[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.212701] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.651718] random: sshd: uninitialized urandom read (32 bytes read) [ 33.991659] random: sshd: uninitialized urandom read (32 bytes read) [ 35.321125] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. [ 40.841824] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/13 07:24:26 fuzzer started [ 42.283258] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/13 07:24:29 dialing manager at 10.128.0.26:37601 2018/06/13 07:24:34 syscalls: 1643 2018/06/13 07:24:34 code coverage: enabled 2018/06/13 07:24:34 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/06/13 07:24:34 setuid sandbox: enabled 2018/06/13 07:24:34 namespace sandbox: enabled 2018/06/13 07:24:34 fault injection: enabled 2018/06/13 07:24:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/13 07:24:34 net packed injection: enabled 07:24:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000340), &(0x7f0000000240)=""/61}, 0x18) 07:24:40 executing program 2: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0xfffffffffffffffe, 0x6, 0x4}) r1 = epoll_create(0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800000000000000, 0x0) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x4}) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000003c0)) mq_timedsend(r0, &(0x7f0000000200)="51ae083107635e895217cbf38c9b11d5dab4e9c6e384eea3b5ceb1eb9e2a9c13cd", 0x21, 0x2, &(0x7f0000000240)={0x77359400}) mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000040)=[{r1, 0x80}, {r1, 0x400}, {r1, 0x2}, {r1, 0x3000}, {r0, 0x1000}, {r1, 0x4000}, {r0, 0x42}, {r1, 0x8000}], 0x8, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x7}, 0x8) 07:24:40 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$inet(0x2, 0x3, 0x8000000006) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) 07:24:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 07:24:40 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000200)=""/246) 07:24:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 07:24:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") prctl$setname(0xf, &(0x7f0000000b00)="73656c696e75782f6d643573041381cc8e9f8ff1da8f44ccabc6bdba756d296b65790e81c99d") openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) 07:24:40 executing program 1: r0 = socket$nl_generic(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x0, 0xf00}}) [ 55.562012] IPVS: ftp: loaded support on port[0] = 21 [ 55.582438] IPVS: ftp: loaded support on port[0] = 21 [ 55.583535] IPVS: ftp: loaded support on port[0] = 21 [ 55.639696] IPVS: ftp: loaded support on port[0] = 21 [ 55.666657] IPVS: ftp: loaded support on port[0] = 21 [ 55.676672] IPVS: ftp: loaded support on port[0] = 21 [ 55.700880] IPVS: ftp: loaded support on port[0] = 21 [ 55.707340] IPVS: ftp: loaded support on port[0] = 21 [ 57.764275] ip (4691) used greatest stack depth: 54440 bytes left [ 58.068377] ip (4717) used greatest stack depth: 54328 bytes left [ 58.885467] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.891939] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.924569] device bridge_slave_0 entered promiscuous mode [ 59.123770] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.130278] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.155896] device bridge_slave_1 entered promiscuous mode [ 59.178805] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.185268] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.201108] device bridge_slave_0 entered promiscuous mode [ 59.213320] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.219838] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.232620] device bridge_slave_0 entered promiscuous mode [ 59.240930] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.247404] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.267288] device bridge_slave_0 entered promiscuous mode [ 59.289921] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.296407] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.309810] device bridge_slave_0 entered promiscuous mode [ 59.318277] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.324804] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.339237] device bridge_slave_0 entered promiscuous mode [ 59.351338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.360716] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.367148] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.385379] device bridge_slave_0 entered promiscuous mode [ 59.401238] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.407693] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.429504] device bridge_slave_0 entered promiscuous mode [ 59.449911] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.456431] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.487554] device bridge_slave_1 entered promiscuous mode [ 59.495249] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.501719] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.512101] device bridge_slave_1 entered promiscuous mode [ 59.521381] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.527824] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.535907] device bridge_slave_1 entered promiscuous mode [ 59.555233] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.561686] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.591258] device bridge_slave_1 entered promiscuous mode [ 59.607655] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.614125] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.636990] device bridge_slave_1 entered promiscuous mode [ 59.649226] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.655671] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.663717] device bridge_slave_1 entered promiscuous mode [ 59.670994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.688603] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.695139] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.706920] device bridge_slave_1 entered promiscuous mode [ 59.726109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.735927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.744388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.752922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.785436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.899239] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.940903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.948857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.961161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.983341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.995419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.009402] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.096844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.159979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.331853] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.429145] ip (4886) used greatest stack depth: 54056 bytes left [ 60.555944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.629571] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.651571] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.664008] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.674363] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.723610] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.741449] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.759784] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.773266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.785804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.840360] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.881335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.904129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.941283] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.968401] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.980836] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.991782] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.088455] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.095466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.125291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.136324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.154504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.161610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.222673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.232997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.241161] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.248324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.265192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.296601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.328137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.346875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.367085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.376010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.383653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.397792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.435488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.448260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.458787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.465769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.486689] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.500390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.516601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.524519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.531693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.552312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.782690] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.802573] team0: Port device team_slave_0 added [ 62.015265] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.035106] team0: Port device team_slave_1 added [ 62.061137] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.084169] team0: Port device team_slave_0 added [ 62.099401] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.126098] team0: Port device team_slave_0 added [ 62.137126] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.147599] team0: Port device team_slave_0 added [ 62.164005] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.186134] team0: Port device team_slave_0 added [ 62.203153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.217540] team0: Port device team_slave_0 added [ 62.238633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.267207] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.283020] team0: Port device team_slave_0 added [ 62.288983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.306813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.329462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.338782] team0: Port device team_slave_0 added [ 62.360099] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.371829] team0: Port device team_slave_1 added [ 62.379528] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.386730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.400979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.431900] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.440459] team0: Port device team_slave_1 added [ 62.447893] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.464942] team0: Port device team_slave_1 added [ 62.475010] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.489582] team0: Port device team_slave_1 added [ 62.506823] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.523926] team0: Port device team_slave_1 added [ 62.541788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.558287] team0: Port device team_slave_1 added [ 62.580328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.598795] team0: Port device team_slave_1 added [ 62.609674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.619741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.627301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.641985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.684478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.703172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.726820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.734444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.742744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.752554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.783673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.790995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.803430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.830171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.844654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.855935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.863937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.873278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.887667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.900883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.908276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.917291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.924382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.937843] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.972332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.004860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.019216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.032391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.040964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.049284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.062158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.069568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.092321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.103244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.117781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.132200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.140842] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.147796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.156552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.173244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.182622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.194448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.202378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.211671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.230130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.271200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.300263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.324706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.339529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.347775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.355964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.370410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.385204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.402861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.415350] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.423151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.430697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.461889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.490820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.508736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.526661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.536677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.544568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.552812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.560617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.568846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.579090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.587569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.595855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.625745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.633224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.643203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.656120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.668856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.677130] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.687128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.728765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.756905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.789729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.808327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.822689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.859837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.869135] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.878414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.894404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.908091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.935329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.958990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.980877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.989301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.849193] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.855636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.862544] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.868951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.926486] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.935342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.976576] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.983081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.989982] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.999117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.060648] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.264484] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.270958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.277804] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.284244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.301621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.314267] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.320697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.327476] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.333925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.361547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.374543] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.380974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.387811] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.394235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