mount+0xbe/0x150
[   73.736205]  ? do_syscall_64+0x1b9/0x820
[   73.740267]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   73.745628]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   73.750642]  ? map_id_range_down+0x1ee/0x430
[   73.755045]  ? lock_acquire+0x1e4/0x540
[   73.759006]  ? fs_reclaim_acquire+0x20/0x20
[   73.763313]  ? lock_downgrade+0x8f0/0x8f0
[   73.767464]  ? lock_release+0xa30/0xa30
[   73.771422]  ? kasan_check_read+0x11/0x20
[   73.775559]  ? check_same_owner+0x340/0x340
[   73.779868]  ? iget_locked+0x525/0x5c0
[   73.783743]  ? kasan_unpoison_shadow+0x35/0x50
[   73.788310]  ? kasan_kmalloc+0xc4/0xe0
[   73.792187]  ? __kmalloc+0x315/0x760
[   73.795893]  ? f2fs_get_valid_checkpoint+0x390/0x1ec0
[   73.801069]  f2fs_get_valid_checkpoint+0x436/0x1ec0
[   73.806076]  ? _raw_spin_unlock+0x22/0x30
[   73.810217]  ? f2fs_recover_orphan_inodes+0x1180/0x1180
[   73.815567]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   73.821089]  ? f2fs_iget+0x4f5/0x4fa0
[   73.824876]  ? __debug_object_init+0x581/0x12e0
[   73.829552]  ? lock_downgrade+0x8f0/0x8f0
[   73.833701]  ? lock_downgrade+0x8f0/0x8f0
[   73.837835]  ? kasan_check_read+0x11/0x20
[   73.841970]  ? f2fs_inode_chksum_set+0xf0/0xf0
[   73.846536]  ? do_raw_spin_trylock+0x1c0/0x1c0
[   73.851106]  ? kasan_check_write+0x14/0x20
[   73.855332]  ? trace_hardirqs_on+0xd/0x10
[   73.859480]  ? __debug_object_init+0x581/0x12e0
[   73.864143]  ? lock_acquire+0x1e4/0x540
[   73.868104]  ? debug_object_activate+0x41a/0x690
[   73.872847]  ? lock_downgrade+0x8f0/0x8f0
[   73.876980]  ? save_stack+0x43/0xd0
[   73.880593]  ? kasan_check_read+0x11/0x20
[   73.884736]  ? do_raw_spin_unlock+0xa7/0x2f0
[   73.889138]  ? lock_acquire+0x1e4/0x540
[   73.893119]  ? __percpu_counter_init+0x2ad/0x370
[   73.897878]  ? lock_downgrade+0x8f0/0x8f0
[   73.902013]  ? kasan_check_read+0x11/0x20
[   73.906155]  ? do_raw_spin_unlock+0xa7/0x2f0
[   73.910555]  ? do_raw_spin_trylock+0x1c0/0x1c0
[   73.915135]  ? kasan_check_write+0x14/0x20
[   73.919367]  ? do_raw_spin_lock+0xc1/0x200
[   73.923591]  ? trace_hardirqs_on+0xd/0x10
[   73.927727]  ? __percpu_counter_init+0x2b2/0x370
[   73.932471]  ? percpu_counter_cpu_dead+0x1c0/0x1c0
[   73.937399]  ? __init_waitqueue_head+0x9e/0x150
[   73.942056]  ? init_wait_entry+0x1c0/0x1c0
[   73.946281]  f2fs_fill_super+0x2d42/0x8110
[   73.950507]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   73.955531]  ? f2fs_commit_super+0x400/0x400
[   73.959926]  ? prealloc_shrinker+0x231/0x4a0
[   73.964321]  ? __init_waitqueue_head+0x9e/0x150
[   73.968979]  ? check_same_owner+0x340/0x340
[   73.973287]  ? __lockdep_init_map+0x105/0x590
[   73.977769]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   73.982779]  ? widen_string+0xe0/0x2e0
[   73.986652]  ? format_decode+0xaf0/0xaf0
[   73.990702]  ? string+0x225/0x2d0
[   73.994143]  ? widen_string+0x2e0/0x2e0
[   73.998107]  ? register_shrinker_prepared+0x15b/0x1c0
[   74.003303]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   74.008836]  ? bdev_name.isra.8+0x1a1/0x1f0
[   74.013149]  ? pointer+0x157/0x990
[   74.016677]  ? netdev_bits+0xb0/0xb0
[   74.020394]  ? format_decode+0x1b1/0xaf0
[   74.024442]  ? set_precision+0xe0/0xe0
[   74.028314]  ? do_raw_spin_unlock+0xa7/0x2f0
[   74.032714]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   74.038248]  ? vsnprintf+0x20d/0x1b60
[   74.042045]  ? vsprintf+0x40/0x40
[   74.045486]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[   74.050490]  ? set_blocksize+0x2c1/0x340
[   74.054542]  mount_bdev+0x314/0x3e0
[   74.058159]  ? mount_bdev+0x314/0x3e0
