[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 21.748931] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 23.898077] random: sshd: uninitialized urandom read (32 bytes read) [ 24.151407] random: sshd: uninitialized urandom read (32 bytes read) [ 24.877453] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.192' (ECDSA) to the list of known hosts. [ 30.467972] random: sshd: uninitialized urandom read (32 bytes read) 2018/08/28 04:54:41 fuzzer started [ 31.714460] random: cc1: uninitialized urandom read (8 bytes read) 2018/08/28 04:54:43 dialing manager at 10.128.0.26:33033 2018/08/28 04:54:51 syscalls: 1 2018/08/28 04:54:51 code coverage: enabled 2018/08/28 04:54:51 comparison tracing: enabled 2018/08/28 04:54:51 setuid sandbox: enabled 2018/08/28 04:54:51 namespace sandbox: enabled 2018/08/28 04:54:51 fault injection: enabled 2018/08/28 04:54:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/08/28 04:54:51 net packed injection: enabled 2018/08/28 04:54:51 net device setup: enabled [ 58.165920] random: crng init done 04:58:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000000003, 0x2) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}}) 04:58:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000540)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000140007020000000000000000027f0006"], 0x1}}, 0x0) 04:58:19 executing program 7: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="88"}, 0x20) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000140), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x0, 0x80fe}, 0x1a6, &(0x7f00000001c0), 0x19}, 0x0) 04:58:19 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, &(0x7f0000000280)) 04:58:19 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 04:58:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000000)='8', 0x1}], 0x1) 04:58:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x2c) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 04:58:19 executing program 6: perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xffffffffffffff91) [ 248.882140] IPVS: ftp: loaded support on port[0] = 21 [ 248.883109] IPVS: ftp: loaded support on port[0] = 21 [ 248.912226] IPVS: ftp: loaded support on port[0] = 21 [ 248.923306] IPVS: ftp: loaded support on port[0] = 21 [ 248.924695] IPVS: ftp: loaded support on port[0] = 21 [ 248.943007] IPVS: ftp: loaded support on port[0] = 21 [ 248.944242] IPVS: ftp: loaded support on port[0] = 21 [ 248.979107] IPVS: ftp: loaded support on port[0] = 21 [ 251.456736] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.463257] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.486159] device bridge_slave_0 entered promiscuous mode [ 251.496414] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.502842] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.515563] device bridge_slave_0 entered promiscuous mode [ 251.525706] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.532120] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.552260] device bridge_slave_0 entered promiscuous mode [ 251.561837] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.568241] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.575671] device bridge_slave_0 entered promiscuous mode [ 251.588547] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.594984] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.603098] device bridge_slave_0 entered promiscuous mode [ 251.612995] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.619393] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.630716] device bridge_slave_0 entered promiscuous mode [ 251.659583] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.666017] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.685737] device bridge_slave_1 entered promiscuous mode [ 251.704983] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.711419] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.728232] device bridge_slave_1 entered promiscuous mode [ 251.747760] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.754183] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.762202] device bridge_slave_1 entered promiscuous mode [ 251.769955] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.776364] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.791883] device bridge_slave_1 entered promiscuous mode [ 251.806106] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.812549] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.820395] device bridge_slave_0 entered promiscuous mode [ 251.830072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.838460] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.844864] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.868728] device bridge_slave_1 entered promiscuous mode [ 251.883974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.891057] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.897540] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.915560] device bridge_slave_0 entered promiscuous mode [ 251.923226] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.929708] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.944213] device bridge_slave_1 entered promiscuous mode [ 251.952333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.961237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.969904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 251.979982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 251.988646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.004229] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.010791] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.055635] device bridge_slave_1 entered promiscuous mode [ 252.072168] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.078570] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.100737] device bridge_slave_1 entered promiscuous mode [ 252.110553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.127777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.136403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.145374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.156647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.271819] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 252.293568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.347045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.392610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 252.456466] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.534932] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.567636] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.619078] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.629848] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.698210] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.710330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.722734] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.775617] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.791840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 252.798994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.815048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.835297] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.858338] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 252.869591] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.880979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 252.888256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.937012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 252.944010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.961908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 