.402592] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.421868] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.428343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.435186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.441639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.453910] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.462306] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.468734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.475540] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.481962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.548887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.617711] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.624198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.631104] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.637550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.714631] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.976246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.988270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.015874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.037953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.058791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.078785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.088647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.580438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.831601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.895995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.946927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.979695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.030053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.290758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.316370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.423666] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.540379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.736721] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.751488] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.789614] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 75.807145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.123136] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.138793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.185871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.192514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.209717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.413191] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.419537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.430832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.467265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.475868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.486698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.592392] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.598717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.609815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.659758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.666147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.679789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.719868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.739309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.765698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.909777] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.928497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.945123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.992943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.000756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.014902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.054003] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.340778] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.412219] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.456631] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.484188] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.607531] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.712400] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.849514] 8021q: adding VLAN 0 to HW filter on device team0 07:25:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x400000000020001, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) write$tun(r0, &(0x7f0000000580)={@void, @val, @mpls}, 0x2000058a) 07:25:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:08 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f0000000200)) r0 = memfd_create(&(0x7f00000000c0)='dev ', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r0, r0, &(0x7f0000000000), 0x100000) tkill(r1, 0x1000000000016) 07:25:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 07:25:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000100)=""/113, 0x71, 0x0, &(0x7f0000000180)=@abs, 0x20000000) close(r1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000001280)={0x0, @in={{0x2}}}, &(0x7f0000000200)=0x84) 07:25:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 07:25:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@nested={0xc, 0x9, [@typed={0x8, 0x78, @u32}]}]}, 0x20}, 0x1}, 0x0) 07:25:08 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x4540, 0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)) [ 82.709264] netlink: 'syz-executor6': attribute type 9 has an invalid length. 07:25:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300), 0x0, 0xffffffffffffffff) clone(0x8010900, &(0x7f00009f4000), &(0x7f000078e000), &(0x7f000039f000), &(0x7f00001ea000)) 07:25:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d}, 0x10) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef1c32fc0b98143e037dc1250278424e1b1368a82cc15eb4037dc12502000000b5e8f99af7fb9747004420cd714fe563", 0x38}], 0x1}, 0x0) 07:25:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:08 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x1004082) r2 = memfd_create(&(0x7f0000000040)="3100000000a73f33efc6d1a6230d8379f3b2e6620000000000000000000000ffff7f1794245ee14f62e1", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 07:25:09 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000004ec0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000003ec0)=""/4096, 0x1000}], 0x2, &(0x7f00000051c0)=[{&(0x7f0000005100)=""/191, 0xbf}], 0x1, 0x0) 07:25:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 07:25:09 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d}, 0x10) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef1c32fc0b98143e037dc1250278424e1b1368a82cc15eb4037dc12502000000b5e8f99af7fb9747004420cd714fe563", 0x38}], 0x1}, 0x0) 07:25:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:09 executing program 3: unshare(0x24020400) ftruncate(0xffffffffffffffff, 0x0) 07:25:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x0, 0x33}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0x20a) 07:25:09 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d}, 0x10) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef1c32fc0b98143e037dc1250278424e1b1368a82cc15eb4037dc12502000000b5e8f99af7fb9747004420cd714fe563", 0x38}], 0x1}, 0x0) 07:25:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 07:25:09 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x9000, 0x0) 07:25:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x111, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff]}, @in6=@mcast1={0xff, 0x1, [], 0x1}}, {@in, 0x0, 0x32}, @in6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cfb(blowfish-generic)\x00'}}}]}, 0x138}, 0x1}, 0x0) 07:25:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:09 executing program 0: unshare(0x24020400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) 07:25:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") listen(r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r2, &(0x7f0000a88f88), 0x71961, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) 07:25:09 executing program 3: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00008d8000)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000002000000000000000000000000000000000001"], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00003cf000)={&(0x7f0000f4dff4)={0x10}, 0x3c0, &(0x7f00005ad000)={&(0x7f00008d8000)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@dev={0xfe, 0x80}}}, [@migrate={0x10c, 0x11}]}, 0x15c}, 0x1}, 0x0) [ 83.885278] print_req_error: I/O error, dev loop3, sector 3080 [ 83.891575] Buffer I/O error on dev loop3, logical block 385, lost async page write [ 83.905107] TCP: request_sock_TCP: Possible SYN flooding on port 20003. Sending cookies. Check SNMP counters. 