[   74.061951]  ? f2fs_commit_super+0x400/0x400
[   74.066347]  f2fs_mount+0x3c/0x50
[   74.069799]  ? kill_f2fs_super+0x330/0x330
[   74.074021]  legacy_get_tree+0x131/0x460
[   74.078070]  vfs_get_tree+0x1cb/0x5c0
[   74.081867]  ? vfs_set_fs_source+0x12c/0x180
[   74.086263]  do_mount+0x6f2/0x1e20
[   74.089791]  ? copy_mount_string+0x40/0x40
[   74.094011]  ? kasan_kmalloc+0xc4/0xe0
[   74.097887]  ? kmem_cache_alloc_trace+0x318/0x780
[   74.102718]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[   74.108256]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   74.113782]  ? copy_mount_options+0x285/0x380
[   74.118278]  ksys_mount+0x12d/0x140
[   74.121908]  __x64_sys_mount+0xbe/0x150
[   74.125873]  do_syscall_64+0x1b9/0x820
[   74.129748]  ? finish_task_switch+0x1d3/0x870
[   74.134230]  ? syscall_return_slowpath+0x5e0/0x5e0
[   74.139149]  ? syscall_return_slowpath+0x31d/0x5e0
[   74.144066]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[   74.149068]  ? __switch_to_asm+0x34/0x70
[   74.153119]  ? __switch_to_asm+0x34/0x70
[   74.157175]  ? __switch_to_asm+0x40/0x70
[   74.161222]  ? __switch_to_asm+0x34/0x70
[   74.165268]  ? __switch_to_asm+0x40/0x70
[   74.169314]  ? __switch_to_asm+0x34/0x70
[   74.173360]  ? __switch_to_asm+0x40/0x70
[   74.177420]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[   74.182254]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[   74.187718] RIP: 0033:0x45943a
[   74.190899] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 bd 8a fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8a fb ff c3 66 0f 1f 84 00 00 00 00 00
[   74.209789] RSP: 002b:00007f6c5bd9ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[   74.217488] RAX: ffffffffffffffda RBX: 00007f6c5bd9eb30 RCX: 000000000045943a
[   74.224745] RDX: 00007f6c5bd9ead0 RSI: 0000000020000680 RDI: 00007f6c5bd9eaf0
[   74.232361] RBP: 0000000020000680 R08: 00007f6c5bd9eb30 R09: 00007f6c5bd9ead0
[   74.239632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000014
[   74.246891] R13: 0000000000000000 R14: 00000000004c8ea0 R15: 0000000000000000
[   74.254165] Modules linked in:
[   74.257355] Dumping ftrace buffer:
[   74.260887]    (ftrace buffer empty)
[   74.264651] ---[ end trace acf3ad7636c22a39 ]---
[   74.269453] RIP: 0010:validate_checkpoint+0x66d/0xec0
[   74.274676] Code: e8 58 05 7f fe 4c 8d 6b 80 4d 8d 74 24 08 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 c6 04 02 00 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 f4 06 00 00 4c 89 ea 4d 8b 7c 24 08 48 b8 00 00
[   74.293606] RSP: 0018:ffff88019ca26be8 EFLAGS: 00010246
[   74.299007] RAX: dffffc0000000000 RBX: ffff88019ca26f30 RCX: ffffc90007e24000
[   74.306302] RDX: 0000000000000000 RSI: ffffffff82fd9658 RDI: 0000000000000005
[   74.313589] RBP: ffff88019ca26f58 R08: ffff8801b50a0080 R09: fffff94000e2e63e
[   74.320885] R10: fffff94000e2e63e R11: ffffea00071731f7 R12: fffffffffffffffb
[   74.328166] R13: ffff88019ca26eb0 R14: 0000000000000003 R15: ffff88019b630540
[   74.335451] FS:  00007f6c5bd9f700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000
[   74.343686] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   74.349578] CR2: 0000000020000140 CR3: 00000001c9dd1000 CR4: 00000000001426e0
[   74.356879] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   74.364162] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   74.371442] Kernel panic - not syncing: Fatal exception
[   74.377280] Dumping ftrace buffer:
[   74.380813]    (ftrace buffer empty)
[   74.384515] Kernel Offset: disabled
[   74.388140] Rebooting in 86400 seconds..