252.968847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.990336] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.000401] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.007363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.025116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.035984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.045201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.067079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 253.089919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.100615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.120327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.127236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.147226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.193719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.219636] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.227168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.242214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.249488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.273838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 253.289950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.305219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.312126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.394970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.401939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.417554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.424479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.440819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 253.448958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.516805] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.532104] team0: Port device team_slave_0 added [ 253.562265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.574732] team0: Port device team_slave_0 added [ 253.690652] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.711441] team0: Port device team_slave_1 added [ 253.724007] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.737239] team0: Port device team_slave_0 added [ 253.771672] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.789151] team0: Port device team_slave_1 added [ 253.797325] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.807041] team0: Port device team_slave_0 added [ 253.823053] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.833963] team0: Port device team_slave_0 added [ 253.853398] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.867193] team0: Port device team_slave_0 added [ 253.886370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 253.902056] team0: Port device team_slave_0 added [ 253.909885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 253.917015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 253.924218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.936754] team0: Port device team_slave_1 added [ 253.944776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 253.960082] team0: Port device team_slave_1 added [ 253.981279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.994630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.019792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.032863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.041634] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.050101] team0: Port device team_slave_1 added [ 254.058295] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.065780] team0: Port device team_slave_1 added [ 254.073996] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.083570] team0: Port device team_slave_1 added [ 254.096222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.103950] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 254.121486] team0: Port device team_slave_0 added [ 254.130119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.137302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.157541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.182630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.197138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.208461] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.216303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.223677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.233314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.253549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.267015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.277400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.287139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.297272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.312929] team0: Port device team_slave_1 added [ 254.321877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.331883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.338984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.351022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.369639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.382066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.399045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.417051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.425653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.433335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.441115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.448659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.456372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.467303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.477019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.486906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.497167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.506098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 254.512959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.533107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.563080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.582217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.590459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.598399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.606190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.614108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.621698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.629346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.638458] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.647920] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.655122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.665012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.674275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.682319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.699897] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.707350] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.716147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.725440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.734962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.751186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.784097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.793857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.807550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.815392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.823337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.831097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.841554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.850826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 254.863667] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.873335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.885565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 