07:25:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x1004082) r2 = memfd_create(&(0x7f0000000040)="3100000000a73f33efc6d1a6230d8379f3b2e6620000000000000000000000ffff7f1794245ee14f62e1", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 07:25:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 07:25:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d}, 0x10) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003f24)="050000003778d9f1ef1c32fc0b98143e037dc1250278424e1b1368a82cc15eb4037dc12502000000b5e8f99af7fb9747004420cd714fe563", 0x38}], 0x1}, 0x0) 07:25:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3d, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$sock_netrom_SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "804e2486cff9d9266b6504d1017e922724e09f8a6d2cec6c5249cf42d85e7f102204bb458c81a116e92825862da340dec9ee4a6bb74e77d3dd1a52f33cc1748d", "9b0fcdf54d8916989d914836e249aeb4b4b3850300000000000000bdf5c1d14998d5bbac6c4deae26bc26c30222a2d0b5150e643db0873477ebc926e82d8fccc", "73e37038ac9e1afce8d30c230037155d045737cfaa8dd98f8db0f64fe0594b51"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 07:25:10 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xb93) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) 07:25:10 executing program 1: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001280)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf}}, 0x14}, 0x1}, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac481b35cadefb03d08b66f69a649121807d030f9beeb") 07:25:10 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 07:25:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2}}}, &(0x7f0000000100)=0x100) 07:25:10 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x124) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="9e", 0x1}], 0x1, &(0x7f00000008c0)}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/223, 0xdf, 0x2043, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) 07:25:10 executing program 1: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001280)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf}}, 0x14}, 0x1}, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac481b35cadefb03d08b66f69a649121807d030f9beeb") 07:25:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x400000000000001, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000c7df60)={0x7ff, @in6={{0xa}}}, &(0x7f000064b000)=0xa0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 07:25:10 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) tkill(r1, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) 07:25:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140), 0x114, 0x0) 07:25:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x6, 0x4) recvfrom(r0, &(0x7f00000000c0)=""/253, 0xfd, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f000070aef1)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 07:25:10 executing program 4: sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x3e5, 0xfffffffffffffffe) 07:25:10 executing program 1: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001280)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf}}, 0x14}, 0x1}, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac481b35cadefb03d08b66f69a649121807d030f9beeb") 07:25:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x1004082) r2 = memfd_create(&(0x7f0000000040)="3100000000a73f33efc6d1a6230d8379f3b2e6620000000000000000000000ffff7f1794245ee14f62e1", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 07:25:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f28ff8), 0x100000002) r3 = getpgid(0x0) sendfile(r2, r1, &(0x7f0000000000), 0x3f) tkill(r3, 0x1000000000016) 07:25:11 executing program 6: unshare(0x64000400) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 07:25:11 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x124) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="9e", 0x1}], 0x1, &(0x7f00000008c0)}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/223, 0xdf, 0x2043, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) 07:25:11 executing program 1: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001280)={0x14, 0x0, 0x0, 0x0, 0x0, {0xf}}, 0x14}, 0x1}, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac481b35cadefb03d08b66f69a649121807d030f9beeb") 07:25:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe5ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSW(r0, 0x5402, &(0x7f00009dc000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) [ 84.982345] print_req_error: I/O error, dev loop3, sector 6400 [ 85.091278] IPVS: ftp: loaded support on port[0] = 21 07:25:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008983, &(0x7f0000000000)) 07:25:11 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3c, 0x4) listen(r0, 0x0) close(r0) 07:25:11 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x124) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="9e", 0x1}], 0x1, &(0x7f00000008c0)}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/223, 0xdf, 0x2043, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) 07:25:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x1c, 0x101, 0x0, 0x0, {0x7}, [@generic="46c28834ec"]}, 0x1c}, 0x1}, 0x0) 07:25:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008983, &(0x7f0000000000)) 07:25:11 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) tkill(r1, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) 07:25:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0]}, 0x7) 07:25:11 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x124) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)="9e", 0x1}], 0x1, &(0x7f00000008c0)}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000480)=""/223, 0xdf, 0x2043, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) 07:25:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008983, &(0x7f0000000000)) 07:25:11 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000000b000)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f000000afdf)={0x30, 0x0, 0x0, @fuse_notify_retrieve_out}, 0x30) [ 86.004496] print_req_error: I/O error, dev loop3, sector 2824 [ 86.010733] Buffer I/O error on dev loop3, logical block 353, lost async page write 07:25:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x1004082) r2 = memfd_create(&(0x7f0000000040)="3100000000a73f33efc6d1a6230d8379f3b2e6620000000000000000000000ffff7f1794245ee14f62e1", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) 07:25:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000580)="00045d80") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f660070") clone(0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) fstat(r0, &(0x7f0000000240)) 07:25:12 executing program 7: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) bind(r0, &(0x7f00000000c0)=@generic={0xa, "ee185c1dbfe3c3c26f906cd3dfacd5d95c31e744c0ebe9c5059fda0f6ebbe77f94e9a24625f365c3891bf5e224366f8b10a51cd860de95f347b08e7d63b1aa3db5f7be140aff031e9ae81fab4b4ed98f05fdfaf43f6d57263fe4cb99ab0cc328e1584b49cdeb747e0ee8e6b8f3047eafc1fbeaf7265d2c1ed81e0fde4d9d"}, 0x80) 07:25:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgid(0x0) sched_getscheduler(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x309, 0x0, 0x0, {{{@in=@rand_addr, @in=@dev={0xac, 0x14, 0x14}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x6c}, @in6=@dev={0xfe, 0x80}, {}, {}, {}, 0x70bd26}}}, 0xf8}, 0x1}, 0x0) 07:25:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00'}, 0x18) ioctl(r0, 0x800000000008983, &(0x7f0000000000)) 07:25:12 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r1, 0x800000000008982, &(0x7f0000000000)) 07:25:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f28ff8), 0x100000002) r3 = getpgid(0x0) sendfile(r2, r1, &(0x7f0000000000), 0x3f) tkill(r3, 0x1000000000016) [ 86.283670] 8021q: VLANs not supported on lo [ 86.335255] 8021q: VLANs not supported on lo 07:25:12 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40045, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r0) 07:25:12 executing program 1: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}]) 07:25:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 07:25:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x4, 0xda5f2bf85104176e) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x709000) 07:25:12 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) tkill(r1, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) 07:25:12 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe}}) 07:25:12 executing program 1: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}]) 07:25:12 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f760070") unshare(0x2000400) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0xfffffffffffffff7, 0x0) 07:25:12 executing program 4: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) unshare(0x24020400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) timerfd_settime(r3, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000021ff4)={0x2001}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8) [ 87.168003] print_req_error: I/O error, dev loop3, sector 5248 [ 87.174512] print_req_error: I/O error, dev loop3, sector 6272 [ 87.180719] print_req_error: I/O error, dev loop3, sector 7424 07:25:13 executing program 1: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}]) 07:25:13 executing program 2: unshare(0x24020400) r0 = socket$inet_sctp(0x2, 0x100000005, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 07:25:13 executing program 7: r0 = userfaultfd(0x80800) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x1f) 07:25:13 executing program 6: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "01000009d0010100000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 07:25:13 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x81fd) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800002, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x8) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x6000)=nil, 0x6000) 07:25:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f28ff8), 