254.895596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.919561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.953133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.972218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.986667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.994845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.002761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.010539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.018393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.026261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.038190] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.046784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.057636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.082439] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 255.090007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.107177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.134844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 255.153816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.192655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.238123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.246237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.269287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.318097] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 255.325314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.344228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.479937] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.486485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.493545] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.499942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.538313] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.544769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.559097] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.565554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.572231] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.578638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.595154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.608216] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.614604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.621278] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.627664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.635356] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.654370] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.660781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.667476] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.673880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.712136] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.720580] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.726979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.733685] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.740090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.776563] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.842494] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.848942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.855680] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.862073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.918757] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.946130] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.952556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.959268] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.965680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.026966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 257.063889] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.070330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.077056] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.083472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.147581] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 257.548857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.562361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.577155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.600163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.608952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.617179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.624689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.459540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.523668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.646896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.680558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.705740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.733602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.855966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.026845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.045070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.077222] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.177737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.186802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.210169] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.314582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.374157] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.610886] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 263.622119] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.640641] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.648298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.656116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.682316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.709998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.745312] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.757819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.774309] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.782809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.803274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.831381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.853260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.869133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.877130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.895273] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 263.923266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.933627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.108008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.114311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.128071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.171400] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 264.179154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.194294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.285233] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.313863] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.336254] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.364694] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.390968] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.567339] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.617857] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.761784] 8021q: adding VLAN 0 to HW filter on device team0 04:58:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) ioctl(r1, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") read$FUSE(r0, &(0x7f0000001000), 0x72a) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r0) 04:58:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) ioctl(r1, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r0) 04:58:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000003580)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d0252926285717070") connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000f49fff)='{', 0x1, 0x4008000, &(0x7f0000de5ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)="f1", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 04:58:38 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = userfaultfd(0x0) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r0, r1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0), 0x10) [ 267.880047] hrtimer: interrupt took 51291 ns [ 267.901122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 267.930243] binder: 6471:6483 BC_FREE_BUFFER u0000000000000000 no match [ 267.937388] binder: 6471:6483 Release 1 refcount change on invalid ref 3 ret -22 04:58:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9205, 0x0) [ 267.945088] binder: 6471:6483 BC_ACQUIRE_DONE u0000000000000000 no match [ 267.952253] binder: 6471:6483 got reply transaction with no transaction stack [ 267.959726] binder: 6471:6483 transaction failed 29201/-71, size 64-8 line 2762 04:58:38 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xc002, 0x0) 04:58:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffea9e000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) [ 268.067600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 04:58:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00006c4f60)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) write(r1, &(0x7f0000805000), 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x4) writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) [ 268.134089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 04:58:39 executing program 0: 04:58:39 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_mreqsrc(r0, 0x10d, 0x2, &(0x7f0000013ff4)={@remote, @loopback}, 0xc) socket$inet6(0xa, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:58:39 executing program 4: [ 268.207873] binder: 6471:6483 BC_FREE_BUFFER u0000000000000000 no match [ 268.214803] binder: 6471:6483 Release 1 refcount change on invalid ref 3 ret -22 [ 268.222412] binder: 6471:6483 BC_ACQUIRE_DONE u0000000000000000 no match [ 268.229320] binder: 6471:6483 got reply transaction with no transaction stack [ 268.236843] binder: 6471:6483 transaction failed 29201/-71, size 64-8 line 2762 04:58:39 executing program 2: 04:58:39 executing program 3: 04:58:39 executing program 7: 04:58:39 executing program 6: 04:58:39 executing program 0: 04:58:39 executing program 4: 04:58:39 executing program 5: 04:58:39 executing program 2: 04:58:39 executing program 2: 04:58:39 executing program 1: 04:58:39 executing program 7: 04:58:39 executing program 4: 04:58:39 executing program 5: 04:58:39 executing program 6: 04:58:39 executing program 0: 04:58:39 executing program 3: 04:58:39 executing program 2: 04:58:39 executing program 6: 04:58:39 executing program 5: 04:58:39 executing program 3: 04:58:39 executing program 4: 04:58:39 executing program 7: 04:58:39 executing program 2: 04:58:39 executing program 0: 04:58:39 executing program 1: 04:58:39 executing program 5: 04:58:39 executing program 7: 04:58:39 executing program 6: 04:58:39 executing program 4: 04:58:40 executing program 2: 04:58:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xc002, 0x0) 04:58:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)="2cb0d142e2a39548680b06ab8bfe646a6e8a4b28179178999b147c09db77bf3e90f1ed3d291538ee946b4c19e8e8dde94222820ab4b52c151a7930ef6d5cbaac1b4a7721d780f6f4b3843f306017aebe8fc5c134cfa17a8a70a2dd877e98e994eac0c24baa167ef91baffbeb824fd7deb443cf7c01c347e35af5d161e3669dd3b5bbdb4c2f82d5b214e2dd9f17a4f666a247f2ab5ac723ebd9fe2be307e353fcbdac98d95b45ccfa6a109bb209201c8308262ec562a834f26c") pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) getresgid(&(0x7f0000000340), &(0x7f0000000500), &(0x7f0000000540)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x2000000, &(0x7f0000000600)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x4}}]}}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)='trustedGPLproc{\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001500)) getegid() syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001880)) fstat(0xffffffffffffffff, &(0x7f0000001980)) 04:58:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="8a5c010700315f85715070") syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)) 04:58:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x24, 0x0, &(0x7f00000003c0)=[@release, @acquire_done, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 04:58:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="2f6a7374617400c65381b47aaedf2af5c8af3423fc41891bd2a3c56d8c88e29bad43f1da906e855ff182de04227edcbbc2b1df8f180e158e8abd442cc049cffda030ff277875ee010000000000000000000000000000000000000000000000f532144d1671a6cdf5069e5bddcf25cd7f23956b4a82df900f5eb5763b4fe8cc7172962d2590b2dca2a1308c382541b053194d9027d83ee7ba2e3280857f8f9f63fc90bae959c6e67078bf97e615bfd9409914958aadcfb37973543c60d83526e5c267f7dfa54bd524cc9671dedd665199322bdadee125a35b40b7be0c07301f439a7edfa26fa98277c8078b02e2076291c33787c58b0eabbc39288fc10509409de108f5ca26a8c8e1afb70b2a9569cf8f4cdb6d4e97eb7fdf241dee160e6071618333cc0b0e8bc6a17a0b7d604550fd149ad078ffe54c6392fba29015a3ae73774cd12c9c0ed251a7cf843d712d", 0x2761, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0xfdc9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000000c0)}, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 04:58:40 executing program 5: socketpair(0x1, 0x24000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)="6c6f00966fd651b959a9034a2c005290f48e3b8610d3d2adc7d4970403dc0d5df50f615b6a838e42517ea5ec10b7456ece60d4bc035fbdcd2d9660abbfbb9c21b635591c0687f17f9b04046a300d") 04:58:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) 04:58:40 executing program 2: mq_open(&(0x7f0000000100)='.ppp1wlan0vboxnet0vboxnet0:\'em0\x00', 0x3, 0x0, &(0x7f0000000140)) 04:58:40 executing program 0: 04:58:40 executing program 1: [ 269.471296] binder: 6613:6617 Release 1 refcount change on invalid ref 0 ret -22 [ 269.479593] binder: 6613:6617 BC_ACQUIRE_DONE u0000000000000000 no match 04:58:40 executing program 7: 04:58:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e28, 0x0, @loopback}, 0x1c) 04:58:40 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9205, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x9}, 0x1c) [ 269.552782] binder: 6613:6617 Acquire 1 refcount change on invalid ref 0 ret -22 [ 269.586414] binder: 6613:6635 Release 1 refcount change on invalid ref 0 ret -22 [ 269.594117] binder: 6613:6635 BC_ACQUIRE_DONE u0000000000000000 no match 04:58:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x3f00) [ 269.615618] binder: 6613:6635 Acquire 1 refcount change on invalid ref 0 ret -22 04:58:40 executing program 7: mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x9, 0x20000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0xfb, 0x400880) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x0, @random="450b6ae351a5", 'syz_tun\x00'}}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 04:58:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(r1, &(0x7f00000026c0), 0x2f1, 0x100fd, &(0x7f0000002840)) 04:58:40 executing program 6: [ 269.872090] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:58:41 executing program 3: 04:58:41 executing program 2: 04:58:41 executing program 4: 04:58:41 executing program 6: 04:58:41 executing program 1: 04:58:41 executing program 7: 04:58:41 executing program 0: 04:58:41 executing program 5: 04:58:41 executing program 5: 04:58:41 executing program 6: 04:58:41 executing program 2: 04:58:41 executing program 0: 04:58:41 executing program 7: 04:58:41 executing program 1: 04:58:41 executing program 4: 04:58:41 executing program 3: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0), 