0x100000002) r3 = getpgid(0x0) sendfile(r2, r1, &(0x7f0000000000), 0x3f) tkill(r3, 0x1000000000016) 07:25:13 executing program 5: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000f679f4)=0x53, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000501000)=""/95, &(0x7f0000f12000)=0x5f) 07:25:13 executing program 4: clock_nanosleep(0xfffffffffffffff7, 0x0, &(0x7f0000000040), 0x0) 07:25:13 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x2, 0x22d}) 07:25:13 executing program 1: io_setup(0xba, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)}]) 07:25:13 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x226, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x333, 0x0) 07:25:13 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = getpgid(0x0) tkill(r1, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400)) 07:25:13 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x81, 0x6, 0xffffffff04000001}, 0x2c) 07:25:13 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x5a31}, &(0x7f00000000c0), &(0x7f0000000140)) sendfile(r0, r1, &(0x7f0000000000), 0x101f7fffd) 07:25:13 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000ba6000/0x200000)=nil, 0x200000, 0x2, 0x8012, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') 07:25:13 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}}) 07:25:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x180}}) 07:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000567ffffff000d0000000200000001000000ec0002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 07:25:14 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") fcntl$setlease(r1, 0x400, 0x1) 07:25:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8932, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000040)=ANY=[]}) close(r2) close(r1) 07:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000567ffffff000d0000000200000001000000ec0002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 07:25:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="2957e1311f16f477671070") timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000100)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x101042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f28ff8), 0x100000002) r3 = getpgid(0x0) sendfile(r2, r1, &(0x7f0000000000), 0x3f) tkill(r3, 0x1000000000016) 07:25:14 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000ba6000/0x200000)=nil, 0x200000, 0x2, 0x8012, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') 07:25:14 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) 07:25:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) read$eventfd(r0, &(0x7f00000000c0), 0x8) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000604ffc)) dup2(r0, r2) 07:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000567ffffff000d0000000200000001000000ec0002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 07:25:14 executing program 7: prctl$intptr(0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f0000000100)) 07:25:15 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000ba6000/0x200000)=nil, 0x200000, 0x2, 0x8012, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') 07:25:15 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) 07:25:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000001800)="2f0000001c000567ffffff000d0000000200000001000000ec0002c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 07:25:15 executing program 7: unshare(0x40040000) 07:25:15 executing program 3: open(&(0x7f00000000c0)='./file0\x00', 0x80000000004d40, 0x1000000000040) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000000)=',,bdev+s\x00', 0x9, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000300)) [ 89.051529] IPVS: ftp: loaded support on port[0] = 21 07:25:15 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) 07:25:15 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 07:25:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000540)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000080)=""/88, 0x58}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/230, 0xe6}, {&(0x7f0000000dc0)=""/40, 0x28}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000e80)=""/111, 0x6f}], 0x7, &(0x7f0000000f00)=""/19, 0x13}}, {{&(0x7f0000002340)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002580)=""/145, 0x91}}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=""/52, 0x34}}], 0x4, 0x0, &(0x7f0000002cc0)={0x77359400}) 07:25:15 executing program 1: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x0, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000002ff6)="73797a6b616c6c657202", 0x0, 0xe7, &(0x7f000000df19)=""/231}, 0x48) 07:25:15 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f00000001c0), 0x1ff, &(0x7f0000fff000/0x1000)=nil, 0x3) 07:25:15 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth0_to_bond\x00'}) 07:25:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f0000519fa8)=ANY=[@ANYBLOB="18000000000000000000000000cb2f7b845a4eb0bc00000017000000000000009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) 07:25:15 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000ba6000/0x200000)=nil, 0x200000, 0x2, 0x8012, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') [ 89.383983] IPVS: ftp: loaded support on port[0] = 21 07:25:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x800002, 0x12, r2, 0x0) mbind(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000040)=0x1, 0x9, 0x0) mlock(&(0x7f0000004000/0x5000)=nil, 0x5000) 07:25:15 executing program 5: unshare(0x2000400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000000)="240345", 0x3}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 07:25:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 07:25:15 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0xa00, 0x0) read(r0, &(0x7f0000000a80)=""/20, 0xcf) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1) 07:25:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000300), &(0x7f0000000100)=""/108}, 0x10) 07:25:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000180), 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r1) 07:25:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) r2 = dup2(r1, r1) listen(r2, 0x1) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 07:25:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x1, 0x0) 07:25:15 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe00d3428296901cb1a35d365712ff000000", 0x27) 07:25:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000000c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r2}}, 0x48) 07:25:15 executing program 6: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 07:25:15 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='#'], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/206, &(0x7f0000000140)=0xce) 07:25:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x100000001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000040), 0xf}]) 07:25:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e4f}, 0xb) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") sendto$inet(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f0000000100), 0x0, 0x2, &(0x7f0000000180)={0x2, 0x0, @broadcast=0xffffffff}, 0x709000) 07:25:16 executing program 1: msgsnd(0x0, &(0x7f000035f000), 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(0x0, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/78}, 0x56, 0x0, 0x0) 07:25:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) 07:25:16 executing program 3: unshare(0x2000400) r0 = syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)) 07:25:16 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) write$cgroup_pid(r2, &(0x7f0000000080), 0x0) 07:25:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 07:25:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e) 07:25:16 executing program 6: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 07:25:16 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000000)={0x1, {&(0x7f00005bc000)=""/207, 0xcf, &(0x7f0000000080)=""/50, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 07:25:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020200090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000010000000000000000"], 0x60}, 0x1}, 0x0) 07:25:16 executing program 3: unshare(0x2000400) r0 = syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)) 07:25:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000474fec)={0x1, 0x800000000000003b, 0x7, 0x4}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x10) 07:25:16 executing program 7: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab80100", 0x5, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 07:25:16 executing program 6: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 07:25:16 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) 07:25:16 executing program 2: semop(0x0, &(0x7f0000000080)=[{0x0, 0xffff}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x100000001}, {0x0, 0x7fffffff}], 0x2) 07:25:16 executing program 3: unshare(0x2000400) r0 = syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)) 07:25:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) unshare(0x28020400) r1 = memfd_create(&(0x7f0000000000)="000000008c00000000000000000000", 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) pwritev(r1, &(0x7f0000f50f90), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000001) 