0x1}, 0x20) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000300), 0x1a4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000500)="406fd2a4a50d3abc97c9acffed91e19c25bdb2eff21748758fb19d806c3a7411046856b2b8f63207", 0x28}], 0x1}, 0x0) 04:58:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r3, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:41 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f0000000100)) 04:58:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1f, 0x200000) io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000280)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) 04:58:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000400)=0x98) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 04:58:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5080888}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x0, 0x400, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x30, &(0x7f0000000200)={@ipv4={[], [], @rand_addr}}, 0x118) 04:58:41 executing program 6: 04:58:41 executing program 7: 04:58:41 executing program 3: 04:58:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r3, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:41 executing program 7: 04:58:41 executing program 6: 04:58:41 executing program 0: 04:58:41 executing program 3: 04:58:41 executing program 1: 04:58:41 executing program 7: 04:58:41 executing program 6: 04:58:41 executing program 3: 04:58:42 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f0000000100)) 04:58:42 executing program 0: 04:58:42 executing program 4: 04:58:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r3, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:42 executing program 6: 04:58:42 executing program 1: 04:58:42 executing program 7: 04:58:42 executing program 3: 04:58:42 executing program 0: 04:58:42 executing program 5: 04:58:42 executing program 1: 04:58:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x0, [0xfffffffe]}) close(r1) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") 04:58:42 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000200)}}}], 0x0, 0x0, &(0x7f0000000480)}) 04:58:42 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000380)={'veth1_to_bridge\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x65, &(0x7f0000000600)="bd4105ea3b3f00dfce8262aa361e", &(0x7f0000000680)=""/101}, 0x28) 04:58:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r3, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) close(r1) 04:58:42 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x65, &(0x7f0000000600)="bd4105ea3b3f00dfce8262aa361e", &(0x7f0000000680)=""/101}, 0x28) 04:58:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0xffffffffffffffbc, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0)=0xe00, 0x1000007ffff000) 04:58:42 executing program 1: unshare(0x8000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x71a}) mq_timedreceive(r1, &(0x7f00000001c0)=""/225, 0xe1, 0x0, &(0x7f00000000c0)={0x0, 0x989680}) [ 271.633007] binder: 6773:6778 got reply transaction with no transaction stack [ 271.640431] binder: 6773:6778 transaction failed 29201/-71, size 0-0 line 2762 04:58:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) close(r1) 04:58:42 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x65, &(0x7f0000000600)="bd4105ea3b3f00dfce8262aa361e", &(0x7f0000000680)=""/101}, 0x28) 04:58:42 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90002002}) close(r0) close(r0) 04:58:42 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 271.813962] binder: 6773:6805 got reply transaction with no transaction stack [ 271.821626] binder: 6773:6805 transaction failed 29201/-71, size 0-0 line 2762 04:58:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:42 executing program 1: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) write$binfmt_elf32(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x107c) socketpair(0x11, 0x80000, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_xen(&(0x7f0000000380)="2f005b37dfa5b433c070c3f613bcbc395ccb42723153977e90e32731299dee0c4a3db1740f27ae61cac1bd8388d6f229bd48d1d5d9be79db4ee9002d40f841195854f2f2ac3b4c4a0d70e3626bbbaf99f3a8638c3ff99487a0b5fe7c8aa3e24061957627d2075f8cee184c3f3adbfb9567e950ce46881c16e2a7ade170a364bc000000000200000000", &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[]) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000580)={0x4, 0x2, 'client1\x00', 0x4, "13976fc258e54a41", "9e8f398df2392c31b44be356d66d3a3e65eac0ccb0dbd93eeadcf889004dd4c4", 0x6fe6, 0x1}) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000340)={@host}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000740)={0xb2d, {{0xa, 0x4e24, 0x200, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0x3}}}, 0x88) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x1ff, 0x9}, &(0x7f0000000240)=0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x942, 0xcfc, 0x5, 0x40, 0x0, 0x4, 0x2, 0x1, 0x8, 0x7fffffff, 0xbb1d, 0x0, 0x81, 0x80000000, 0x401, 0x4, 0x1, 0x1c0, 0xfa, 0x1, 0x0, 0xfffffffffffff589, 0x401, 0x31, 0x9, 0x9, 0x10000, 0x8, 0x0, 0x10001, 0x72f9, 0x101, 0x3, 0x7fffffff, 0x4, 0x2020000000000000, 0x0, 0xffffffffffffffab, 0x5, @perf_bp={&(0x7f0000000440), 0x6}, 0x29fc2, 0x1000, 0x0, 0x4, 0x3ff, 0x2, 0x4}, r6, 0x5, 0xffffffffffffff9c, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="88c1370eb08e263f7fd7"], &(0x7f0000000300)=0x8) r7 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000280)={0x67, @multicast1, 0x4e21, 0x4, 'fo\x00', 0x20, 0x7, 0xc}, 0x2c) sendfile(r3, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 04:58:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x3}}, 0xa) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), 0x4) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x2, 0x1a}, 0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x88, 0x1ff) recvmmsg(r1, &(0x7f0000008400)=[{{&(0x7f00000081c0)=@l2, 0x80, &(0x7f00000082c0), 0x0, &(0x7f0000008300)=""/231, 0xe7}}], 0x1, 0x0, &(0x7f0000008640)) 04:58:42 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x65, &(0x7f0000000600)="bd4105ea3b3f00dfce8262aa361e", &(0x7f0000000680)=""/101}, 0x28) [ 271.919401] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.925193] binder: undelivered TRANSACTION_ERROR: 29201 04:58:42 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) inotify_init() r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2) pause() syz_mount_image$btrfs(&(0x7f0000000200)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x2, &(0x7f0000000400)=[{&(0x7f0000000280)="9b1ddafbcaa94d0f2c30e2afff0a58cba612cc44e7518d5de5e28bfabfd1c348b3e8c041b47d4df75542c31ac4a27474ede0b0514ec7873f8fb0a6129d949cd26a78a9876caa5c10d5f90a3f7bcefc8ad874237ed5c27ef9d5d46e30633664b329d12d433c0b758f2a4f2f16c982d78f5fece1c7339a4f541183ed6eff2283c35df76113cf59c906cf24efd433ea673c730aee311d2ac37b1fc131a0dfc3927d052142f2d4d7f9ea4d5d10a748d7dc0b64395644f09d21b7d499c87e200b1f720fd5708860d4e9", 0xc7, 0x3}, {&(0x7f0000000380)="4c5fb2073bbd6eb1e357ca9658377913d4a2b5b04ca35a2fcb6391a7da0e9a3bcc22b0da11dc8a503184075ae4cb2b26178503696950a15308f7761e391a903bef0a66dce4228cd5b2f06999cbe4ca8f85033454015e2248d81d20daabf6859b40b0f5a910b2de45db05d0b9fc2cdee944fd4acb707b71b44a5c698d", 0x7c}], 0x100040, &(0x7f0000000440)={[{@noautodefrag='noautodefrag'}, {@notreelog='notreelog'}, {@check_int='check_int'}, {@nodiscard='nodiscard'}]}) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047451, &(0x7f0000000000)) accept4$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14, 0xe303cd29745720ba) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000500)={'nat\x00', 0x84, "75f42c8ae455d5502b50619cbebfc155385cca7537c2a5d35f25e4a3b70c8d65ca46026a2837d7ecacf293aa1bdfa4bc259eb33cd4fedcf6f5d8275a43a3563f28f00bc85c34413c1c7b014c7e94a81514521abf7785152603050fcc8c15b230158446d58b717d80d830a368e7ac44ef40ddcf575a06081a38319c4f019b9d3b31d3c2d6"}, &(0x7f00000005c0)=0xa8) 04:58:42 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 272.017818] 9pnet_virtio: no channels available for device / 04:58:42 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername$unix(r0, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0xc18f, 0x8) 04:58:42 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000bfcffc), &(0x7f0000000100)=0x305) 04:58:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x10000000}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0xffffffa9) r4 = gettid() tkill(r4, 0x400000000002016) r5 = msgget(0x1, 0x100) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000200)=""/190) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@generic={0x3, 0x3f, 0x8da8}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e22, 0x4, @remote, 0x1}, {0xa, 0x4e22, 0x800000008, @local, 0x9}, 0x0, [0x8, 0x9, 0x5, 0x7f, 0x7fffffff, 0x9, 0x10001, 0x6]}, 0x5c) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x105000, 0x0) dup2(r0, r3) 04:58:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x12, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x7ff, 0x8, '9P2000.u'}, 0x15) 04:58:43 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x65, &(0x7f0000000600)="bd4105ea3b3f00dfce8262aa361e", &(0x7f0000000680)=""/101}, 0x28) 04:58:43 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 272.224061] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 272.233832] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 04:58:43 executing program 6: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5c060000000000000070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0xf0ffffff}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x28, 0x66, 0x309, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 04:58:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x58}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x800}, 0x8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240), 0x3) 04:58:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$getown(r0, 0x9) ioprio_set$pid(0x1, r1, 0x98) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000380)=""/232, 0xe8) 04:58:43 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:43 executing program 2: epoll_create1(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r1, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 272.413506] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 272.423307] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 272.508926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 272.540961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 04:58:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, r0/1000+30000}, 0x15, 0x46, 0x1}, {{0x0, 0x2710}, 0x0, 0x8, 0x3}, {{0x77359400}, 0x0, 0x0, 0xffffffffffffffe0}, {{}, 0x17, 0x8001, 0x7e}], 0x60) r1 = getpid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00') unlink(&(0x7f0000000040)='./file0/file1\x00') setpgid(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000002c0)={{0x3, 0x0, 0x7, 0x3, 0x8}, 0x81, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0x401, 0x4, 0x100000001, 0x20000000}) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') fcntl$setstatus(r2, 0x4, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000, 0xfffffffb, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0xfffffdcc}]) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100), 0x10) 04:58:43 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:43 executing program 4: r0 = memfd_create(&(0x7f0000000040)='[\x00', 0x3) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x8, 0x1}, &(0x7f0000000140)=0x8) r2 = memfd_create(&(0x7f0000000380)='\'', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000001540)='/dev/snd/seq\x00', 0x0, 0x82) r4 = dup2(r3, r2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x3, 0xfffffffe, @time, {}, {}, @result}], 0xfffffe0b) [ 272.772605] 9pnet_virtio: no channels available for device / 04:58:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="8a44440700316585715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="6a08000029010000000000000000000000731b313323d3c89b029230e1a45e04d7a4"], 0x15) prctl$setmm(0x23, 0x4, &(0x7f0000fff000/0x1000)=nil) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) getdents(r3, &(0x7f00000003c0)=""/182, 0xb6) 04:58:43 executing program 2: epoll_create1(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r1, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:43 executing program 4: r0 = socket$inet(0x2, 0x3, 0x800000000000b) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='trustedposix_acl_access](@em0vboxnet0#eth1%\x00', 0xffffffffffffff9c}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000000c0)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x324) 04:58:43 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, &(0x7f0000000040)=0x6e) bind(r1, &(0x7f0000000580)=@pppoe={0x18, 0x0, {0x3, @local, 'nr0\x00'}}, 0x80) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f00000040c0), 0x1000) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0xffffffffffffff94) write$FUSE_LSEEK(r0, &(0x7f0000000380)={0x18, 0x0, 0x4, {0xfffffffffffffffe}}, 0x18) 04:58:43 executing program 1: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) write$binfmt_elf32(r0, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x107c) socketpair(0x11, 0x80000, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_xen(&(0x7f0000000380)="2f005b37dfa5b433c070c3f613bcbc395ccb42723153977e90e32731299dee0c4a3db1740f27ae61cac1bd8388d6f229bd48d1d5d9be79db4ee9002d40f841195854f2f2ac3b4c4a0d70e3626bbbaf99f3a8638c3ff99487a0b5fe7c8aa3e24061957627d2075f8cee184c3f3adbfb9567e950ce46881c16e2a7ade170a364bc000000000200000000", &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[]) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000580)={0x4, 0x2, 'client1\x00', 0x4, "13976fc258e54a41", "9e8f398df2392c31b44be356d66d3a3e65eac0ccb0dbd93eeadcf889004dd4c4", 0x6fe6, 0x1}) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000340)={@host}) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000740)={0xb2d, {{0xa, 0x4e24, 0x200, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, 0x3}}}, 0x88) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x1ff, 0x9}, &(0x7f0000000240)=0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x942, 0xcfc, 0x5, 0x40, 0x0, 0x4, 0x2, 0x1, 0x8, 0x7fffffff, 0xbb1d, 0x0, 0x81, 0x80000000, 0x401, 0x4, 0x1, 0x1c0, 0xfa, 0x1, 0x0, 0xfffffffffffff589, 0x401, 0x31, 0x9, 0x9, 0x10000, 0x8, 0x0, 0x10001, 0x72f9, 0x101, 0x3, 0x7fffffff, 0x4, 0x2020000000000000, 0x0, 0xffffffffffffffab, 0x5, @perf_bp={&(0x7f0000000440), 0x6}, 0x29fc2, 0x1000, 0x0, 0x4, 0x3ff, 0x2, 0x4}, r6, 0x5, 0xffffffffffffff9c, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="88c1370eb08e263f7fd7"], &(0x7f0000000300)=0x8) r7 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000280)={0x67, @multicast1, 0x4e21, 0x4, 'fo\x00', 0x20, 0x7, 0xc}, 0x2c) sendfile(r3, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 04:58:43 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000200)) write$evdev(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, r0/1000+30000}, 0x15, 0x46, 0x1}, {{0x0, 0x2710}, 0x0, 0x8, 0x3}, {{0x77359400}, 0x0, 0x0, 0xffffffffffffffe0}, {{}, 0x17, 0x8001, 0x7e}], 0x60) r1 = getpid() mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') link(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00') unlink(&(0x7f0000000040)='./file0/file1\x00') setpgid(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000002c0)={{0x3, 0x0, 0x7, 