07:25:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000700), 0x2d5, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002200)="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", 0x279}], 0x1) 07:25:16 executing program 6: unshare(0x2000400) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) 07:25:16 executing program 7: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab80100", 0x5, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 07:25:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 07:25:17 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001080)={[], 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000fc3000)=0x1) fcntl$setsig(r2, 0xa, 0x12) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001c4, 0x0) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) r4 = dup2(r2, r3) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x16) 07:25:17 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) 07:25:17 executing program 3: unshare(0x2000400) r0 = syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000280)) 07:25:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2001) readv(r0, &(0x7f0000001580)=[{&(0x7f0000001680)=""/213, 0xd5}], 0x1) 07:25:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_FD={0x8, 0x1c}]}, 0x28}, 0x1}, 0x0) 07:25:17 executing program 7: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab80100", 0x5, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 07:25:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000700), 0x2d5, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002200)="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", 0x279}], 0x1) 07:25:17 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000db6ffc)=0x300ff, 0x4) sendto$inet(r0, &(0x7f000028ffc3), 0xfffffffffffffe94, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, 0x0) 07:25:17 executing program 7: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="7f3ab80100", 0x5, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 07:25:17 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0xffffffffffffffd2, 0x4) sendmsg(r0, &(0x7f00000028c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="e10c774b2f0b6306051292c83f2510dc013d8339c4823c75bd2aff5fefad16cce409f819ea29ba65", 0x28}], 0x1, &(0x7f0000000500)}, 0x0) 07:25:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000418000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad", 0x1) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000200180000000000000000000000000000000000000000000000"], 0x30}, 0x0) 07:25:17 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) 07:25:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000700), 0x2d5, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002200)="15bd0b1e63a83b56ddb539fa55efa31dcd6ae0a2d70ce7c093abaa706fc456f1bb1a10363e946dc8d237ecabe44a46506c3b9712b35357b7dc80f8c9d33872624a1a8db314633f3646e044b46834be6b35f7a9406b82fc83892f5b09340cf685d1207b2c128a294dd55c830cf6a97105f93310db96127259a6e53bd5acb9f50276a7e767691b02ac58bb025f9a53c39a8d1a70e0e5cbc0fa997418347c821481686cede5eab1dfc60e60f17e89f29ec8daaf9a59cbde286a886ad1b65663c4dba6f0f1077fc5389a6ce89c96b845ad07ae4e29d4529ca8feb89673a3e6ad824b49fb5d65af1d8f0db4316e09f4200e007369636a019360408e10669126e65fb52892bffb89cf27eabb6a8c9e8b25563bbb327ae229cff3e23a91d5c177117a4793175e55a9ea129e919dcfdb9bf6bfa1cd764396a7788492a525d46e47844d15e6cd75b128f2a94468385429001755441e9df418a65e936ebb75c531e9eab01aef9248aad11e822a96094abffbac657f484e0545092f38929500d2cf6796044c1207f30467a1888d979d8fab3be926cbbb7ac3b29031a13e94a9ff47ed9050b54450803bceba8a65d39b66169f00eee6c1d06dc6f0e0e7ba392a96459d2b1907ec35c6a5d7347287116b6603647c225bbbcf659b0e993c4b5a83f54fc860789c9a0668612c0d10829873f8f88521ca15c8dcf13e9f2adf391a39bcb7e4722f5092c03da288dfc0bec626af4ead0db14914a99a54966e0809dbf1d7ab1b4249f1ad8473ba4a4383481a0a2caff600b2ea78dfee09f4caf2d0a8a8b3735a5a2aa2f1c3553c0c73b5967a0c6155e201178098c25a71d1e888138c0a851299e0516a022abc57c0e2b47124f56f1a218d087e84cf341fb7b9de16d6", 0x279}], 0x1) 07:25:17 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0xffffffffffffffd2, 0x4) sendmsg(r0, &(0x7f00000028c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="e10c774b2f0b6306051292c83f2510dc013d8339c4823c75bd2aff5fefad16cce409f819ea29ba65", 0x28}], 0x1, &(0x7f0000000500)}, 0x0) 07:25:17 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4001000000a65, 0x1e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 07:25:18 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000200), 0x0) 07:25:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 07:25:18 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) 07:25:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000700), 0x2d5, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002200)="15bd0b1e63a83b56ddb539fa55efa31dcd6ae0a2d70ce7c093abaa706fc456f1bb1a10363e946dc8d237ecabe44a46506c3b9712b35357b7dc80f8c9d33872624a1a8db314633f3646e044b46834be6b35f7a9406b82fc83892f5b09340cf685d1207b2c128a294dd55c830cf6a97105f93310db96127259a6e53bd5acb9f50276a7e767691b02ac58bb025f9a53c39a8d1a70e0e5cbc0fa997418347c821481686cede5eab1dfc60e60f17e89f29ec8daaf9a59cbde286a886ad1b65663c4dba6f0f1077fc5389a6ce89c96b845ad07ae4e29d4529ca8feb89673a3e6ad824b49fb5d65af1d8f0db4316e09f4200e007369636a019360408e10669126e65fb52892bffb89cf27eabb6a8c9e8b25563bbb327ae229cff3e23a91d5c177117a4793175e55a9ea129e919dcfdb9bf6bfa1cd764396a7788492a525d46e47844d15e6cd75b128f2a94468385429001755441e9df418a65e936ebb75c531e9eab01aef9248aad11e822a96094abffbac657f484e0545092f38929500d2cf6796044c1207f30467a1888d979d8fab3be926cbbb7ac3b29031a13e94a9ff47ed9050b54450803bceba8a65d39b66169f00eee6c1d06dc6f0e0e7ba392a96459d2b1907ec35c6a5d7347287116b6603647c225bbbcf659b0e993c4b5a83f54fc860789c9a0668612c0d10829873f8f88521ca15c8dcf13e9f2adf391a39bcb7e4722f5092c03da288dfc0bec626af4ead0db14914a99a54966e0809dbf1d7ab1b4249f1ad8473ba4a4383481a0a2caff600b2ea78dfee09f4caf2d0a8a8b3735a5a2aa2f1c3553c0c73b5967a0c6155e201178098c25a71d1e888138c0a851299e0516a022abc57c0e2b47124f56f1a218d087e84cf341fb7b9de16d6", 0x279}], 0x1) 07:25:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 07:25:18 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0xffffffffffffffd2, 0x4) sendmsg(r0, &(0x7f00000028c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="e10c774b2f0b6306051292c83f2510dc013d8339c4823c75bd2aff5fefad16cce409f819ea29ba65", 0x28}], 0x1, &(0x7f0000000500)}, 0x0) 07:25:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4001000000a65, 0x1e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 07:25:18 executing program 2: unshare(0x24020400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) close(r0) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}) 07:25:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x3, 0xf) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 07:25:18 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0xffffffffffffffd2, 0x4) sendmsg(r0, &(0x7f00000028c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="e10c774b2f0b6306051292c83f2510dc013d8339c4823c75bd2aff5fefad16cce409f819ea29ba65", 0x28}], 0x1, &(0x7f0000000500)}, 0x0) 07:25:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007f, 0xa, 0x1000000000000008}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000d000)={0xffffffffffffffff, &(0x7f0000014000)="415dd5eecbd0c416b6a4801f6107051aee80332a73625b1dd5fbae99be0fbe43f8cb934d5bffc07c542a408814a076580d0cf8d41810ae96b6f9314760764e4e390d161ad03c03e75df0195b2786887c7c81889ded6d2cd6e728", &(0x7f0000008fc5)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000)='A\b', &(0x7f0000012000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f000000a000)={r0, &(0x7f0000008000), &(0x7f0000016f02)=""/254}, 0x18) 07:25:18 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4001000000a65, 0x1e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 07:25:18 executing program 4: mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8) 07:25:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 07:25:18 executing program 6: unshare(0x2000400) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='#'], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/206, &(0x7f0000000140)=0xce) 07:25:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000180)=0x8) 07:25:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 07:25:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 07:25:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4008af03, 0x0) 07:25:19 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4001000000a65, 0x1e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x418, &(0x7f00001a7f05)=""/251}, 0x48) 07:25:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 07:25:19 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 07:25:19 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'erspan0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 07:25:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00004cfff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000006fa8)={{0x50f}, 0x1, 0x3}) 07:25:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") flistxattr(r0, &(0x7f0000000040)=""/36, 0x198) 07:25:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4008af03, 0x0) 07:25:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x15, 0x10001) 07:25:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x10000000000001b2) 