0x3, 0x8}, 0x81, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0x401, 0x4, 0x100000001, 0x20000000}) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') fcntl$setstatus(r2, 0x4, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x4000, 0xfffffffb, 0x7, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0xfffffdcc}]) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100), 0x10) [ 273.077224] 9pnet_virtio: no channels available for device / [ 273.085057] kernel msg: ebtables bug: please report to author: Wrong len argument 04:58:43 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:43 executing program 2: epoll_create1(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r1, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:43 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000240)="38010000be1c2ca0b9056cf6286426ecb254ec3662b6189729cf86d68393f1ec9c9c1f4ba2f720bd7e16589e9d2468c1467e2416879b3f749ce6aebd348161c1d3ace9010e3984518223", 0x4a) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) dup(0xffffffffffffffff) ppoll(&(0x7f0000000140)=[{r1}, {}, {r3}], 0x3, &(0x7f00000001c0)={0x0, r4+30000000}, &(0x7f0000000200), 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x20, 0x0, 0x5}, 0x3ff}}, 0x18) 04:58:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000001c0)="baa100b8b2caef640fc76be56766c74424000d0000006766c7442402000000006766c744240600000000670f011c24f30f300f2002660f3a215f00000fc72a66b9004d564b66b80787000066ba000000000f300f01d90f01c1", 0x59}], 0x1, 0x2a, &(0x7f0000000040), 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x2}, 0x8) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:58:44 executing program 5: r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x4000000000008912, &(0x7f00000000c0)="0a5cc80700315f85715070") bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000afb000)=@generic={0x1e, "0103000000000000000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) close(r0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) 04:58:44 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:44 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:44 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0x0, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:44 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = msgget$private(0x0, 0x12) sysfs$2(0x2, 0x10000, &(0x7f0000000080)=""/194) msgctl$IPC_RMID(r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x7f0000}, 0x200000}) [ 273.368079] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:58:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x4, 0x8010, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x2}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0x2, 0x0, 0x0, @remote}}, 0x0, 0xf401}, 0x98) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x60003) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/111) close(r2) close(r1) 04:58:44 executing program 5: pipe(&(0x7f0000000040)={0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0xdb45aa1) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x250d) io_setup(0x100000001, &(0x7f00000000c0)=0x0) io_submit(r3, 0x3, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000180)="2581b8f9d9119a19ce01bdf52c02916d77f5a12a30e1518c7ae56e71ea28b37636c080cfa4471d9769369e80598ac314956b9ad0f8b5c30bc1b300398c81c1", 0x3f, 0x9, 0x0, 0x0, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f0000000200)="0af18b69a243636bd73046357444333e3cc95fe28301703a18d30416e12344f2ac43fb328d7b56d4bd0053cc20f4ac1d42e6589c990451a62e54bfe8e4bb7618e831a313f7e3ddb7a5d1e5b975b861ba2f9599df3a21", 0x56, 0x7fffffff, 0x0, 0x0, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f00000002c0)="0224fd60f1b456ccf22f22a02da40667e83184ec28c8f023812852302b2e5cf2967f11213b42f3486d3c8bb70f1e11b541dca1bd8c74a2f64578942fcc5177ca5f1950bba7503014a67ffff8b0e28974cd93a9a4f6fa7a4265d4bebfb850f2270b73ca0df74fc59375ddb8ed8d4e37584db8ab7b16b07766aacafbe629439414689c4ea581e20e048813ee7d759cf0a9a778065dff6a83ca73b4fe6755f27791b13fac2c96734f16c7307faa62394fda9674db89ea6472c34406582030540c31efa14d902c8080e72261115e58", 0xcd, 0x40000000000, 0x0, 0x0, r2}]) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x82) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000440)) 04:58:44 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 273.925654] list_add corruption. prev->next should be next (ffff8801ae9ee330), but was ffff8801ae9ee340. (prev=ffff88018eb63d18). [ 273.934032] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) [ 273.938368] ------------[ cut here ]------------ [ 273.952131] kernel BUG at lib/list_debug.c:28! [ 273.956846] invalid opcode: 0000 [#1] SMP KASAN [ 273.961523] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 4.19.0-rc1+ #212 04:58:44 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)={0x7, 0x0, [{0x2, 0x200000000000000, 0x6, 0x7, 0x5}, {0x4000000f, 0x40, 0x6, 0x9, 0x3}, {0x6, 0x401, 0x1, 0x7ff, 0x9}, {0x8000000f, 0x94, 0x0, 0x5, 0x3}, {0x80000007, 0x65e6, 0x408000, 0x4, 0xa287}, {0x8000000b, 0x1, 0x7, 0xffffffffffffffc1, 0x8}, {0x80000000, 0x0, 0x5, 0x9, 0x100000001}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x41) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x87, @multicast1, 0x4e23, 0x4, 'lblc\x00', 0x10, 0x8, 0x5f}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4e23, 0x0, 0x8000, 0x5, 0x8000}}, 0x44) fchmod(0xffffffffffffffff, 0x10) 04:58:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000003ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000006f460000000000006b0a00fe00000000850000002f000000b7000000000000009500000000000000"], &(0x7f0000000100)='EPL\x00'}, 0x48) r2 = getpgrp(0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x9, 0xffffffff, 0xfffffffffffffde4, 0x2, 0x0, 0xfffffffffffff21f, 0xc, 0x8, 0x0, 0x1, 0x5, 0x9, 0x347, 0x4, 0x1, 0x6, 0x33b, 0x10001, 0x7, 0x23, 0x8b97, 0x9, 0x9, 0x6, 0xfff, 0x5, 0x5, 0x9, 0x10001, 0xffff, 0x80, 0x8, 0x80000001, 0xa9ee, 0x10, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x3082, 0x5, 0x1, 0x3, 0x9, 0xf2, 0xfffffffffffffffc}, r2, 0x9, r0, 0x9) sched_setattr(0x0, &(0x7f0000000280), 0x0) 04:58:44 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0x0, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000008d000085d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) 04:58:44 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x31, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) fcntl$getown(r0, 0x9) 04:58:44 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x20001, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000002c0)={0x3, 0xa7c}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0x8000a0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x0, 0x2}) getsockname$unix(r0, &(0x7f0000000800), &(0x7f0000000480)=0x6e) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x9, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) geteuid() getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f00000000c0)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x1, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000280)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000700)={0x5, 0x4, 0x4, 0x8001, 0x0}, &(0x7f0000000740)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000780)={r4, 0x1}, 0x8) shmget(0x3, 0x4000, 0x154000100, &(0x7f000035c000/0x4000)=nil) lseek(r0, 0x0, 0x3) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) 04:58:44 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 273.968356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.977808] Workqueue: events p9_write_work [ 273.982177] RIP: 0010:__list_add_valid.cold.0+0x23/0x25 [ 273.987544] Code: e8 4f 2b 5a fe eb 97 48 89 d9 48 c7 c7 60 b2 3a 87 e8 62 05 02 fe 0f 0b 48 89 f1 48 c7 c7 20 b3 3a 87 48 89 de