07:25:19 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 93.399978] random: syz-executor6: uninitialized urandom read (4096 bytes read) 07:25:19 executing program 1: unshare(0x24020400) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000), 0x7) 07:25:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4008af03, 0x0) [ 93.467111] random: syz-executor6: uninitialized urandom read (4096 bytes read) 07:25:19 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x31, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x6b, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x64e) 07:25:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000180)=0x8) 07:25:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 07:25:19 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4008af03, 0x0) 07:25:19 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000001740)={0x1d}, 0x10) bind$can_raw(r0, &(0x7f00000001c0)={0x1d}, 0x10) 07:25:20 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='msdos\x00', 0x40000, &(0x7f00000003c0)) 07:25:20 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 07:25:20 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4600000000000000000004000003000300000000000000000038000000000000000000000000002000010000000000"], 0x32) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 07:25:20 executing program 3: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0x100000001, 0x8001, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) 07:25:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000080000000000"], 0x2a) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x1) 07:25:20 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) close(r1) 07:25:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r1) 07:25:20 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e22, @rand_addr=0x7fff}], 0x10) 07:25:20 executing program 6: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x7) clone(0x40108000, &(0x7f00000019c0), &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) [ 94.213805] sd 0:0:1:0: [sg0] tag#664 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 94.222491] sd 0:0:1:0: [sg0] tag#664 CDB: Read(6) 08 00 00 00 00 00 07:25:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000d39000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) close(r2) 07:25:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r1) [ 94.315811] sd 0:0:1:0: [sg0] tag#664 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 94.316206] IPVS: ftp: loaded support on port[0] = 21 [ 94.324486] sd 0:0:1:0: [sg0] tag#664 CDB: Read(6) 08 00 00 00 00 00 07:25:20 executing program 1: r0 = userfaultfd(0x0) unshare(0x24020400) fcntl$setstatus(r0, 0x4, 0x2000) [ 94.393932] random: crng init done [ 94.587950] IPVS: ftp: loaded support on port[0] = 21 07:25:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000180)=0x8) 07:25:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 07:25:20 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") set_tid_address(&(0x7f0000000040)) 07:25:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYRES16=r1]) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000640)=0x4000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) 07:25:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r1) 07:25:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 07:25:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000), 0x0) write(r1, &(0x7f0000000000), 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x8, 0x2) sendfile(r1, r2, &(0x7f0000b89000), 0x8) 07:25:20 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080), 0x4) 07:25:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r1) 07:25:21 executing program 7: r0 = socket(0x11, 0x80a, 0x300) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000fc8000)}, 0x0) recvmmsg(r0, &(0x7f0000008e40)=[{{&(0x7f0000002240)=@l2, 0x80, &(0x7f0000002580)}}, {{&(0x7f0000002600)=@llc, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000007e40)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 07:25:21 executing program 1: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c9, &(0x7f0000000080), 0x4) 07:25:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='bdev\x00', 0x0, 0x0) 07:25:21 executing program 6: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x7) clone(0x40108000, &(0x7f00000019c0), &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) 07:25:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000000), 0x10000) 07:25:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x30, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @mcast1={0xff, 0x1, [], 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x48}, 0x1}, 0x0) 07:25:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) sendmsg$unix(r3, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}, 0x0) dup2(r4, r2) close(r3) close(r1) 07:25:21 executing program 7: r0 = socket(0x11, 0x80a, 0x300) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000fc8000)}, 0x0) recvmmsg(r0, &(0x7f0000008e40)=[{{&(0x7f0000002240)=@l2, 0x80, &(0x7f0000002580)}}, {{&(0x7f0000002600)=@llc, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000007e40)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 07:25:21 executing program 0: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 07:25:21 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100), &(0x7f0000000180)=0x8) 07:25:21 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000040)) 07:25:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x7ff}) [ 96.104241] IPVS: ftp: loaded support on port[0] = 21 07:25:22 executing program 7: r0 = socket(0x11, 0x80a, 0x300) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000fc8000)}, 0x0) recvmmsg(r0, &(0x7f0000008e40)=[{{&(0x7f0000002240)=@l2, 0x80, &(0x7f0000002580)}}, {{&(0x7f0000002600)=@llc, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000007e40)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 07:25:22 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) 07:25:22 executing program 3: unshare(0x24020400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000340)) 07:25:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$packet(0x11, 0x2000000000000003, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @loopback=0x7f000001}}) 07:25:22 executing program 2: r0 = socket$inet6(0xa, 0x2000000803, 0x7) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x4, "4d06"}], 0x18}}], 0x1, 0x0) 07:25:22 executing program 7: r0 = socket(0x11, 0x80a, 0x300) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000fc8000)}, 0x0) recvmmsg(r0, &(0x7f0000008e40)=[{{&(0x7f0000002240)=@l2, 0x80, &(0x7f0000002580)}}, {{&(0x7f0000002600)=@llc, 0x80, &(0x7f0000002a00), 0x0, &(0x7f0000007e40)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) 07:25:22 executing program 1: mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = open(&(0x7f0000fb8ff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0x54, 0x0) fcntl$notify(r0, 0x402, 0x8) 07:25:22 executing program 6: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x7) clone(0x40108000, &(0x7f00000019c0), &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) 07:25:22 executing program 3: futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) 07:25:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="200000001d00ffff0000000000000000050000000c00030008110000"], 0x1}, 0x1}, 0x0) 07:25:22 executing program 2: r0 = add_key(&(0x7f0000015000)='logon\x00', &(0x7f0000014000)={0x73, 0x79, 0x7a}, &(0x7f0000014000)="578ea44f6ba3a636ffe97fbf75d7f372f0e7dc32856ed7aba5b6170997cd8b3e7f4fb91f56a1d51d0440a1121990753224a83c0fabcdf91de1ac17b66df943ab65c55d35edaefad0633a", 0x4a, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 07:25:22 executing program 7: unshare(0x24020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f000031aff8)={r0}) 07:25:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000580), 0x10000000) [ 96.752888] IPVS: ftp: loaded support on port[0] = 21 07:25:22 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f00000009c0)=@sco, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000000a40)=""/36, 0x24}, {&(0x7f0000002100)=""/202, 0xca}, {&(0x7f0000001f40)=""/126, 0x7e}, {&(0x7f0000002200)=""/140, 0x8c}], 0x6, &(0x7f00000023c0)=""/113, 0x71}}, {{&(0x7f0000002440)=@nfc, 0x80, &(0x7f0000000a80)=[{&(0x7f00000030c0)=""/201, 0xc9}, {&(0x7f0000002740)=""/206, 0xce}], 0x2, &(0x7f00000024c0)=""/139, 0x8b}}, {{&(0x7f0000002840)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/115, 0x73}, {&(0x7f0000002940)=""/227, 0xe3}, {&(0x7f0000002a40)=""/111, 0x6f}, {&(0x7f0000002d00)=""/172, 0xac}, {&(0x7f0000002e80)=""/135, 0x87}], 0x5, &(0x7f0000002f40)=""/102, 0x66}}], 0x3, 0x0, &(0x7f0000000c40)={0x77359400}) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvfrom$ipx(r1, &(0x7f0000000040)=""/47, 0x2f, 0x0, &(0x7f0000000180)={0x4, 0x0, 0x0, "96a7eb1b26c5"}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000540)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x50, &(0x7f00000009c0), 0x259, &(0x7f0000000080)=""/88, 0x58}}, {{&(0x7f0000000ac0)=@pppoe={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/230, 0xe6}, {&(0x7f0000000dc0)=""/40, 0x28}, {&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/101, 0x65}, {&(0x7f0000000e80)=""/111, 0x6f}], 0x7, &(0x7f0000000f00)=""/19, 