e8 4e 05 02 fe <0f> 0b 4c 89 e2 48 89 de 48 c7 c7 60 b4 3a 87 e8 3a 05 02 fe 0f 0b [ 274.006456] RSP: 0018:ffff8801d9ebf590 EFLAGS: 00010282 [ 274.011828] RAX: 0000000000000075 RBX: ffff8801ae9ee330 RCX: 0000000000000000 [ 274.019097] RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: 0000000000000001 04:58:44 executing program 2: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 04:58:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 274.026372] RBP: ffff8801d9ebf5a8 R08: ffff8801d9eb0140 R09: ffffed003b605010 [ 274.027768] Unknown ioctl 1074835115 [ 274.033637] R10: ffffed003b605010 R11: ffff8801db028087 R12: ffff88018eb63d18 [ 274.033647] R13: ffff88018eb63d18 R14: ffff8801ae9ee384 R15: ffff88018eb63d18 [ 274.033659] FS: 0000000000000000(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 274.033668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.033676] CR2: 00007ffd86e11e6c CR3: 00000001ae3d7000 CR4: 00000000001406f0 [ 274.033695] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.080520] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.087785] Call Trace: [ 274.090387] p9_write_work+0x34e/0xd50 [ 274.094282] ? p9_fd_create_tcp+0x8c0/0x8c0 [ 274.098607] ? lock_acquire+0x1e4/0x4f0 [ 274.102588] ? process_one_work+0xb9b/0x1aa0 [ 274.107096] ? _raw_spin_unlock_irq+0x27/0x70 [ 274.111604] ? __lock_is_held+0xb5/0x140 [ 274.111609] Unknown ioctl 1074835115 [ 274.115688] process_one_work+0xc73/0x1aa0 04:58:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 274.115701] ? mark_held_locks+0x160/0x160 [ 274.115721] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 274.115741] ? __switch_to_asm+0x34/0x70 [ 274.136610] ? __switch_to_asm+0x40/0x70 [ 274.140681] ? __switch_to_asm+0x34/0x70 [ 274.144752] ? __switch_to_asm+0x40/0x70 [ 274.148827] ? __switch_to_asm+0x34/0x70 [ 274.152908] ? __switch_to_asm+0x40/0x70 [ 274.156973] ? __switch_to_asm+0x34/0x70 [ 274.161038] ? __switch_to_asm+0x40/0x70 [ 274.165107] ? __switch_to_asm+0x34/0x70 [ 274.169177] ? __sched_text_start+0x8/0x8 [ 274.173333] ? graph_lock+0x170/0x170 04:58:44 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x20001, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000002c0)={0x3, 0xa7c}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0x8000a0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x0, 0x2}) getsockname$unix(r0, &(0x7f0000000800), &(0x7f0000000480)=0x6e) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x9, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) geteuid() getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f00000000c0)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x1, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000280)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000700)={0x5, 0x4, 0x4, 0x8001, 0x0}, &(0x7f0000000740)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000780)={r4, 0x1}, 0x8) shmget(0x3, 0x4000, 0x154000100, &(0x7f000035c000/0x4000)=nil) lseek(r0, 0x0, 0x3) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) 04:58:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') readv(r2, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 274.177132] ? lock_downgrade+0x8f0/0x8f0 [ 274.181280] ? __wake_up_common+0x45e/0x7b0 [ 274.185610] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 274.190370] ? lockdep_hardirqs_on+0x421/0x5c0 [ 274.194964] ? lock_acquire+0x1e4/0x4f0 [ 274.198949] ? worker_thread+0x3dc/0x13c0 [ 274.203106] ? lock_release+0x9f0/0x9f0 [ 274.207082] ? trace_hardirqs_off+0xb8/0x2b0 [ 274.211502] ? kasan_check_read+0x11/0x20 [ 274.215664] ? worker_thread+0x3dc/0x13c0 [ 274.219022] Unknown ioctl 1074835115 04:58:45 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) [ 274.219818] ? trace_hardirqs_on+0x2c0/0x2c0 [ 274.219834] ? kasan_check_write+0x14/0x20 [ 274.219849] ? do_raw_spin_lock+0xc1/0x200 [ 274.219866] worker_thread+0x189/0x13c0 [ 274.219887] ? __switch_to_asm+0x34/0x70 [ 274.244495] ? process_one_work+0x1aa0/0x1aa0 [ 274.248999] ? graph_lock+0x170/0x170 [ 274.252807] ? graph_lock+0x170/0x170 [ 274.256616] ? find_held_lock+0x36/0x1c0 [ 274.260683] ? find_held_lock+0x36/0x1c0 [ 274.264762] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 274.269871] ? _raw_spin_unlock_irqrestore+0x74/0xc0 04:58:45 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x20001, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000002c0)={0x3, 0xa7c}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000600), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x0, @remote}, 0xfffffffffffffea4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x5084f74d, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @broadcast}, 0x8000a0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xcf39, 0x0, 0x2}) getsockname$unix(r0, &(0x7f0000000800), &(0x7f0000000480)=0x6e) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x9, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) geteuid() getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000440), &(0x7f00000000c0)=0x40) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x0, @loopback, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x59}, {@multicast1, 0x4e21, 0x1, 0x8}}, 0x44) getpeername$inet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000380)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000280)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000700)={0x5, 0x4, 0x4, 0x8001, 0x0}, &(0x7f0000000740)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000780)={r4, 0x1}, 0x8) shmget(0x3, 0x4000, 0x154000100, &(0x7f000035c000/0x4000)=nil) lseek(r0, 0x0, 0x3) futex(&(0x7f0000000000), 0x4, 0x0, &(0x7f0000001ff0), &(0x7f0000004000), 0x0) shmget(0x2, 0x1000, 0x54000400, &(0x7f00002e6000/0x1000)=nil) [ 274.274981] ? lockdep_hardirqs_on+0x421/0x5c0 [ 274.279567] ? trace_hardirqs_on+0xbd/0x2c0 [ 274.283890] ? kasan_check_read+0x11/0x20 [ 274.288042] ? __kthread_parkme+0xd7/0x1b0 [ 274.292316] ? kasan_check_write+0x14/0x20 [ 274.296561] ? __kthread_parkme+0x58/0x1b0 [ 274.300802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.306348] ? __kthread_parkme+0x106/0x1b0 [ 274.310678] kthread+0x35a/0x420 [ 274.314052] ? process_one_work+0x1aa0/0x1aa0 [ 274.314057] Unknown ioctl 1074835115 [ 274.322259] ? kthread_bind+0x40/0x40 [ 274.326070] ret_from_fork+0x3a/0x50 [ 274.329789] Modules linked in: [ 274.332981] Dumping ftrace buffer: [ 274.336511] (ftrace buffer empty) [ 274.340377] ---[ end trace a642a7f8abdb869d ]--- [ 274.345174] RIP: 0010:__list_add_valid.cold.0+0x23/0x25 [ 274.350590] Code: e8 4f 2b 5a fe eb 97 48 89 d9 48 c7 c7 60 b2 3a 87 e8 62 05 02 fe 0f 0b 48 89 f1 48 c7 c7 20 b3 3a 87 48 89 de e8 4e 05 02 fe <0f> 0b 4c 89 e2 48 89 de 48 c7 c7 60 b4 3a 87 e8 3a 05 02 fe 0f 0b [ 274.369526] RSP: 0018:ffff8801d9ebf590 EFLAGS: 00010282 [ 274.374936] RAX: 0000000000000075 RBX: ffff8801ae9ee330 RCX: 0000000000000000 [ 274.382250] RDX: 0000000000000000 RSI: ffffffff8163ac01 RDI: 0000000000000001 [ 274.389568] RBP: ffff8801d9ebf5a8 R08: ffff8801d9eb0140 R09: ffffed003b605010 [ 274.396871] R10: ffffed003b605010 R11: ffff8801db028087 R12: ffff88018eb63d18 [ 274.404206] R13: ffff88018eb63d18 R14: ffff8801ae9ee384 R15: ffff88018eb63d18 [ 274.411530] FS: 0000000000000000(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 274.419803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.425717] CR2: 00007ffd86e11e6c CR3: 00000001ae3d7000 CR4: 00000000001406f0 [ 274.433044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.440343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.447663] Kernel panic - not syncing: Fatal exception [ 274.453368] Dumping ftrace buffer: [ 274.456896] (ftrace buffer empty) [ 274.460603] Kernel Offset: disabled [ 274.464210] Rebooting in 86400 seconds..