0x13}}, {{&(0x7f0000002340)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f00000023c0), 0x4c, &(0x7f0000002580)=""/145, 0x91}}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b40)=""/52, 0x34}}], 0x4, 0x0, &(0x7f0000002cc0)={0x77359400}) 07:25:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:25:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000c86000), &(0x7f0000000040)=0x74) 07:25:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) shutdown(r0, 0x100000000001) 07:25:22 executing program 5: rt_sigaction(0xc, &(0x7f0000000040)={0x100000001}, &(0x7f0000000080), 0x8, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) 07:25:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x5, 0x0) shutdown(r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @ipv4={[0xfec0], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}], 0x1c) 07:25:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) io_setup(0x1008, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) 07:25:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x1, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, &(0x7f0000000080), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x15, 0x0, 0x0, 'teql0\x00', 'bridge0\x00', 'veth0_to_bridge\x00', '\x00', @empty, [], @random="7d855f2b3fce", [], 0xa0, 0x118, 0x148, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x2, 0x0, "bc3d7c06aee9fe3070472aa06df3e1b705ca7658ab0d48dc198400351364cd6a3f007bb3c654ba02af7cddc865ad78e97455f369190682b7c19ff54108305512"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x250) 07:25:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[]}, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @mcast1={0xff, 0x1, [], 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0x48}, 0x1}, 0x0) 07:25:23 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, &(0x7f00000001c0)=""/231, 0xe7, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 07:25:23 executing program 6: set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x7) clone(0x40108000, &(0x7f00000019c0), &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) [ 97.409526] IPVS: ftp: loaded support on port[0] = 21 07:25:23 executing program 3: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000008) fcntl$notify(r1, 0x402, 0x1) fcntl$notify(r1, 0x402, 0x0) 07:25:23 executing program 2: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x12}, 0x10) 07:25:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000010ec4)={0x18, 0x2d, 0x80aff, 0x0, 0x0, {0x1000000000001}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 07:25:23 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f00007e0000)=[{&(0x7f0000007000)="fd20", 0x2}], 0x1, &(0x7f0000334f28)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2283, &(0x7f0000007000)) 07:25:23 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write(r0, &(0x7f00000000c0)="8d", 0x1) read(r0, &(0x7f00000001c0)=""/52, 0x0) 07:25:23 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x40) write(r0, &(0x7f0000000180), 0x0) 07:25:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x1, 0x1c0, [0x0, 0x20000800, 0x20000830, 0x20000860], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'gre0\x00', 'erspan0\x00', 'lo\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0x100, [@owner={'owner\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x238) 07:25:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) 07:25:23 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000e39ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000200)) 07:25:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x800004000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = inotify_init() ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x3) 07:25:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a6bd19ca420f485ad5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xb, 0x15, 0x0, 0x2}, [@ldst={0x7, 0x0, 0x1b2ae9, 0x0, 0x0, 0x0, 0xffffffe4}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 07:25:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x1, 0x1c0, [0x0, 0x20000800, 0x20000830, 0x20000860], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'gre0\x00', 'erspan0\x00', 'lo\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0x100, [@owner={'owner\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x238) [ 97.807762] Not allocated shadow for addr ffff8801d3a14000 (page ffffea000af5c780) [ 97.815513] Attempted to access 2742 bytes [ 97.819776] ------------[ cut here ]------------ [ 97.824528] kernel BUG at mm/kmsan/kmsan.c:1378! [ 97.829289] invalid opcode: 0000 [#1] SMP PTI [ 97.833782] Dumping ftrace buffer: [ 97.837320] (ftrace buffer empty) [ 97.841026] Modules linked in: [ 97.844222] CPU: 1 PID: 4514 Comm: syz-fuzzer Not tainted 4.17.0+ #6 [ 97.850707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.860084] RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 [ 97.865702] RSP: 0018:ffff8801a891e738 EFLAGS: 00010086 [ 97.871065] RAX: 000000000000001e RBX: 0000000000000740 RCX: 0000000000000000 [ 97.878335] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 97.885605] RBP: ffff8801a891e750 R08: 0000000000000000 R09: 0000000000000001 [ 97.892876] R10: 0000000000000000 R11: ffffffff86575770 R12: ffff8801d3a14000 [ 97.900146] R13: 0000000000000ab6 R14: 0000000000000001 R15: 0000000000000ab6 07:25:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x1, 0x1c0, [0x0, 0x20000800, 0x20000830, 0x20000860], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'gre0\x00', 'erspan0\x00', 'lo\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0x100, [@owner={'owner\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x238) [ 97.907423] FS: 000000c4200291e8(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 97.915648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.921526] CR2: 0000000000701138 CR3: 000000019729e000 CR4: 00000000001406e0 [ 97.928794] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.936066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.943338] Call Trace: [ 97.945942] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 97.951145] kmsan_unpoison_shadow+0x66/0xb0 [ 97.955566] virtqueue_get_buf_ctx+0x73f/0xa20 [ 97.960162] virtqueue_get_buf+0x72/0x90 [ 97.964223] start_xmit+0x293/0x29c0 [ 97.967945] ? packet_rcv+0x2210/0x2210 [ 97.971926] ? virtnet_close+0x2c0/0x2c0 [ 97.975995] dev_hard_start_xmit+0x5f6/0xc80 [ 97.980418] sch_direct_xmit+0x578/0x8f0 [ 97.984489] __qdisc_run+0x1822/0x3730 [ 97.988389] __dev_queue_xmit+0x2069/0x3540 [ 97.992725] dev_queue_xmit+0x4b/0x60 [ 97.996531] ip_finish_output2+0x12a8/0x1480 [ 98.000941] ip_finish_output+0xcbc/0x1000 [ 98.005180] ip_output+0x505/0x5d0 07:25:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x1, 0x1c0, [0x0, 0x20000800, 0x20000830, 0x20000860], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'gre0\x00', 'erspan0\x00', 'lo\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xb0, 0xb0, 0x100, [@owner={'owner\x00', 0x18}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x238) [ 98.008717] ? ip_mc_finish_output+0x3b0/0x3b0 [ 98.013299] ? ip_finish_output+0x1000/0x1000 [ 98.017793] ip_queue_xmit+0x1b0f/0x1d00 [ 98.021854] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 98.027309] ? __skb_clone+0x6ec/0x990 [ 98.031210] ? ip_output+0x5d0/0x5d0 [ 98.034933] tcp_transmit_skb+0x3db5/0x5350 [ 98.039276] tcp_write_xmit+0x2d81/0xb200 [ 98.043467] __tcp_push_pending_frames+0x124/0x400 [ 98.048415] tcp_data_snd_check+0x184/0xe60 [ 98.052753] ? __kfree_skb+0x23a/0x280 [ 98.056650] tcp_rcv_established+0x20cc/0x2bb0 [ 98.061242] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 98.066615] tcp_v4_do_rcv+0x6d2/0xd90 [ 98.070512] ? inet_sk_rx_dst_set+0x2c0/0x2c0 [ 98.075018] __release_sock+0x2dc/0x680 [ 98.078999] release_sock+0x99/0x2a0 [ 98.082715] tcp_sendmsg+0xd6/0x100 [ 98.086342] ? tcp_sendmsg_locked+0x6610/0x6610 [ 98.091013] inet_sendmsg+0x3fc/0x760 [ 98.094814] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 98.100185] ? inet_getname+0x4a0/0x4a0 [ 98.104160] sock_write_iter+0x3bc/0x470 [ 98.108229] ? sock_read_iter+0x480/0x480 [ 98.112383] __vfs_write+0x808/0x9f0 [ 98.116103] vfs_write+0x467/0x8c0 [ 98.119647] __x64_sys_write+0x1bf/0x3e0 [ 98.123706] ? ksys_write+0x360/0x360 [ 98.127504] do_syscall_64+0x15b/0x230 [ 98.131389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 98.136567] RIP: 0033:0x47fc44 [ 98.139745] RSP: 002b:000000c42065d658 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.147456] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fc44 [ 98.155447] RDX: 0000000000008c25 RSI: 000000c4342acfee RDI: 0000000000000003 [ 98.162711] RBP: 000000c42065d6a8 R08: 0000000000000000 R09: 0000000000000000 [ 98.169975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.177241] R13: 0000000000000040 R14: 0000000000000011 R15: 000000c42014a1b8 [ 98.184511] Code: 75 29 48 c7 c7 59 38 97 8a 31 c0 e8 fd 4c 80 ff 80 3c 25 f8 93 53 8b 00 75 11 48 c7 c7 89 38 97 8a 31 c0 4c 89 fe e8 e2 4c 80 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 [ 98.203710] RIP: kmsan_get_shadow_address+0x1ce/0x1f0 RSP: ffff8801a891e738 [ 98.210805] ---[ end trace 894cc5025371f9d9 ]--- [ 98.215547] Kernel panic - not syncing: Fatal exception in interrupt [ 98.223281] Dumping ftrace buffer: [ 98.226818] (ftrace buffer empty) [ 98.230514] Kernel Offset: disabled [ 98.234128] Rebooting in 86400 seconds..